Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/sI8ED1ERXkvMcuToX2_aBWQAfHk.mft
File:                     sI8ED1ERXkvMcuToX2_aBWQAfHk.mft (raw, json)
Hash identifier:          w6mwkzZwKvWHA2YC+cSq4QjVFUu0rBWlY7FAUtO9b2E=
Subject key identifier:   AB:5F:A0:62:2B:0E:70:13:35:EE:D4:04:3A:F1:CC:35:55:6D:AA:E5
Authority key identifier: B0:8F:04:0F:51:11:5E:4B:CC:72:E4:E8:5F:6F:DA:05:64:00:7C:79
Certificate issuer:       /CN=F367F81DAF/serialNumber=B08F040F51115E4BCC72E4E85F6FDA0564007C79
Certificate serial:       6A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sI8ED1ERXkvMcuToX2_aBWQAfHk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/sI8ED1ERXkvMcuToX2_aBWQAfHk.mft
Manifest number:          69
Signing time:             Wed 02 Jul 2025 05:17:20 +0000
Manifest this update:     Wed 02 Jul 2025 05:17:19 +0000
Manifest next update:     Fri 04 Jul 2025 05:17:19 +0000
Files and hashes:         1: sI8ED1ERXkvMcuToX2_aBWQAfHk.crl (hash: qTM08FzsLX80ng7tAtdmZNWPysoWjaPyhSZT6P6Dx5w=)
                          2: 78BEFA000ED711F094E47269762E951A.roa (hash: gf/iIe8B7Q7+70N4QIwyaKLltKOZilfFFlNYOezKILQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/sI8ED1ERXkvMcuToX2_aBWQAfHk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/sI8ED1ERXkvMcuToX2_aBWQAfHk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sI8ED1ERXkvMcuToX2_aBWQAfHk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 05:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F81DAF, serialNumber=B08F040F51115E4BCC72E4E85F6FDA0564007C79
        Validity
            Not Before: Jul  2 05:17:19 2025 GMT
            Not After : Jul  4 05:17:19 2025 GMT
        Subject: CN=6864c0df-47d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:0d:c5:87:c7:fb:33:94:65:63:90:db:bd:
                    80:68:f0:8f:6f:ea:18:32:5b:d9:17:fe:a7:29:1d:
                    9c:93:57:d3:81:d1:d6:46:35:93:fe:f5:8f:0c:55:
                    ac:84:fb:ec:5b:52:c5:1d:bc:32:cd:08:ab:ff:2e:
                    5b:f5:21:06:32:29:77:20:9e:fc:59:5b:bc:96:15:
                    0a:c3:13:b6:46:8e:b3:da:3a:d2:e5:f5:6a:63:64:
                    2a:d5:b8:59:eb:ba:40:81:ac:02:37:4b:2a:be:1c:
                    47:1a:fa:02:f2:78:a9:16:2a:75:9a:e6:69:a0:9a:
                    04:c3:b8:aa:03:a0:a2:45:b8:63:d9:bd:14:a1:a4:
                    25:8c:1d:ce:ef:95:66:25:9a:5e:bd:de:51:9c:64:
                    b1:35:57:eb:41:a7:2d:98:a2:2b:e7:d3:11:d3:c6:
                    39:97:6e:fe:88:ee:ce:d7:52:39:44:1d:98:1f:af:
                    da:3b:e3:5c:ea:8b:b8:f5:72:4f:e0:a3:5e:fc:a2:
                    3b:6d:06:13:e9:97:83:8e:4d:b8:c0:ff:d0:f1:fe:
                    c4:32:7d:6e:bd:8a:68:f7:b5:c6:24:6e:54:3b:27:
                    e7:5e:a8:8e:c1:a7:db:3a:ce:d6:cd:11:06:a2:dd:
                    3c:2f:c4:5d:a9:5d:a3:5a:86:1c:4b:47:85:50:22:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5F:A0:62:2B:0E:70:13:35:EE:D4:04:3A:F1:CC:35:55:6D:AA:E5
            X509v3 Authority Key Identifier:
                keyid:B0:8F:04:0F:51:11:5E:4B:CC:72:E4:E8:5F:6F:DA:05:64:00:7C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/sI8ED1ERXkvMcuToX2_aBWQAfHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sI8ED1ERXkvMcuToX2_aBWQAfHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F81D/C78638C407FC11F0B1F9DF80762E951A/sI8ED1ERXkvMcuToX2_aBWQAfHk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:62:44:28:a1:70:b2:d3:82:0f:91:08:3b:4b:4b:a9:6d:9c:
         c4:51:db:df:d1:6f:7e:e8:8f:72:d7:6b:ca:4a:72:a5:26:2e:
         68:93:5a:af:f6:37:83:d6:ac:56:c5:5a:de:c5:6a:d9:51:8f:
         fe:b9:be:dc:b6:d4:ab:2f:ad:70:2f:79:f6:ad:a5:2d:ef:e3:
         31:a5:9e:af:97:8a:1c:f3:a1:cf:e4:71:b9:be:fb:e1:ed:db:
         62:58:5e:89:cb:6a:be:f9:de:ef:71:a8:39:28:23:a2:de:de:
         18:65:9e:8e:81:0c:cc:d2:04:dd:21:89:92:a4:aa:7b:d4:5f:
         58:40:c7:e1:4e:80:9c:04:9b:fe:dd:b3:30:9c:e0:ed:f3:f7:
         cb:cc:0a:76:9f:ad:45:23:ec:1c:c8:de:5e:bd:30:89:e2:5d:
         c6:9b:93:52:93:db:b8:65:7a:30:12:e4:8a:f3:5a:45:0f:20:
         b6:47:4d:3b:bc:71:c8:21:f3:5f:0f:54:41:a5:44:aa:f6:42:
         f5:4b:7c:c9:ff:f0:df:63:02:1b:9a:dd:06:1e:86:d8:c2:66:
         f0:aa:85:92:a8:2b:48:c9:35:5f:52:a0:44:8b:c8:a1:ee:ab:
         b4:d0:ae:4b:2f:a4:e2:bb:37:b8:04:b7:a5:f1:b4:9f:fa:b9:
         51:8c:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:41:45 2025 by rpki-client