Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
File:                     qEB8UNNVEmlZXYTPEkOl86_4EHA.mft (raw, json)
Hash identifier:          qNflU6MCfBYvux2BNvU99+sNIdcpNdR+ctC5I0zamws=
Subject key identifier:   FB:41:7F:38:98:79:79:95:7C:1B:64:26:37:14:07:00:0D:AD:2F:1B
Authority key identifier: A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
Certificate issuer:       /CN=F365C895RI/serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
Certificate serial:       08B8
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
Manifest number:          08B6
Signing time:             Sun 11 May 2025 01:28:09 +0000
Manifest this update:     Sun 11 May 2025 01:28:08 +0000
Manifest next update:     Tue 13 May 2025 01:28:08 +0000
Files and hashes:         1: qEB8UNNVEmlZXYTPEkOl86_4EHA.crl (hash: Rn+7EKvUk59sNrdcw1e3K/QqcVCXhsnkRUolhNyFR7U=)
                          2: 8067F0207FD711EFBF8541BB762E951A.roa (hash: Kmkp9sDKLjld1I/1LDCmjPC0EteNsXcKQLhGKa3YnMU=)
                          3: 42E0DF7E85E011E989E4CF0DF8AEA228.roa (hash: ub04iL+FdrPKe6xm0DlU5EWb8IsSt+07XZ7Am9PMCkI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
                          rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2232 (0x8b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C895RI, serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
        Validity
            Not Before: May 11 01:28:08 2025 GMT
            Not After : May 13 01:28:08 2025 GMT
        Subject: CN=681ffd29-e78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:bb:ba:66:ac:b8:c8:a7:ec:8d:a3:74:dd:
                    85:32:9f:98:2f:58:8b:aa:f2:ce:02:b3:3b:c1:1a:
                    ef:da:53:18:6e:d8:07:7c:3a:04:29:4a:e3:62:43:
                    d0:73:d1:fc:cf:d1:41:37:80:ff:c6:8b:a9:cf:67:
                    f4:43:48:59:ff:54:39:c2:e5:c8:8a:44:c2:3e:23:
                    15:5c:24:5b:41:21:c2:80:cc:16:f9:38:f9:c4:7a:
                    66:85:2a:7c:fe:76:04:eb:f1:10:f0:f0:cc:70:ab:
                    4d:0a:69:d2:d1:cd:b1:45:4d:d2:6d:fc:d2:27:12:
                    4e:96:a6:02:6e:10:64:19:44:cc:66:52:51:01:68:
                    08:af:02:51:21:77:b9:2c:31:44:eb:ae:78:9c:3c:
                    8b:ce:c0:00:c7:a2:92:75:a5:e2:e1:c6:8f:89:1c:
                    ce:24:b9:21:e0:87:fa:97:68:52:e5:eb:b7:dc:04:
                    95:c2:c3:89:a9:85:a3:cd:7a:ee:4b:3d:b3:ad:04:
                    dc:ed:0b:ac:d4:2f:2e:8c:b1:b5:ce:b6:30:5b:7e:
                    c6:97:e9:07:bc:27:a0:34:79:4e:57:76:16:3a:d7:
                    b9:f9:19:95:76:a3:8a:16:ca:5c:ec:5d:c4:99:f8:
                    47:a9:e9:fa:20:a6:6a:b5:0d:18:38:02:06:4e:c1:
                    ec:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:41:7F:38:98:79:79:95:7C:1B:64:26:37:14:07:00:0D:AD:2F:1B
            X509v3 Authority Key Identifier:
                keyid:A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:67:66:7e:99:e1:9a:a4:e7:63:b4:fe:03:4b:d3:0e:7e:
         c6:4f:0f:e2:d4:f4:1a:88:d5:b4:84:a8:f2:01:81:07:ef:df:
         74:cf:dd:7c:76:16:09:04:79:17:1a:fc:2b:87:97:6d:4c:73:
         74:49:41:3b:08:8e:8a:5b:1d:c2:d1:2e:9e:5a:1d:7c:09:b1:
         5e:6a:0a:d9:a6:17:8e:b4:9c:76:01:c1:4b:51:ca:2c:05:d4:
         1c:a4:93:c5:5e:91:c4:31:93:cc:7c:cf:e4:22:d1:5e:2b:ba:
         5d:78:7d:ef:76:2b:84:c2:58:00:ba:fb:26:2a:f1:d9:96:91:
         f4:43:b9:69:ef:9e:d2:f0:66:7d:41:c4:70:6c:42:53:cb:fe:
         08:40:91:1d:a1:dc:f4:a1:5a:a9:7c:80:7f:e3:9e:b3:60:1e:
         10:db:cc:27:4c:f1:c6:c7:b6:18:13:dd:66:cc:0e:6a:10:af:
         69:0d:8d:c1:1c:ca:00:12:20:65:cb:9b:65:02:4a:3b:04:5f:
         8a:41:f7:12:0c:d4:70:37:99:55:9f:88:a1:2e:1c:87:32:5c:
         d1:e4:6f:3f:a2:d9:7b:6a:2b:3c:7f:b3:cf:7f:40:44:96:d6:
         f9:a8:12:39:df:53:33:b5:b0:2e:ed:78:f3:35:03:ac:4a:fb:
         71:53:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:14:03 2025 by rpki-client