Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
File:                     oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft (raw, json)
Hash identifier:          IpMSDyEFdM9IkvDQFIJ+cDZNVVon7r3HOWmp4uMALZw=
Subject key identifier:   80:DD:24:E8:27:16:6D:E3:35:15:1E:D0:E7:35:46:E5:72:B2:81:2D
Authority key identifier: A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44
Certificate issuer:       /CN=F366C302AF/serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
Certificate serial:       02DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
Manifest number:          02D9
Signing time:             Thu 26 Mar 2026 04:55:25 +0000
Manifest this update:     Thu 26 Mar 2026 04:55:24 +0000
Manifest next update:     Sat 28 Mar 2026 04:55:24 +0000
Files and hashes:         1: oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl (hash: D27ICiN/uCTo6mRK9eeFXTkWA0Z0myGxzgNfDhgBrTg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C302AF, serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
        Validity
            Not Before: Mar 26 04:55:24 2026 GMT
            Not After : Mar 28 04:55:24 2026 GMT
        Subject: CN=69c4bc3d-8d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:65:b2:7b:1b:cc:80:e3:2e:32:a4:9e:37:bf:
                    56:7b:6d:19:be:3b:12:fd:3b:30:46:6b:55:b1:63:
                    81:d2:64:c8:19:a4:c9:08:fd:d5:66:e0:8f:89:a5:
                    fe:7a:62:36:e1:b0:f2:1b:d7:7a:d2:bf:a2:b9:d3:
                    1d:b4:29:8b:db:6a:22:da:a9:5c:70:4e:d8:42:3e:
                    a5:a8:09:0d:fe:ef:61:f5:dc:fe:83:cc:b6:89:a0:
                    53:64:12:1b:e3:a0:af:52:74:15:0f:d7:5b:80:5c:
                    a5:a4:36:c4:22:2d:e3:f3:bc:86:3f:8b:10:c6:bb:
                    68:f9:ea:82:30:8e:21:93:83:99:4d:f2:6c:f5:bf:
                    70:9b:43:5a:1e:1e:52:d0:16:f2:e3:13:8f:f6:81:
                    8f:bc:e8:fa:d4:b5:11:5f:4e:92:a6:ff:37:e8:4b:
                    96:42:51:99:52:72:d0:47:4d:31:7e:f0:f3:84:d0:
                    2e:f5:a4:34:4b:5d:97:ee:48:44:57:39:da:8f:9b:
                    c3:6a:82:1e:42:4e:94:96:dc:5c:bf:bd:d9:11:cc:
                    53:8f:d6:dc:2d:ea:75:4a:a7:c0:9e:a0:bf:78:67:
                    d8:be:9f:7e:71:4c:ad:b3:ae:30:bd:24:5d:df:90:
                    95:c9:74:ee:c8:73:a1:48:a9:90:82:13:f8:61:92:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DD:24:E8:27:16:6D:E3:35:15:1E:D0:E7:35:46:E5:72:B2:81:2D
            X509v3 Authority Key Identifier:
                keyid:A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:55:23:a9:ef:a1:53:94:d8:2c:b1:8d:da:1d:90:22:41:
         3d:20:03:c3:7a:cc:ad:d7:d6:a0:c9:d9:08:ab:38:45:b1:45:
         1a:6f:5c:cc:75:bd:8c:cf:3b:46:8c:90:90:bd:81:4e:30:8f:
         c4:8f:b0:f9:5b:47:77:f4:2d:c7:37:ae:54:de:14:99:82:ce:
         c5:02:09:ba:f1:84:9e:f8:bf:cb:5d:6c:2c:fe:18:9d:57:f2:
         37:b2:74:9f:46:ed:f1:8e:c1:9e:d1:52:99:4e:87:09:a5:f8:
         3d:93:d1:f9:90:ce:c5:c3:bb:66:4a:c0:76:a8:5e:d1:5b:c7:
         13:a6:7b:64:d5:b6:59:5b:b7:14:3f:12:3e:69:41:ca:fd:6d:
         e2:26:0a:33:2b:43:7b:77:26:a5:76:e6:2b:b5:30:b7:56:5f:
         68:61:42:8b:4f:13:58:2d:9a:19:8b:7a:4a:66:d2:ac:cd:ca:
         c0:c8:64:18:46:cf:92:96:17:21:68:c9:b7:83:91:dc:da:19:
         95:9a:4e:3c:e6:cc:5e:67:99:2d:6e:91:1d:50:95:c5:af:db:
         99:da:09:11:48:2c:6b:1b:3e:a1:db:1c:a6:60:ab:b6:2a:5d:
         dc:db:d6:e5:99:e5:f7:55:a9:1f:78:e0:21:bf:69:fd:f3:5b:
         ea:56:4a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:40 2026 by rpki-client