Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File:                     vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier:          mtAzUI/IIckosqRE1lvmz16Ks9f/ivm1BHNSFi9YcxA=
Subject key identifier:   1E:B5:87:29:AE:75:56:1F:BD:EB:A9:09:D1:E6:03:EA:F0:1C:90:D5
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer:       /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial:       02D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number:          02D4
Signing time:             Thu 03 Jul 2025 03:54:13 +0000
Manifest this update:     Thu 03 Jul 2025 03:54:12 +0000
Manifest next update:     Sat 05 Jul 2025 03:54:12 +0000
Files and hashes:         1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: arijm1xtkCROksbkZD+XCLpssj6yb5swDHTY7GNyBwU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 03:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365B37DAF, serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
        Validity
            Not Before: Jul  3 03:54:12 2025 GMT
            Not After : Jul  5 03:54:12 2025 GMT
        Subject: CN=6865fee4-92ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:20:cf:d0:2a:0d:03:53:48:50:72:dc:e6:
                    34:bf:da:cb:e9:7c:b2:a8:92:18:52:d3:6f:8e:01:
                    8c:07:5a:73:9d:2b:8d:d4:43:c4:e0:ee:ef:dc:78:
                    79:ca:4b:f9:00:f3:83:0e:52:9b:06:f5:23:db:90:
                    57:0f:d2:01:00:7d:e3:c5:b6:49:9b:c3:89:63:b4:
                    bd:2f:54:c9:9c:33:43:5f:a9:f5:5c:e9:7a:c9:51:
                    2b:38:52:34:36:67:a0:88:ef:94:0b:be:88:95:f4:
                    0c:58:9c:c1:2d:2e:4d:99:d8:79:cc:e4:24:29:b9:
                    5d:82:c5:66:c1:c1:58:cc:a7:7a:73:eb:38:54:51:
                    38:b1:fa:5e:b3:94:ad:8e:41:29:81:8f:8b:f3:66:
                    a3:28:a1:64:8c:9e:ff:d3:48:04:6d:de:b1:19:f3:
                    02:65:7d:f4:1a:e8:0b:1e:74:22:a2:74:30:f1:b1:
                    3b:a2:72:bc:f5:45:9e:e7:e2:13:0e:e9:25:3b:5b:
                    57:2c:b8:49:2f:86:7e:d8:d6:14:f0:22:44:6a:43:
                    4c:72:f0:5d:f4:55:50:63:ea:53:ae:0a:75:f1:09:
                    dc:8e:78:36:31:c1:c4:df:40:f8:d3:46:b6:a7:03:
                    25:12:68:91:98:93:c9:ff:d4:e2:b5:bf:f2:08:30:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B5:87:29:AE:75:56:1F:BD:EB:A9:09:D1:E6:03:EA:F0:1C:90:D5
            X509v3 Authority Key Identifier:
                keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2f:fb:96:c7:63:c2:3a:63:ab:0d:89:2e:a0:92:37:db:96:
         8b:bf:0b:f2:1e:a6:ad:e0:47:f0:e3:de:f1:4a:0f:5d:68:ba:
         0b:19:f1:7b:3c:98:9d:3b:14:e0:76:51:a3:26:a7:71:8e:5d:
         9a:19:ef:c9:01:17:53:45:83:89:dc:80:4b:63:c8:46:0f:e4:
         a3:26:8b:df:0f:d3:ab:aa:3f:37:c3:00:34:fb:33:b8:92:f3:
         7a:e8:bc:fb:22:21:b0:e5:7f:cd:98:cf:a4:c8:61:c0:fe:35:
         ad:77:ff:25:26:87:de:ed:ef:a8:59:c1:79:1c:52:f7:7e:57:
         c9:4f:07:30:3b:4f:39:81:ad:5f:50:67:d9:8d:13:fb:b1:0d:
         b5:6d:fa:d8:06:43:66:b8:a4:7e:bf:f6:b0:b3:be:7f:31:cb:
         73:be:0f:e9:9e:e6:f3:5d:a6:21:f5:f9:5f:d3:31:c4:f8:2a:
         43:32:1a:7b:8e:ff:96:a8:bc:70:53:0a:e9:64:f8:31:c6:6e:
         90:f8:26:76:5c:a3:d9:45:b6:f3:dc:c7:26:a9:a0:14:1b:2a:
         ac:f3:16:24:3f:11:71:2e:f2:3c:b5:66:dc:a3:2b:a4:3b:93:
         83:42:02:82:b8:61:11:f7:07:d3:1c:37:23:b2:fa:17:49:71:
         39:a3:c0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:35:08 2025 by rpki-client