Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File:                     xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier:          9afnfhzkZHB59M34DgJ5qkFKupqJE31zt1rQ62rsMGs=
Subject key identifier:   1C:0E:0D:F2:16:CD:1B:10:FE:1F:90:DB:C0:B7:F3:D7:25:DA:BE:AD
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer:       /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial:       02AF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number:          02AF
Signing time:             Sat 10 May 2025 03:50:40 +0000
Manifest this update:     Sat 10 May 2025 03:50:39 +0000
Manifest next update:     Mon 12 May 2025 03:50:39 +0000
Files and hashes:         1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: TqUynBBKlVnNBATmABw+xOqTv+n1B0wlDiccnohC1lM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                          rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687 (0x2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
        Validity
            Not Before: May 10 03:50:39 2025 GMT
            Not After : May 12 03:50:39 2025 GMT
        Subject: CN=681ecd10-fd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:e3:ed:ea:fe:5f:68:8f:cf:cd:69:77:ef:
                    11:02:48:bc:95:39:74:ed:a1:13:50:9b:d5:31:29:
                    a3:27:34:ba:0e:1d:ef:90:a6:e1:c6:66:fb:ac:8d:
                    09:a5:7e:c8:93:03:ad:1b:49:0c:a4:b3:d6:5f:47:
                    e1:45:35:ea:68:1f:2f:31:12:67:34:bf:bd:32:58:
                    12:39:bd:a5:fc:9a:b0:16:45:c6:06:5b:ed:7b:14:
                    34:05:88:48:b4:db:57:3a:16:70:17:83:56:56:8c:
                    e5:72:f0:b1:98:7e:62:1f:51:c9:d6:74:70:46:74:
                    a3:96:3f:96:c3:0f:41:f0:4d:cf:2b:1c:63:0f:e8:
                    0e:dc:98:a7:c3:5e:21:06:14:89:c8:09:2e:54:ba:
                    d7:fd:25:5b:a1:ae:95:8c:e8:0b:1a:45:fa:2f:a5:
                    e1:04:db:28:35:02:82:02:fe:b9:32:3a:71:f9:99:
                    09:4e:2f:60:5d:a6:0e:5f:17:6a:3c:81:d2:e1:a9:
                    53:7b:c0:62:49:28:2b:34:98:c6:bd:6f:1e:56:62:
                    37:ec:06:b0:a7:89:f8:9a:9f:67:1b:1e:cb:69:8a:
                    a7:0d:2b:a7:33:ab:84:f8:78:8f:5b:46:ed:9e:d1:
                    4a:71:b1:c4:73:ef:27:1f:ef:57:80:9d:b0:ff:48:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0E:0D:F2:16:CD:1B:10:FE:1F:90:DB:C0:B7:F3:D7:25:DA:BE:AD
            X509v3 Authority Key Identifier:
                keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:cd:56:23:a1:a7:86:05:3a:5e:79:e1:d7:f6:2e:e5:be:0c:
         38:70:70:a2:c2:f4:80:92:e6:72:60:19:8d:23:52:95:13:89:
         cb:91:e2:71:d2:31:f4:b4:b2:27:4b:02:30:a9:86:9e:3c:68:
         d3:d6:dc:69:af:2f:f9:1a:fb:7e:a3:82:3b:ae:87:af:8b:03:
         a4:29:f7:4f:26:9c:48:65:e4:90:22:0b:39:af:26:b3:03:c0:
         67:d7:d1:ce:dc:cd:06:6a:d4:2e:28:f8:58:d2:f9:c5:78:be:
         0b:58:87:b2:e4:a5:76:88:a2:b7:e7:22:26:eb:56:97:94:38:
         7c:e9:fc:fd:c9:31:c7:ee:4f:e7:24:80:0d:fb:f3:35:99:ca:
         22:e2:b6:61:39:2e:fe:23:d2:5b:48:c8:b1:91:c9:09:8c:8d:
         a9:5d:cc:00:ed:21:8e:96:bc:22:14:a0:9b:c4:60:8e:64:3d:
         32:2a:b1:18:d2:c1:57:98:24:34:20:f3:02:21:39:36:98:9c:
         f7:87:52:b2:2f:97:ba:e6:cd:35:ce:30:bd:f9:0a:7d:50:ad:
         53:30:7d:48:0e:01:da:1c:a7:1f:c3:f8:f8:71:7f:29:0e:6a:
         c3:79:c5:88:c3:cd:03:9e:0e:08:32:5a:91:e2:80:15:27:cc:
         ce:65:ad:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:22:44 2025 by rpki-client