Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
File:                     6vTkF_QNHJDUbdlViOspDev7ius.mft (raw, json)
Hash identifier:          R0caNLRX54lcrskSt+SUoEUF6Ks6ZRxHVW053PSA5Eg=
Subject key identifier:   C5:91:C3:CA:5C:A6:7C:3F:A8:C8:4C:E4:F8:4C:AF:DE:ED:52:0B:65
Authority key identifier: EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB
Certificate issuer:       /CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
Certificate serial:       0337
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
Manifest number:          0335
Signing time:             Sat 23 Aug 2025 03:47:28 +0000
Manifest this update:     Sat 23 Aug 2025 03:47:28 +0000
Manifest next update:     Mon 25 Aug 2025 03:47:28 +0000
Files and hashes:         1: 6vTkF_QNHJDUbdlViOspDev7ius.crl (hash: zGB4+OPqwefLWgthG4vLwYulLgQkEnpi+Vv5Qv5lrUo=)
                          2: D505C1903E8F11EFAE9EEE8B762E951A.roa (hash: NwidDV20CYZEDHZ6t+ZNN3IKmoqOlGtHrBQtSGaeJsg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                          rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC8BRI, serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
        Validity
            Not Before: Aug 23 03:47:28 2025 GMT
            Not After : Aug 25 03:47:28 2025 GMT
        Subject: CN=68a939d0-5748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:b8:30:81:fd:5c:5f:cd:ef:11:73:ae:22:
                    fe:94:66:84:0a:8b:de:3c:3e:37:f7:36:12:b8:e5:
                    77:73:b3:16:64:4f:e5:a7:5e:9d:3c:63:02:53:dc:
                    cb:9d:80:32:4e:91:cc:3b:d2:8a:70:13:9b:76:c5:
                    c9:20:84:4b:76:6d:86:9e:0b:11:d2:b2:34:f1:1f:
                    14:80:8d:d3:03:c7:87:48:ce:1c:0e:17:b2:8a:65:
                    70:65:58:da:7f:e8:19:75:70:69:41:de:cb:97:65:
                    e2:82:e0:94:95:bb:ad:2d:03:9d:89:9e:30:9b:0f:
                    ae:8d:1f:d4:e2:66:5c:00:f7:70:8c:1b:8e:9d:66:
                    5a:8a:5a:59:e1:00:cc:a9:e3:ed:90:29:f4:7d:ca:
                    46:e8:58:4d:db:b7:4a:1d:0b:4f:25:1e:1e:bc:28:
                    ab:12:13:f4:14:40:d1:ec:15:ac:9d:d0:a3:78:7f:
                    cb:8e:53:74:6c:32:24:68:0a:d9:e2:a9:b4:f3:a0:
                    4b:44:1a:fc:af:7f:07:ef:74:20:82:d2:e3:f8:1f:
                    8f:86:5d:5d:26:88:b4:9d:a9:7b:53:a5:b9:de:0d:
                    fd:d1:03:b1:0f:e5:cc:a8:89:1d:7a:ec:ed:6d:ed:
                    d7:11:96:5e:b7:62:34:99:f1:93:b7:8a:66:42:9d:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:91:C3:CA:5C:A6:7C:3F:A8:C8:4C:E4:F8:4C:AF:DE:ED:52:0B:65
            X509v3 Authority Key Identifier:
                keyid:EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:56:c1:96:72:ba:ff:af:78:f8:3a:bb:c2:b6:dd:77:55:0c:
         b4:17:c7:13:29:d3:e3:38:53:17:35:09:f7:d3:f4:fe:f1:78:
         3f:47:f2:fa:dc:e3:72:20:01:88:ee:1e:72:eb:da:8c:07:de:
         ea:44:78:7a:b2:a1:f1:a2:14:c0:4a:9b:a6:65:a9:2d:3a:6e:
         67:e4:51:b7:69:c7:4b:5f:5d:3c:c5:8e:59:1e:04:54:8b:58:
         8b:72:ac:8e:8c:89:e7:8e:4c:57:6e:79:28:0e:48:2f:2d:6c:
         53:b9:9f:15:96:82:67:12:d1:dd:76:52:a2:62:8d:c6:ef:2d:
         40:2e:ed:04:fc:94:7e:a6:63:ae:1c:31:09:26:2b:8f:c8:6f:
         33:16:15:68:18:d1:cf:16:cd:c6:33:cd:f2:3a:68:0c:fb:55:
         a4:3c:ad:ca:23:a6:e0:c5:13:5c:00:31:d9:48:6d:14:1b:2a:
         7c:27:66:e8:64:d6:0f:85:03:7c:9e:e0:f4:b6:dd:85:23:f7:
         85:d2:0c:9b:4b:80:c8:be:04:90:ff:06:08:fc:e1:d9:be:a3:
         d8:be:c3:80:a3:54:b2:c0:ac:f9:d6:11:83:40:a2:62:57:9c:
         22:a4:6a:3c:2b:cd:d7:a9:90:f9:06:fe:16:75:15:a8:52:b0:
         af:97:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:28 2025 by rpki-client