Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
File:                     6vTkF_QNHJDUbdlViOspDev7ius.mft (raw, json)
Hash identifier:          ASqTaEWo9L+KxYX4FLYSrtsqSm0uWpvKBj1mi6dgBXY=
Subject key identifier:   EA:FB:41:49:09:B4:2C:6F:04:D2:DE:6B:EA:53:23:6B:50:11:97:1C
Authority key identifier: EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB
Certificate issuer:       /CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
Certificate serial:       02CD
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
Manifest number:          02CB
Signing time:             Sat 10 May 2025 03:47:45 +0000
Manifest this update:     Sat 10 May 2025 03:47:44 +0000
Manifest next update:     Mon 12 May 2025 03:47:44 +0000
Files and hashes:         1: 6vTkF_QNHJDUbdlViOspDev7ius.crl (hash: SEd/u9ZlMCf17oNaqrN1zDeu1BIlmezNmWK8Iv3lQDE=)
                          2: D505C1903E8F11EFAE9EEE8B762E951A.roa (hash: NwidDV20CYZEDHZ6t+ZNN3IKmoqOlGtHrBQtSGaeJsg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                          rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC8BRI, serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
        Validity
            Not Before: May 10 03:47:44 2025 GMT
            Not After : May 12 03:47:44 2025 GMT
        Subject: CN=681ecc61-14e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:fd:3f:34:1e:b8:49:63:03:79:8e:16:65:
                    a8:24:ac:c2:08:c5:77:c6:18:e9:54:53:83:55:a0:
                    33:0d:b9:85:24:74:da:da:59:d6:11:40:15:b5:e6:
                    22:e0:b5:63:bd:58:78:e8:7b:61:e1:15:ba:a3:6b:
                    60:09:c6:62:00:16:cb:87:3b:c8:3f:0c:1b:c4:02:
                    3d:43:bc:4c:59:5c:2a:52:db:b1:26:23:27:95:33:
                    fb:61:73:0e:a7:b3:87:99:8e:f6:1c:cc:79:8e:cd:
                    ba:27:e4:8a:1c:95:83:a9:e1:be:62:40:36:de:d9:
                    b6:db:13:43:c0:df:71:ee:ae:95:91:c2:ce:f5:64:
                    f9:c8:16:8a:e4:07:c0:ad:a3:92:1a:df:a9:52:03:
                    91:cf:a7:e9:45:07:e4:17:3d:10:6e:ba:6c:98:e0:
                    09:1c:81:c9:5a:24:6a:48:71:f5:00:fc:9b:4c:67:
                    ba:4a:97:41:72:f4:5c:5e:39:f8:20:ba:14:82:30:
                    96:50:2c:18:01:b4:2c:42:37:11:4c:d5:af:bc:6d:
                    ba:63:c9:f7:b3:b0:7f:fe:26:b6:bc:2f:48:de:2b:
                    e7:c5:d8:9b:c7:7a:5f:a6:3d:c6:c6:27:66:ba:ad:
                    51:28:05:68:8f:9b:c9:68:bf:35:24:58:07:91:2a:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FB:41:49:09:B4:2C:6F:04:D2:DE:6B:EA:53:23:6B:50:11:97:1C
            X509v3 Authority Key Identifier:
                keyid:EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d4:23:e9:e3:18:30:9c:a1:2a:b7:90:18:2a:ff:f4:69:79:
         e3:18:bb:96:82:16:80:39:1b:73:5d:a3:ca:47:aa:f9:d2:b4:
         75:a4:3f:45:ac:11:9f:92:e3:01:5a:1a:37:f2:c9:2f:e2:74:
         bc:da:48:1d:e1:c0:97:86:25:b0:bb:5a:26:7d:e0:4f:da:9e:
         80:d1:5c:16:b4:de:a5:33:3c:9f:16:13:a5:5d:c2:65:39:52:
         c5:e4:8e:8b:54:3f:3c:de:c5:5d:d1:80:a1:e9:b6:c1:d7:b9:
         6f:03:9d:a2:03:25:0c:7e:36:80:06:17:15:99:5b:d2:ea:7e:
         1b:33:bc:6d:11:86:f8:1a:24:95:5f:8b:fc:09:f1:53:7b:be:
         df:e3:a0:56:93:35:55:26:99:25:49:da:59:23:6b:2e:03:69:
         9a:cf:c6:52:ca:4d:48:53:50:b7:01:a3:26:ee:91:03:0f:3e:
         87:22:c5:97:f9:10:48:0e:cb:f6:43:f3:61:13:e8:dc:5b:f5:
         f1:1e:b1:40:2a:fc:96:72:46:22:01:b5:90:bb:74:44:5c:80:
         db:3d:55:8a:42:55:02:7f:cf:66:e1:f9:0a:dc:40:22:d1:49:
         42:ba:a2:99:8b:8b:6c:a1:67:e7:3f:7e:61:49:a1:59:c1:29:
         df:10:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:28:39 2025 by rpki-client