Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File:                     3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier:          ElshIKJS2/ZtWhDnfckXjVhhqV0jIAIzQoyxA6USG90=
Subject key identifier:   33:01:A6:88:32:E9:C0:22:EA:E3:7D:C9:24:EE:ED:1F:90:56:67:93
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer:       /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial:       02A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number:          02A5
Signing time:             Sun 11 May 2025 03:52:06 +0000
Manifest this update:     Sun 11 May 2025 03:52:05 +0000
Manifest next update:     Tue 13 May 2025 03:52:05 +0000
Files and hashes:         1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: E5X4kqdjzX4TqVlePKHycd0w6+Ani/fIEnCHv5m36rI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
        Validity
            Not Before: May 11 03:52:05 2025 GMT
            Not After : May 13 03:52:05 2025 GMT
        Subject: CN=68201ee6-7d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:79:1f:c7:8b:ef:b8:11:d9:29:07:c1:86:ba:
                    7d:bb:24:82:c6:5c:41:c3:05:e3:9f:91:cd:f8:d4:
                    9b:97:91:14:75:68:a4:22:fc:40:c4:fe:3b:42:82:
                    1a:98:b9:57:cc:4a:5a:d1:0a:4b:64:a2:b0:f8:74:
                    47:20:5d:9e:51:05:26:b8:69:bd:2f:83:02:7f:fc:
                    34:e6:f3:ab:be:38:1b:48:a0:41:c3:5c:80:4f:fe:
                    8a:92:8f:19:c4:d3:29:f3:59:a0:7d:de:d6:5f:8d:
                    16:5f:5f:06:c4:2f:5b:e9:ca:83:3b:9e:ed:80:e9:
                    50:e9:35:a0:bb:38:58:35:12:eb:93:4b:92:c0:5b:
                    62:5b:54:c6:88:38:10:7e:72:ea:5a:76:54:dd:b6:
                    50:29:ef:21:62:8c:0a:39:6b:8a:67:c8:a6:c8:41:
                    ad:7d:86:72:71:85:34:0b:d3:ca:40:e4:9e:7a:6f:
                    a6:6f:65:97:90:05:25:84:95:a2:77:13:5c:f7:3d:
                    6b:51:10:b0:d0:9c:d2:5f:c4:17:8d:9e:38:8c:82:
                    52:7f:07:67:ce:20:72:a3:0f:c2:56:c9:8c:ad:f4:
                    9c:4d:de:0a:ed:cf:61:77:1c:d2:88:b2:b5:65:11:
                    99:e7:97:40:b9:5d:c4:a5:df:cd:cb:91:95:94:8c:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:01:A6:88:32:E9:C0:22:EA:E3:7D:C9:24:EE:ED:1F:90:56:67:93
            X509v3 Authority Key Identifier:
                keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d4:9d:0d:73:69:dc:97:a6:54:f0:93:fb:88:03:ee:1e:8c:
         40:33:fa:79:c6:ed:c8:3b:62:d2:3c:28:9e:fa:1d:fa:3a:1f:
         89:e6:34:eb:04:51:e9:2a:2c:e5:9e:be:2b:73:82:b8:22:f2:
         ff:58:db:36:76:35:59:b6:79:59:ba:87:a9:69:9d:a0:c5:c9:
         4e:3c:ac:48:2f:d5:03:df:ca:c8:6a:d7:85:ca:9f:da:d0:0c:
         bc:5c:0e:03:7c:f5:30:62:16:fb:b8:b9:30:7c:47:12:18:2a:
         77:c7:e8:d0:f6:51:57:ca:4b:5f:2f:92:e7:8e:0e:e4:42:61:
         e7:e5:86:08:c5:ab:7f:06:0b:8b:a7:a5:64:ee:a0:85:8f:71:
         58:ab:92:97:7a:da:8d:8c:13:cc:43:41:17:3f:7a:c0:d0:0e:
         73:53:43:8b:c0:0f:5e:1a:f1:a3:9a:3d:c4:d7:62:7a:d5:b6:
         1e:36:35:ab:d1:cb:bc:20:8f:c4:24:8b:10:25:42:9d:b5:92:
         5a:51:39:68:0d:5a:85:ad:e6:ae:20:f1:76:66:27:cd:42:77:
         61:75:a3:98:e4:55:cb:c3:64:72:89:4e:86:87:ed:6a:ce:94:
         c4:84:e3:1a:91:b2:44:69:28:1d:b2:35:ff:d0:b1:d4:3c:d7:
         94:9f:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:12:35 2025 by rpki-client