Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
File:                     UJroMu1ribFqno9wWdMQAuvfVRY.mft (raw, json)
Hash identifier:          9udWBFu3KM9VJLF+wTOzwO77J+k0MenVR3ZWsMixvus=
Subject key identifier:   CD:38:C3:0D:C3:06:4B:8F:08:C7:3E:58:B4:48:B7:C9:50:46:EF:2D
Authority key identifier: 50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16
Certificate issuer:       /CN=F3652893AF/serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
Certificate serial:       0153
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
Manifest number:          014E
Signing time:             Tue 01 Jul 2025 04:50:13 +0000
Manifest this update:     Tue 01 Jul 2025 04:50:12 +0000
Manifest next update:     Thu 03 Jul 2025 04:50:12 +0000
Files and hashes:         1: UJroMu1ribFqno9wWdMQAuvfVRY.crl (hash: TzVR2W8TcItAP44lEvxFIZUhClMkEPMraM4WwLwkjJU=)
                          2: 25947A965EEF11EFA8CE8E84762E951A.roa (hash: w3FPrtTUNywICvBHUNi6Z9IDVeEht1kgjHG+aqy64j8=)
                          3: 0B46727E5EF011EF8D699F89762E951A.roa (hash: nreAgp5N7RBReJoLfOebgUnXd2HE0IWmlaF+azLEc+E=)
                          4: D1B2AC1C5EEF11EF93C62C89762E951A.roa (hash: vRmvo/WQ/7K1j/7ZFTOcVY6BLEhOIM6uf+eDFKl2Nlc=)
                          5: D2BD519A6F5F11EFB5A556BC762E951A.roa (hash: eDObOCF32CjsmNceS5K7zEOzteA210reg1RT/KbBTaY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 04:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652893AF, serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
        Validity
            Not Before: Jul  1 04:50:12 2025 GMT
            Not After : Jul  3 04:50:12 2025 GMT
        Subject: CN=68636905-ff5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:c8:e6:a8:44:2a:1a:07:ce:22:bd:86:60:
                    77:eb:7c:a5:a1:10:e1:42:73:5d:0c:d5:be:b8:34:
                    5c:2c:c6:05:62:95:fc:fe:c2:eb:99:83:35:40:3f:
                    17:2e:b0:54:1e:73:72:2e:78:09:de:5b:fa:0a:c7:
                    51:85:ab:32:78:3f:4b:7e:b7:0c:6c:47:fd:cf:3b:
                    6d:04:60:fa:f6:30:40:ec:f5:02:ec:32:74:05:95:
                    81:b8:96:e8:83:2e:fd:c7:79:7f:f0:d4:da:5e:77:
                    d7:ed:a6:99:76:cb:2a:0e:52:26:8e:c0:f5:29:0e:
                    bf:3e:27:28:b5:01:4b:29:d8:3f:b5:6c:17:30:76:
                    b2:1e:3e:ef:3c:65:27:13:2d:82:c2:75:46:05:18:
                    40:81:49:27:71:8e:9d:39:0f:72:df:93:37:3d:bb:
                    39:61:36:91:70:eb:bd:92:1e:e0:30:6c:0f:a9:25:
                    0f:55:5e:bc:b9:a8:99:d3:bd:ed:c3:56:46:1b:20:
                    2a:50:86:42:37:15:65:72:d7:63:a9:28:c2:bb:d4:
                    e7:c3:08:62:1c:47:94:7b:9e:aa:18:85:5a:7d:2a:
                    69:83:5a:6a:d4:fb:67:85:4b:34:fb:3c:b4:04:60:
                    6b:27:00:72:c6:ae:68:01:b3:f7:8d:45:67:62:98:
                    41:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:38:C3:0D:C3:06:4B:8F:08:C7:3E:58:B4:48:B7:C9:50:46:EF:2D
            X509v3 Authority Key Identifier:
                keyid:50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:4e:0c:ad:4e:8b:4a:8b:d6:81:9b:2a:b1:8d:38:02:78:fa:
         1a:79:d1:d5:08:5a:37:13:7b:f2:e2:74:b9:8c:f5:e8:6e:4d:
         f0:9a:43:d6:4c:c5:48:19:9c:2e:ce:1b:84:5a:4f:8c:bf:9a:
         a5:11:32:7c:c3:2a:ec:72:4e:11:84:d7:4f:5e:c3:e1:be:6a:
         a8:41:df:61:62:a9:ae:af:f0:d7:31:00:4f:04:16:75:96:a5:
         cd:d0:d3:60:a3:fc:7a:59:a5:34:3d:69:76:35:08:9a:32:b5:
         66:98:fe:ea:52:5c:52:c7:aa:69:53:41:17:6b:f6:ab:c3:b3:
         9f:16:a2:23:08:98:5c:04:7e:ec:a9:3a:76:70:fe:1a:5b:c7:
         4d:2d:30:ab:a6:94:a8:34:8a:d1:3d:35:ff:cf:fa:97:55:d4:
         b8:6d:cf:da:1d:8c:dc:da:cb:16:1f:62:fe:23:0e:2b:b7:70:
         14:ca:69:b7:8e:27:97:7a:35:ce:36:03:ea:4a:4f:d9:26:a7:
         d3:99:5b:88:e6:00:fc:83:c8:ad:c9:c1:3f:ed:37:d8:00:a5:
         0d:95:cd:11:d9:6c:8b:56:75:97:bc:45:6e:11:68:fb:93:18:
         eb:0e:02:54:23:d9:da:23:fe:cd:e7:c7:b4:b9:05:ea:68:57:
         39:62:3a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:48:58 2025 by rpki-client