Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
File:                     mo0OmoAqT1sF0LmwiVg0TYdylpw.mft (raw, json)
Hash identifier:          /wqdzrZJtCpOXC+4CTrT1LfYmNSd/Yb8codzjWPcAG8=
Subject key identifier:   F5:7B:3C:57:BB:34:60:DA:1C:55:10:1F:DC:13:0C:41:85:70:A9:CE
Authority key identifier: 9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
Certificate issuer:       /CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Certificate serial:       02AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
Manifest number:          02A9
Signing time:             Fri 09 May 2025 03:53:45 +0000
Manifest this update:     Fri 09 May 2025 03:53:44 +0000
Manifest next update:     Sun 11 May 2025 03:53:44 +0000
Files and hashes:         1: mo0OmoAqT1sF0LmwiVg0TYdylpw.crl (hash: 59Lt1rgEZvH3uJ+46kqf6BADbs0Ytz0w+qMk0WFyzAE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 May 2025 00:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664A2AAF, serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
        Validity
            Not Before: May  9 03:53:44 2025 GMT
            Not After : May 11 03:53:44 2025 GMT
        Subject: CN=681d7c49-0bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:2f:1a:59:ce:c0:4c:b3:de:70:bc:41:ef:
                    ea:6c:12:cb:bd:a8:78:1b:5a:60:80:38:7b:2e:a7:
                    68:f0:5f:30:69:05:87:75:74:01:19:36:44:61:97:
                    6e:04:02:c9:cb:3c:2b:39:be:05:c4:4b:f5:9b:2c:
                    68:33:5d:91:ea:d8:90:5f:23:16:24:e0:07:e1:f8:
                    34:b9:db:e1:aa:59:29:fb:57:1f:f1:23:1a:3c:6c:
                    8a:6a:93:63:84:2d:54:d5:78:04:ee:20:19:5e:83:
                    88:a3:aa:ce:29:1d:06:40:27:b4:b4:bd:a9:d0:5b:
                    bf:94:f9:9c:07:c6:14:d8:ca:01:4d:c0:41:2b:fc:
                    d8:3b:2c:d6:e9:d1:4f:4a:36:d6:22:e3:6f:5e:18:
                    c8:b9:bb:74:a4:f3:f9:d8:dd:45:88:92:8f:92:5e:
                    63:8d:cf:ff:fc:41:f2:7e:15:6f:b2:7e:c3:55:09:
                    4a:b8:7b:8e:72:5a:85:d4:d6:8e:e9:e9:5c:a3:aa:
                    91:20:e4:25:27:3a:82:b8:e1:b7:d7:d0:76:b2:ea:
                    e8:bf:25:56:66:2b:1b:e6:27:ce:bd:ad:9e:81:d9:
                    b9:c8:ee:c6:2a:c8:dd:67:29:7e:db:5d:68:26:68:
                    db:2c:22:cd:f2:4b:3f:67:30:e1:bb:4b:b3:08:2f:
                    7f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7B:3C:57:BB:34:60:DA:1C:55:10:1F:DC:13:0C:41:85:70:A9:CE
            X509v3 Authority Key Identifier:
                keyid:9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c1:4f:b7:1a:c3:64:c1:ea:f2:f9:f1:10:fe:77:e8:10:be:
         f4:1b:77:c1:ab:05:43:24:86:e8:cc:d2:bb:30:18:1f:99:46:
         e8:c8:02:64:a1:8f:0c:9f:b2:a9:bd:e5:d5:80:e1:ed:aa:34:
         d7:cb:14:79:3f:0d:47:9e:3f:6c:50:cf:f2:ff:04:e4:69:46:
         5f:0c:f3:25:16:f0:5a:fd:54:97:74:53:d2:c5:8f:5a:09:a7:
         0a:59:0c:5b:94:e5:62:da:56:9d:e3:7c:11:db:d1:33:1b:62:
         c0:69:26:0e:90:ef:2f:fa:1c:af:0b:09:73:ef:a4:79:1a:96:
         0a:0c:65:91:3c:66:ba:c1:f0:33:84:f3:f2:84:77:5d:4e:b9:
         72:8f:98:00:4d:23:87:ca:a5:54:2c:7f:70:06:28:43:5d:ac:
         bb:40:b0:9b:e9:60:b5:18:19:d3:e0:d4:c7:02:b6:be:ba:55:
         64:93:b5:01:a0:9c:8e:33:34:1c:a8:ba:ce:1a:96:72:15:a3:
         3e:da:8e:1a:aa:a3:4e:52:6c:ad:30:e6:a0:04:f9:42:d7:a1:
         cb:71:05:4a:cc:53:61:58:f6:09:8f:2f:3d:1e:f4:d5:76:a7:
         c6:af:de:b0:f0:65:4f:01:86:df:3e:f7:6b:b1:93:24:24:7d:
         6b:99:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:21:43 2025 by rpki-client