Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
File:                     qPP_zPK9bxc-V43OhiXgHFOX9zU.mft (raw, json)
Hash identifier:          tMl6x18v6haYhm49aF6LMxX5mldqFg/0aZlChciKsGA=
Subject key identifier:   AA:31:05:31:A9:48:E8:FF:0F:B8:65:BF:B2:E4:BD:5C:DF:1A:92:0C
Authority key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
Certificate issuer:       /CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Certificate serial:       0555
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
Manifest number:          0553
Signing time:             Mon 12 May 2025 02:36:37 +0000
Manifest this update:     Mon 12 May 2025 02:36:37 +0000
Manifest next update:     Wed 14 May 2025 02:36:37 +0000
Files and hashes:         1: qPP_zPK9bxc-V43OhiXgHFOX9zU.crl (hash: /intZPMhhbjv1AR3Z6QWjHcmESUl56QTIlNW8E9ackQ=)
                          2: 7053DDBA207711ECA57B2A27D8A014CE.roa (hash: 8FwYiwQNn3Nk7JGlhTjNINHWw5iUKIWhAuMhk3sKQys=)
                          3: 5EE2F40CED9F11ED90CD53134AD9E6FC.roa (hash: 7NdUaz4rD9qpZUgGvl0CsoD0saUCFYGySX0YWVKqUtI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1365 (0x555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3684027AF, serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
        Validity
            Not Before: May 12 02:36:37 2025 GMT
            Not After : May 14 02:36:37 2025 GMT
        Subject: CN=68215eb5-f51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:df:e3:1b:b6:32:cf:ba:6e:a8:f9:3f:75:
                    a6:f1:1a:02:45:d0:39:86:84:08:b5:b3:06:5b:d9:
                    d0:43:ce:1d:53:70:9e:a2:33:85:69:3e:5a:81:d9:
                    6d:d6:c4:3b:0b:75:3e:76:bf:aa:02:42:9e:86:b2:
                    d1:c9:ab:3e:fa:69:4c:57:8f:e0:70:0d:fb:66:02:
                    79:b7:36:78:9a:25:f3:11:f8:ca:b6:5e:da:06:80:
                    b9:53:13:ee:10:2a:da:75:09:22:90:2c:fb:a8:83:
                    df:ec:c0:f7:cb:97:4b:62:a4:b7:b8:f5:22:7b:fb:
                    78:62:53:5b:ba:63:d6:77:9c:91:b4:a6:25:be:7c:
                    e2:e0:63:17:43:d6:49:d0:36:69:d4:c7:0e:ee:5b:
                    7c:da:4a:34:4e:b8:2b:94:47:27:bc:c7:c5:47:72:
                    81:48:21:09:bd:02:52:bf:38:dc:1d:47:f0:a8:fb:
                    5b:5e:e5:64:17:b5:8d:48:88:b4:c1:fe:8d:c2:06:
                    5b:ee:3d:78:9f:46:98:e8:a3:b9:73:09:ba:27:39:
                    16:15:1f:f8:e1:08:40:d5:38:8e:81:d9:8d:b5:52:
                    f2:14:2e:0e:0b:9e:92:5f:87:95:b0:b5:e0:36:43:
                    01:21:43:8b:c9:a9:6b:72:a0:cc:3a:65:3f:02:2a:
                    bd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:31:05:31:A9:48:E8:FF:0F:B8:65:BF:B2:E4:BD:5C:DF:1A:92:0C
            X509v3 Authority Key Identifier:
                keyid:A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f3:69:39:52:1f:26:91:d5:b9:86:26:e2:ef:da:61:a5:5d:
         0d:45:8d:10:57:57:0c:4a:54:77:db:a0:fc:bf:61:e1:ce:eb:
         46:11:1d:4f:d5:79:79:14:d9:6d:91:a6:55:02:26:45:31:58:
         80:cc:20:49:15:e8:e6:40:cb:b4:c4:62:a1:61:3d:49:31:45:
         30:4f:a8:4f:da:03:37:71:7c:ca:db:cd:31:74:9d:ca:c3:53:
         48:a0:48:fe:4a:0d:3a:c7:03:f5:12:9b:04:9f:4d:61:ea:ad:
         79:c0:30:29:c8:5f:0e:1a:62:ac:f5:0a:b3:6b:b1:25:9e:d9:
         5d:7b:b6:eb:f2:9b:3d:f2:59:eb:22:f1:55:0b:6d:b2:da:43:
         f3:11:25:e8:bf:82:2d:30:c1:69:4b:0c:ef:48:77:ab:e6:2a:
         05:66:a0:b9:57:4b:01:27:17:01:e4:52:12:3b:00:1e:cb:d7:
         8e:73:fd:51:50:51:52:0b:ed:c7:04:77:e7:06:2c:4a:c5:e1:
         88:f4:7b:9e:b0:24:dd:b9:eb:5c:35:26:ed:57:8e:26:e8:32:
         22:26:30:24:8a:36:25:57:6c:d2:d3:74:1a:e0:8d:d8:07:3e:
         3c:72:df:a2:36:4b:09:85:6f:6b:67:76:73:a0:5e:db:2f:db:
         0d:39:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:10:17 2025 by rpki-client