Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File:                     cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier:          4AEuPoaJK26YX6lDjw84IqnivGpUDup19lXXQ9B1PmA=
Subject key identifier:   7E:8B:23:CB:3B:1A:79:14:C7:75:FD:DA:C7:E8:B2:07:8D:FC:39:62
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer:       /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial:       05CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number:          05CB
Signing time:             Fri 16 May 2025 01:39:01 +0000
Manifest this update:     Fri 16 May 2025 01:39:01 +0000
Manifest next update:     Sun 18 May 2025 01:39:01 +0000
Files and hashes:         1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: cHTTb99HgkLBmnhJ5P9+J9y3UnKOp6GWO986XHi3Vqo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 May 2025 01:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1483 (0x5cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
        Validity
            Not Before: May 16 01:39:01 2025 GMT
            Not After : May 18 01:39:01 2025 GMT
        Subject: CN=68269735-21de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:a7:94:f9:f3:e2:ef:32:8d:4d:67:db:0f:
                    41:73:0f:85:40:a8:c4:22:e0:b2:ba:f1:07:12:7b:
                    61:83:ea:b4:15:5e:fe:45:c5:74:b1:22:cc:d8:4f:
                    2a:2c:cb:72:11:11:3b:12:35:96:22:e6:7d:84:95:
                    04:ff:35:fc:f2:fa:5c:75:b1:27:51:d7:6e:07:46:
                    45:77:4c:97:08:88:a3:ca:b5:7e:e7:f9:e1:4c:2c:
                    0c:35:71:e8:e4:ba:5e:5e:eb:ac:94:25:7e:80:e0:
                    f7:7b:4d:c5:1d:1f:f2:60:cb:fd:f1:03:2b:c3:b9:
                    ec:5e:7e:69:b8:b0:3d:2f:42:ec:13:37:4a:8d:76:
                    6c:8c:a7:9b:b1:ff:9e:ab:a4:e8:f5:40:bb:a0:92:
                    dd:33:96:01:95:2d:9e:01:51:32:40:70:77:d3:13:
                    4d:3f:7e:e3:ba:d7:0c:71:b5:95:e8:12:b5:79:16:
                    2b:4f:15:54:99:9a:a3:66:dc:f6:70:e1:82:77:a6:
                    02:6a:3b:74:e8:ec:b9:b8:84:c1:5b:f1:65:91:53:
                    38:c9:30:78:fc:d6:09:b9:4e:e1:54:3d:d4:9d:ae:
                    a1:25:a6:1a:ff:22:94:3c:ab:59:90:4f:0a:dc:a2:
                    7b:a0:ed:b6:48:38:e2:df:d7:2a:18:58:ec:9b:e7:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8B:23:CB:3B:1A:79:14:C7:75:FD:DA:C7:E8:B2:07:8D:FC:39:62
            X509v3 Authority Key Identifier:
                keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:ad:51:f1:b7:ea:8a:ac:de:4a:92:9f:5c:d1:8d:84:b7:
         46:d6:39:a2:2f:62:6a:0d:89:dd:0a:2f:93:a6:25:8b:89:5b:
         61:59:4c:d3:88:bf:78:d8:3a:99:c8:e7:f8:49:1b:3d:c4:9f:
         37:61:03:fd:5b:55:8a:8a:f9:7b:fb:5b:19:cd:47:3f:6a:3b:
         72:07:a6:fe:08:d9:98:2f:e8:85:f6:b6:00:8d:ec:5d:68:cd:
         cd:7a:dc:02:74:26:b6:27:46:55:6d:a2:17:92:d4:16:1d:44:
         f3:02:29:7b:18:8c:43:ea:c3:8f:48:74:c9:88:30:b7:ba:f1:
         78:ab:1a:e7:ba:3d:b3:05:e2:fb:04:2a:7b:b9:6e:bb:51:0d:
         10:5a:63:68:54:eb:f3:59:24:ae:03:2d:5b:9b:6b:85:7c:39:
         c8:2e:95:5d:63:86:98:8a:16:6f:06:3b:40:d3:54:10:00:92:
         b3:17:0c:0d:e3:62:ab:9b:67:ca:7c:82:c4:39:91:45:2f:0b:
         69:da:69:52:0e:8a:8b:e0:c7:06:2e:07:d6:65:9f:cd:72:91:
         c2:14:a5:aa:b7:23:2b:b5:9e:d2:bc:74:cb:92:7d:69:d3:9a:
         5b:d4:52:2d:1a:0c:30:76:f1:c0:fe:d4:43:57:56:a5:76:9c:
         96:fa:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:53:35 2025 by rpki-client