Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
File:                     0RDaMi-Zhc--woypzoUgREhmujc.mft (raw, json)
Hash identifier:          32Ox8Ug7fftX3wASJq4E0AqJR5bStpcUtt0X7ZXZNPo=
Subject key identifier:   6E:59:CA:94:AB:8A:D0:B9:F7:45:0B:33:0A:3C:AC:4B:F3:1D:6C:2A
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       02F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
Manifest number:          02EC
Signing time:             Thu 08 May 2025 03:45:05 +0000
Manifest this update:     Thu 08 May 2025 03:45:04 +0000
Manifest next update:     Sat 10 May 2025 03:45:04 +0000
Files and hashes:         1: 0RDaMi-Zhc--woypzoUgREhmujc.crl (hash: nxseHkrR0zxk3zHqRuDhka6GgciGfV1Z69RaDQtGAXM=)
                          2: BFFF93DCB91C11EEADB54E9A775412E6.roa (hash: sdzYfCyDwg/PUEGK3tXmINjr+Wb452fyHwxFLwrRQCs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 May 2025 03:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF, serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: May  8 03:45:04 2025 GMT
            Not After : May 10 03:45:04 2025 GMT
        Subject: CN=681c28c1-11f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:49:26:ec:96:d7:e4:2d:91:16:e8:9c:d6:
                    4a:da:ae:57:d5:80:64:fe:ea:61:0f:67:25:1b:58:
                    b4:c2:18:d3:39:2f:0f:2a:ba:ce:12:b6:e5:6d:e3:
                    9a:c4:13:c2:de:42:b8:33:a1:2a:e1:7a:bd:ba:61:
                    44:79:c9:e2:d9:45:e7:a8:26:c8:72:34:b9:b7:67:
                    fa:80:ee:e9:c7:19:03:a8:78:20:66:e1:96:d9:37:
                    bd:5c:7c:e9:61:5e:9b:82:d0:dd:4b:21:d1:88:39:
                    59:0d:6a:85:00:df:d6:98:fd:7c:16:58:47:07:54:
                    0c:0f:66:79:f1:82:a7:da:b8:5c:f1:f9:13:61:fe:
                    5c:99:16:38:ad:b3:e7:54:85:ae:64:6f:00:df:8e:
                    b3:f3:ef:a9:d2:d5:45:14:39:c3:46:87:26:01:1e:
                    b3:26:3f:b9:b1:df:ab:f2:99:6d:fb:fb:75:79:20:
                    29:8c:d0:0a:2a:ab:61:33:34:e1:69:de:65:12:91:
                    c5:36:cf:cb:ac:a3:50:b3:eb:6e:ba:f0:19:b7:fa:
                    00:06:23:26:21:65:fe:e2:b4:bb:af:46:3f:a4:6f:
                    1c:d6:db:0f:99:3e:d9:75:61:d8:e4:b6:c0:df:57:
                    41:e5:18:39:ec:17:09:32:df:29:67:87:8f:b3:fe:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:59:CA:94:AB:8A:D0:B9:F7:45:0B:33:0A:3C:AC:4B:F3:1D:6C:2A
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:94:61:e3:57:d2:90:de:f6:d2:f9:ec:15:9b:d4:ba:cd:1f:
         54:a3:51:ee:83:ca:f2:3e:56:93:bd:85:03:6c:73:20:a5:94:
         d9:b5:59:7a:ac:20:84:7e:1d:8f:8a:2d:05:b8:b8:93:62:3f:
         0d:6e:e6:8b:3b:c1:31:3a:ce:f3:69:55:e5:b3:65:7d:44:8c:
         fb:0e:68:86:6b:fe:95:57:5e:1f:73:52:90:e0:81:15:c6:b6:
         a8:80:73:59:31:dc:61:68:66:9c:cb:09:3b:0a:73:bb:79:ff:
         0b:0f:39:bb:25:7e:13:bc:bd:dc:c8:2b:7b:61:fd:c5:61:1b:
         0a:a9:79:f6:71:84:ab:27:cd:ad:5b:e9:c4:b8:a3:55:8e:b2:
         1b:dd:75:26:3c:f8:d3:a6:f5:12:a8:8f:85:10:40:d4:5a:f8:
         ad:f7:4e:28:11:7e:88:57:c1:00:5b:b4:fb:13:ff:dc:26:23:
         52:a9:dc:09:f3:f9:b4:91:4c:77:ba:d3:00:3e:70:4f:3e:42:
         d9:3f:ec:91:73:dd:2f:c8:cd:90:8b:6c:63:03:fa:98:45:bc:
         32:91:b7:ed:b9:bc:7c:6f:02:a3:4e:80:23:c8:52:a8:b0:4d:
         f5:ec:8b:30:e0:c6:5f:91:8e:80:31:5a:fa:d0:39:0d:33:ce:
         75:28:9f:78
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzIzRTFBRjExMC8GA1UEBRMoRDExMERBMzIyRjk5ODVDRkJFQzI4Q0E5Q0U4NTIw
NDQ0ODY2QkEzNzAeFw0yNTA1MDgwMzQ1MDRaFw0yNTA1MTAwMzQ1MDRaMBgxFjAU
BgNVBAMTDTY4MWMyOGMxLTExZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSF0km7JbX5C2RFuic1krarlfVgGT+6mEPZyUbWLTCGNM5Lw8qus4StuVt
45rEE8LeQrgzoSrher26YUR5yeLZReeoJshyNLm3Z/qA7unHGQOoeCBm4ZbZN71c
fOlhXpuC0N1LIdGIOVkNaoUA39aY/XwWWEcHVAwPZnnxgqfauFzx+RNh/lyZFjit
s+dUha5kbwDfjrPz76nS1UUUOcNGhyYBHrMmP7mx36vymW37+3V5ICmM0Aoqq2Ez
NOFp3mUSkcU2z8uso1Cz62668Bm3+gAGIyYhZf7itLuvRj+kbxzW2w+ZPtl1Ydjk
tsDfV0HlGDnsFwky3ylnh4+z/n+TAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUblnK
lKuK0Ln3RQszCjysS/MdbCowHwYDVR0jBBgwFoAU0RDaMi+Zhc++woypzoUgREhm
ujcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcyM0UxLzdFM0ZBM0YwRkExOTExRURCRThFRTQyNTRBRDlFNkZDLzBSRGFN
aS1aaGMtLXdveXB6b1VnUkVobXVqYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBSRGFNaS1aaGMtLXdveXB6b1VnUkVobXVqYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzIzRTEvN0UzRkEzRjBGQTE5MTFFREJFOEVFNDI1NEFE
OUU2RkMvMFJEYU1pLVpoYy0td295cHpvVWdSRWhtdWpjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALlGHjV9KQ3vbS+ewVm9S6zR9Uo1Hu
g8ryPlaTvYUDbHMgpZTZtVl6rCCEfh2Pii0FuLiTYj8NbuaLO8ExOs7zaVXls2V9
RIz7DmiGa/6VV14fc1KQ4IEVxraogHNZMdxhaGacywk7CnO7ef8LDzm7JX4TvL3c
yCt7Yf3FYRsKqXn2cYSrJ82tW+nEuKNVjrIb3XUmPPjTpvUSqI+FEEDUWvit904o
EX6IV8EAW7T7E//cJiNSqdwJ8/m0kUx3utMAPnBPPkLZP+yRc90vyM2Qi2xjA/qY
Rbwykbftubx8bwKjToAjyFKosE317Isw4MZfkY6AMVr60DkNM851KJ94
-----END CERTIFICATE-----
Generated at Fri May 9 02:54:28 2025 by rpki-client