Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
File:                     27tnLt0H4F5FzAKFWwHIE75xXoE.mft (raw, json)
Hash identifier:          /HfPzMlRy9TjcZ3CrbsyU1W4SsOWHwwBWwUaiYFUyfM=
Subject key identifier:   D7:ED:6F:12:58:4B:1D:98:C8:4B:8C:39:31:81:0D:F7:EA:93:55:6F
Authority key identifier: DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81
Certificate issuer:       /CN=F366A8BFAF/serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
Certificate serial:       F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
Manifest number:          EF
Signing time:             Thu 03 Jul 2025 05:02:32 +0000
Manifest this update:     Thu 03 Jul 2025 05:02:31 +0000
Manifest next update:     Sat 05 Jul 2025 05:02:31 +0000
Files and hashes:         1: 27tnLt0H4F5FzAKFWwHIE75xXoE.crl (hash: oFTDJxl7JsNK0/NUCgXAhmVZFtXFW1z3H2l2/Jf4eJY=)
                          2: 0C2C5B02A38F11EF9EE69A89762E951A.roa (hash: ECtKxH32G5BPQeuP9KuP/2ILf6so8Vog6XvAyzLxNpo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 05:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A8BFAF, serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
        Validity
            Not Before: Jul  3 05:02:31 2025 GMT
            Not After : Jul  5 05:02:31 2025 GMT
        Subject: CN=68660ee8-6df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:db:a3:82:65:53:c4:7a:31:06:a3:12:77:
                    7c:93:1e:bb:e7:50:5e:19:41:8b:92:4d:cd:b2:f3:
                    88:08:df:32:fb:ea:9f:d2:ec:3b:95:42:12:82:08:
                    aa:a4:d4:f3:51:b2:5f:74:88:b8:c8:1d:d1:4a:31:
                    ee:4c:73:ff:3e:6f:51:8d:1a:92:f4:60:dd:eb:aa:
                    cb:9c:11:d0:09:d8:be:e1:e5:e4:c4:66:ee:75:0d:
                    e9:55:25:91:c7:ba:8f:d6:ea:18:06:61:eb:5c:db:
                    49:c0:3b:00:6c:86:1b:0b:7f:35:82:32:37:25:02:
                    ea:de:60:db:d9:41:28:f4:a4:b1:2d:e2:d8:52:88:
                    7a:bb:41:b7:3c:ea:a4:ae:99:bf:92:f4:6b:bb:ec:
                    71:ff:ca:96:d1:e5:e2:a6:69:7a:86:ee:ad:88:39:
                    d5:b6:1f:bc:0b:1b:4c:68:92:94:2c:43:bb:a4:ed:
                    f5:5b:4f:0d:1c:54:53:92:83:09:e5:df:1f:89:a0:
                    7a:dd:63:ea:c6:bd:9d:a9:a3:d2:88:85:d7:b1:9e:
                    33:f9:c1:7e:d5:ff:87:d8:b4:56:3a:48:4d:f6:98:
                    38:68:7a:e9:1d:c1:e0:11:dc:a4:0b:8e:42:9a:06:
                    11:4e:0b:26:af:82:92:f5:eb:27:47:44:1a:76:2a:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:ED:6F:12:58:4B:1D:98:C8:4B:8C:39:31:81:0D:F7:EA:93:55:6F
            X509v3 Authority Key Identifier:
                keyid:DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e2:98:69:eb:bb:73:40:18:e2:48:3f:62:b5:17:b0:e2:bc:
         8e:b7:99:7a:a5:84:c1:bb:8f:51:bd:50:5f:e4:76:83:40:08:
         ac:4c:d8:0d:04:99:b9:50:b1:f8:cf:6a:ac:d3:51:dc:38:94:
         51:75:65:2e:8d:07:f3:cf:d8:f2:7e:ef:35:f9:32:b1:2f:82:
         4d:91:67:e9:1a:9e:7f:cb:14:35:41:b5:84:cc:ab:2b:ab:03:
         2d:ad:c8:07:eb:e4:b7:09:8a:dc:33:0d:e8:a8:5c:47:8d:5c:
         71:60:da:d6:86:d7:26:a4:88:94:75:7c:4b:24:0d:31:8b:cd:
         9f:ac:44:55:4d:58:00:06:a5:14:c2:9b:a7:a1:e6:7a:73:34:
         3b:c9:4e:44:c3:eb:a3:ca:12:64:99:43:44:7b:07:5a:0a:11:
         f3:f5:f3:ef:2f:23:20:ce:b1:9e:ee:11:ac:60:3e:aa:9c:72:
         9e:2a:cb:44:ef:dd:64:c8:19:ca:6f:83:9a:79:d2:c9:01:c7:
         1d:f0:df:f7:74:16:d5:15:53:d7:1f:86:70:53:53:2c:44:86:
         59:60:72:d4:d2:d4:56:18:1b:69:4b:c9:38:e0:0c:2f:fa:1b:
         e4:d5:30:70:7d:5b:93:c7:7d:ea:92:e2:cb:b9:cf:3d:b7:ab:
         5d:9e:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:56:15 2025 by rpki-client