Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
File:                     0uDwPq7oAqkBwlcRKP55pj80aSw.mft (raw, json)
Hash identifier:          l367KVoZF+kXxk9oZnFcgeoJKcIUkpdcKsYIPC18FC8=
Subject key identifier:   6E:D3:A4:2B:A0:E9:9E:9F:12:E4:67:82:AB:3E:FC:15:F2:ED:D6:96
Authority key identifier: D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C
Certificate issuer:       /CN=F36858D5AF/serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
Certificate serial:       02BD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
Manifest number:          02BC
Signing time:             Sun 29 Jun 2025 03:59:05 +0000
Manifest this update:     Sun 29 Jun 2025 03:59:04 +0000
Manifest next update:     Tue 01 Jul 2025 03:59:04 +0000
Files and hashes:         1: 0uDwPq7oAqkBwlcRKP55pj80aSw.crl (hash: WBuRYsUQA8EQjtpBDygAjiYlq04lcb7D2QnMCW0/GDo=)
                          2: 6C083968730911EEB676D5174AD9E6FC.roa (hash: GPazHsxOeA8iw549I//PnsuiDjidxxug1DVogvWrQ6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 701 (0x2bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36858D5AF, serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
        Validity
            Not Before: Jun 29 03:59:04 2025 GMT
            Not After : Jul  1 03:59:04 2025 GMT
        Subject: CN=6860ba09-18bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:56:e1:25:92:57:45:7a:da:1c:c9:b1:e0:5b:
                    d5:31:09:c3:b5:f6:c9:1e:aa:bc:ee:f1:75:c6:ae:
                    d6:c7:22:52:ab:0c:da:9c:0a:b3:aa:30:13:99:f3:
                    08:f2:b6:c0:7f:72:fd:0e:46:26:b8:6d:8b:8d:d3:
                    69:82:92:0c:06:71:01:5d:b4:2d:02:3c:aa:c0:ba:
                    b2:16:7b:a5:a2:1a:1c:72:82:bf:4e:27:8b:61:12:
                    05:6b:f7:41:4f:d0:98:2c:0c:8a:dd:1a:6d:3c:c8:
                    07:7f:63:d3:dd:1b:43:cf:63:84:ae:2a:42:c1:5e:
                    b3:41:47:d8:1b:d3:26:a5:81:8b:6b:28:54:cd:69:
                    60:90:9f:f5:8f:58:86:14:e0:be:59:0b:f9:0b:89:
                    ec:fa:fb:62:35:be:35:9c:15:5e:7d:51:10:d1:19:
                    f4:70:e9:95:8b:f6:21:3b:7c:62:08:59:38:ad:0d:
                    cc:01:ee:a4:ac:b0:50:7e:5d:bc:bd:21:76:47:60:
                    e6:b2:78:5b:8a:01:de:c6:e3:5f:28:44:66:b1:8b:
                    b7:43:a8:a5:c5:a8:8c:4d:3d:56:16:74:84:84:e1:
                    b4:ee:3d:d0:2f:6c:2b:60:4f:5c:8a:90:d7:a4:4d:
                    6f:cb:e1:09:ae:30:ec:8c:ae:12:cd:e1:80:13:66:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D3:A4:2B:A0:E9:9E:9F:12:E4:67:82:AB:3E:FC:15:F2:ED:D6:96
            X509v3 Authority Key Identifier:
                keyid:D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:85:ad:e7:49:c8:bf:cc:20:f0:13:e2:34:6f:da:72:3a:bc:
         fb:6d:e1:e2:ed:ab:b0:86:5c:31:c3:30:d5:44:0a:9c:3d:e8:
         1f:27:de:fb:d7:25:68:99:32:31:9e:8e:34:0c:61:c3:e1:e2:
         26:6c:2e:b0:b6:6a:7a:ec:85:37:02:1d:38:16:9c:65:a3:a9:
         56:1c:d6:a3:89:b5:cb:86:c6:fa:2d:8e:8f:b4:46:3f:a7:2f:
         e6:44:17:1e:28:4b:ec:4d:a3:47:75:48:f4:30:9f:fa:7f:54:
         56:5c:20:29:27:35:29:45:d8:7f:7c:d2:4d:41:f9:0a:fe:a5:
         72:33:cd:88:84:5c:47:98:d0:56:93:30:f3:e6:dc:c8:d7:52:
         e2:04:3b:34:cb:f7:26:3c:cc:0d:0b:22:97:12:cb:35:e6:9a:
         00:1c:f7:1f:e1:fd:79:d6:ee:8f:fd:5e:f6:78:16:44:94:26:
         39:89:83:e8:95:04:f0:5e:ba:b2:52:99:8f:21:14:18:b6:8b:
         0d:e3:cf:1b:16:2c:dd:c3:ce:ae:97:15:90:97:2b:f8:86:f7:
         91:33:3f:97:e4:95:40:3a:4c:09:31:1d:dd:2f:8f:b5:73:dc:
         4b:3b:07:55:64:c1:91:b8:8c:78:3e:d8:85:2c:bb:f6:24:77:
         02:a6:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:43:51 2025 by rpki-client