Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
File:                     ZbPoGBw9qNHWQehKRcjvgjndfqc.mft (raw, json)
Hash identifier:          nLkwP/HJtfN1CCMIUgvnRXhoS+g1cfRBwtvvV2fycL0=
Subject key identifier:   E6:9F:15:D9:BA:85:DB:CE:9A:FE:6D:1A:D3:67:4D:0A:1F:44:95:46
Authority key identifier: 65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
Certificate issuer:       /CN=F367B8D1RI/serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Certificate serial:       02AE
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
Manifest number:          02AE
Signing time:             Sat 10 May 2025 03:50:26 +0000
Manifest this update:     Sat 10 May 2025 03:50:26 +0000
Manifest next update:     Mon 12 May 2025 03:50:26 +0000
Files and hashes:         1: ZbPoGBw9qNHWQehKRcjvgjndfqc.crl (hash: sNyyBAwsRaqs0mEFqrAIlXY3VRa06KJWvvbNwhx6zb8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
                          rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1RI, serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
        Validity
            Not Before: May 10 03:50:26 2025 GMT
            Not After : May 12 03:50:26 2025 GMT
        Subject: CN=681ecd02-4b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:ca:e3:de:36:9f:6e:dc:cb:ff:a5:7f:2f:
                    c2:ad:31:1d:be:10:8e:3c:38:3d:c2:1f:1b:6f:eb:
                    62:1b:35:7d:48:4d:7a:23:dc:27:9e:c7:c4:58:aa:
                    ca:69:80:d3:f6:a1:4c:4a:b5:49:5e:ec:0c:d1:de:
                    3e:1d:65:0a:2c:32:a9:2b:e5:c4:1d:10:a3:ed:07:
                    0e:69:ee:3f:4b:ad:6f:b5:90:ff:73:d7:c4:29:af:
                    4e:2d:52:e9:b2:6c:ad:9d:40:c9:97:ac:33:d7:a1:
                    ad:4c:53:39:c2:58:e4:9e:80:5b:7c:22:3e:19:e6:
                    10:7a:8b:59:ce:99:23:5c:9f:cf:1c:33:ef:cd:8b:
                    7c:5e:f1:af:aa:f5:af:07:bb:b5:c2:97:86:eb:22:
                    f6:2f:e4:3d:4e:50:25:6e:fb:98:cf:53:80:b8:a1:
                    ea:04:70:b0:80:38:ef:5d:11:a7:fc:97:dc:f4:36:
                    a7:6e:b5:fb:89:e5:04:27:5a:ab:4b:f3:a0:a7:99:
                    15:ec:e6:3f:be:4b:71:c8:14:54:5a:2d:0d:0b:c7:
                    75:95:c9:83:5d:67:78:a8:e5:40:8a:7f:9c:8c:30:
                    9a:fd:30:7f:a9:0d:bc:ae:ac:fe:2f:99:e7:33:71:
                    cf:1c:2d:5b:3b:c2:c5:52:77:9d:ce:6a:99:ce:09:
                    54:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9F:15:D9:BA:85:DB:CE:9A:FE:6D:1A:D3:67:4D:0A:1F:44:95:46
            X509v3 Authority Key Identifier:
                keyid:65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4f:16:c6:d8:d3:77:87:89:38:5e:c4:75:bd:57:07:fc:70:
         3c:62:01:77:c0:8b:3c:f9:ee:09:56:5c:84:e1:1e:a0:9d:e6:
         9b:3d:70:58:21:a5:3f:cc:61:3f:57:7a:21:e8:e8:ae:a0:ee:
         1d:04:4f:9b:0c:d8:52:35:a7:53:36:ae:f0:63:eb:68:13:d3:
         f5:71:61:fb:46:5a:16:11:78:e8:1b:0b:ca:02:26:fe:8c:eb:
         4f:9e:55:a4:59:64:36:98:47:ee:1f:f2:da:ae:bb:d6:7d:64:
         ca:6f:b2:42:b3:fc:49:2d:58:3f:14:9c:d7:64:90:7e:03:9f:
         7a:d0:2a:cd:ed:d6:84:5b:34:33:c0:f2:a5:b0:36:15:ee:9c:
         35:56:2b:f1:e6:04:4c:3f:e0:92:73:97:41:e0:fc:cb:f3:42:
         b0:5c:cf:f9:72:cd:31:15:5c:c7:3e:d9:22:6f:f8:96:7a:c7:
         72:de:f7:d1:20:a8:ae:d6:cf:37:af:4b:96:8c:5c:e2:94:d5:
         66:69:11:1e:68:2f:50:0f:11:73:49:83:7a:42:23:e8:a6:b1:
         ab:54:85:dc:73:9f:e6:4a:4a:ff:02:bd:a2:62:0f:fd:76:b4:
         d0:bd:58:fb:06:25:08:61:c9:8d:c9:d9:30:ac:4d:20:a8:5b:
         1e:d6:b6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:44:03 2025 by rpki-client