Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
File:                     LWxhNdlQPaoy1mWGoi7WGSlcar8.mft (raw, json)
Hash identifier:          /0O+YCKw6Qi5VjMD+K5EXW0tMhIy8poyZWWkD0Ny+YQ=
Subject key identifier:   56:4F:43:93:42:75:10:BB:2C:39:18:36:42:48:F7:ED:E2:47:A3:F1
Authority key identifier: 2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF
Certificate issuer:       /CN=F367FE62AF/serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
Certificate serial:       0589
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
Manifest number:          0588
Signing time:             Sun 11 May 2025 02:29:25 +0000
Manifest this update:     Sun 11 May 2025 02:29:24 +0000
Manifest next update:     Tue 13 May 2025 02:29:24 +0000
Files and hashes:         1: LWxhNdlQPaoy1mWGoi7WGSlcar8.crl (hash: TCgYOmAbNmDdq/1Y9zS8gSB+BWnrDx1X8gUxJ17mimE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FE62AF, serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
        Validity
            Not Before: May 11 02:29:24 2025 GMT
            Not After : May 13 02:29:24 2025 GMT
        Subject: CN=68200b85-a3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:86:2d:e3:19:c6:48:88:b8:9a:c7:6c:76:
                    91:fe:04:52:ec:5a:02:de:0a:27:52:24:3c:bf:0d:
                    c8:aa:38:c4:98:cd:c2:41:9a:6f:6b:04:05:b9:0e:
                    d0:e3:68:f0:ea:f4:14:87:a9:14:63:36:65:41:20:
                    c2:93:02:2a:14:f6:ab:24:f1:13:6f:72:96:29:b8:
                    ae:9e:b8:39:0c:c0:27:b1:86:50:75:4d:a2:cb:c0:
                    48:cb:51:d7:1a:27:f3:bb:e5:4c:cf:d0:3f:fd:b8:
                    9c:ba:6f:6f:bc:bf:6a:0f:73:cb:d8:51:82:8c:8b:
                    49:e7:11:9b:d4:b2:da:b8:b6:4b:95:80:92:dd:93:
                    71:b0:2a:7f:90:bc:69:a0:01:93:16:9d:34:f1:ca:
                    e9:bb:11:78:3e:80:56:7f:2f:96:ca:e1:bf:31:77:
                    f2:ee:40:f6:9b:6c:2f:c0:63:fb:b4:28:26:2e:ff:
                    2f:72:7b:22:b4:79:f6:90:ca:1f:c0:87:60:9d:11:
                    59:65:a5:4d:6b:58:4a:7d:05:9d:be:d9:98:8a:f1:
                    b8:0a:3a:a3:4f:72:11:1b:c4:8c:74:f3:04:f6:7c:
                    cc:a2:b1:65:c3:61:10:f1:51:a5:a1:32:e9:9a:54:
                    79:34:7b:f3:f4:16:2e:5e:2d:9e:b4:9e:c5:25:cd:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4F:43:93:42:75:10:BB:2C:39:18:36:42:48:F7:ED:E2:47:A3:F1
            X509v3 Authority Key Identifier:
                keyid:2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:86:76:a1:75:97:80:b8:1c:12:07:48:e9:25:92:97:95:
         2a:2e:5d:b7:bb:20:ca:c8:77:21:76:55:41:f3:ec:cc:27:48:
         1a:79:3b:8b:00:fa:1b:12:f6:3c:de:a4:39:e2:2d:ca:0d:46:
         3b:31:b1:54:34:8b:d9:65:ce:4a:87:09:4f:1a:4f:ac:3d:b5:
         d5:a8:dd:5c:37:6c:79:44:f7:01:55:af:e6:b3:8c:9b:65:4d:
         fc:48:9b:88:7f:b9:05:c6:cd:f0:7a:8c:6b:b3:d5:33:cc:db:
         95:44:f2:07:cb:34:1c:c3:b2:b0:a9:48:b7:10:fe:6f:ac:2f:
         86:a1:10:c9:2c:3b:8b:0e:37:1d:d7:d2:a0:65:19:5c:ed:9a:
         0a:ae:3f:2a:7d:78:bb:18:20:d2:d3:ef:86:a2:08:84:8f:f5:
         e6:89:2c:c0:04:6d:c1:70:01:49:9a:e7:d5:ad:e1:04:e3:b2:
         01:db:ca:7f:50:a3:67:da:30:36:13:61:6a:07:09:7a:53:cf:
         4c:66:17:f1:58:65:6c:02:27:c6:1c:71:33:a8:07:7f:66:15:
         fc:05:fa:5b:b9:e2:b2:c8:58:2b:de:f5:d2:46:14:1d:f4:78:
         a0:31:64:41:da:82:b2:ce:98:83:b2:83:f5:37:a1:d0:88:5a:
         62:b7:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:47:12 2025 by rpki-client