Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
File:                     2pwGSilziJ8Q063Z_fEqiDYTZL8.mft (raw, json)
Hash identifier:          9HadAJSTh4NoU0K/boY+Maewk7mun7VGVCg72MJolb8=
Subject key identifier:   78:E2:5D:FC:D0:F5:34:16:20:1D:B1:12:F7:9D:26:D8:95:47:F5:70
Authority key identifier: DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
Certificate issuer:       /CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Certificate serial:       0525
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
Manifest number:          0524
Signing time:             Sat 23 Aug 2025 02:46:54 +0000
Manifest this update:     Sat 23 Aug 2025 02:46:53 +0000
Manifest next update:     Mon 25 Aug 2025 02:46:53 +0000
Files and hashes:         1: 2pwGSilziJ8Q063Z_fEqiDYTZL8.crl (hash: PMwrh5Er9ikQDgSYtv1hpVgb09aoZ4WajglaNXVkZRY=)
                          2: 58BE8A3A92FD11EC9A66148E5A40D577.roa (hash: p/Nwn6WbMbiqBh52brLCSrPTezSi2w7+mCvrJxVr0pE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654E24AF, serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
        Validity
            Not Before: Aug 23 02:46:53 2025 GMT
            Not After : Aug 25 02:46:53 2025 GMT
        Subject: CN=68a92b9d-982b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:95:9a:bc:9d:70:bb:3b:8c:0e:18:02:79:
                    ff:36:ad:ac:7f:5b:2d:e8:00:31:b1:e9:2f:b1:bf:
                    db:92:80:ae:e7:0a:44:28:db:c3:1d:2b:cc:43:75:
                    bb:6e:51:4b:ed:bc:8b:4b:40:9b:64:de:38:11:8d:
                    b8:1c:45:44:49:eb:60:ad:25:68:91:39:b0:76:ad:
                    29:f4:ff:e2:28:47:6e:88:73:be:cd:c9:16:86:fc:
                    59:bf:e7:e0:ab:32:65:a8:c7:c4:ce:7e:a5:f6:c1:
                    4f:9f:72:59:60:6b:6d:eb:6b:22:28:8b:19:e0:93:
                    67:78:29:72:4c:19:74:0a:ce:c2:7d:f8:be:5b:0d:
                    44:bc:f5:2a:b3:a2:20:ba:4b:4e:d2:43:9a:56:3c:
                    5d:b4:59:73:57:15:b6:de:95:f2:8b:39:ae:d8:e2:
                    87:90:de:cd:26:e5:6a:ff:4e:b9:da:48:9e:cb:e2:
                    ec:c3:fb:81:34:fb:57:48:22:af:4f:7e:45:44:29:
                    e4:5f:0d:3a:dd:a7:11:a7:df:23:a2:a5:26:f3:73:
                    3c:c8:b7:c5:32:50:52:3e:52:b4:8d:ec:da:0f:78:
                    e2:01:00:4f:d5:f4:bc:75:20:17:b3:0e:f7:9e:05:
                    83:9a:ee:92:cf:e1:ec:54:39:c3:35:54:f9:8c:99:
                    e9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E2:5D:FC:D0:F5:34:16:20:1D:B1:12:F7:9D:26:D8:95:47:F5:70
            X509v3 Authority Key Identifier:
                keyid:DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2a:25:d7:44:9e:7e:40:44:26:a8:4a:2f:32:24:06:07:af:
         7c:2f:92:45:6b:8d:56:dd:80:20:91:b8:cd:84:07:ca:b7:4f:
         b0:80:19:78:86:aa:b7:2e:1e:44:b6:6f:d8:7f:9c:3b:92:36:
         b9:61:94:a9:52:24:c9:05:18:98:57:f5:b9:59:62:ca:1f:7d:
         0a:63:c9:6e:f7:5f:16:9c:4c:c7:b7:aa:35:3b:4b:c3:37:1c:
         69:da:b0:ec:83:31:dc:92:e3:c6:de:1c:b4:ac:c1:dd:44:69:
         7b:09:5f:8f:47:ee:b3:60:e3:b5:7f:f6:ab:ef:5b:98:96:f8:
         97:ed:19:61:05:e0:f9:49:c5:cd:fe:c2:c6:36:76:6e:20:cf:
         0d:c9:bd:1a:26:b2:c1:6a:bd:d4:63:58:2f:df:60:c7:37:c7:
         5e:08:48:08:0d:79:05:5c:a9:02:70:00:b3:a9:87:fc:a3:91:
         9c:6d:90:c1:f6:b6:32:08:c9:b2:fc:68:ff:aa:d2:93:ea:5f:
         95:ac:f2:6a:ed:88:c4:e4:2d:c9:6a:51:67:7b:7c:0c:64:45:
         ec:a2:a9:3a:0c:c3:9d:63:a9:d5:7d:4b:e9:8b:aa:e4:85:7c:
         57:c7:02:a4:5b:c7:07:f1:05:3e:de:57:d9:5c:93:e5:62:84:
         a1:3f:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:35 2025 by rpki-client