Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
File:                     _p4BMgoOlVJFOamGqPA_ketPwy0.mft (raw, json)
Hash identifier:          /lt4LK5zmzZnLFKW2JHzuTdwOIwdBcvJelt87t2KGRY=
Subject key identifier:   4D:C6:BA:21:73:F6:08:60:A3:A5:75:DA:8E:71:B1:B7:1F:A6:51:ED
Authority key identifier: FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D
Certificate issuer:       /CN=F368D658AF/serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
Certificate serial:       020B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
Manifest number:          0209
Signing time:             Fri 04 Jul 2025 04:24:24 +0000
Manifest this update:     Fri 04 Jul 2025 04:24:23 +0000
Manifest next update:     Sun 06 Jul 2025 04:24:23 +0000
Files and hashes:         1: _p4BMgoOlVJFOamGqPA_ketPwy0.crl (hash: 2Mux6yBTw+xugazHFvmRnPUp4M3ASJQFI+z4CZ4Kly8=)
                          2: 311C4904CA4B11EEB1A20B86775412E6.roa (hash: 6Jipg/U2Wzl+hCZ+uZdXwq1gTXKTDFOFMoiu2FzO3Lc=)
                          3: DC6D06E4CBEB11EEA9655CAB775412E6.roa (hash: rI3Z0thMS8kcuZHwZrlMXa6Fqk3EKGjdiGllXF+/6As=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 04:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D658AF, serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
        Validity
            Not Before: Jul  4 04:24:23 2025 GMT
            Not After : Jul  6 04:24:23 2025 GMT
        Subject: CN=68675778-357f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:c2:af:5f:23:a8:89:a8:17:12:2a:03:c7:
                    32:0c:06:34:d2:a4:29:45:2b:62:c9:71:12:03:f4:
                    a5:af:b4:cf:49:97:83:f0:9e:f1:78:03:13:f4:b3:
                    46:2d:9f:30:90:cc:87:e1:2d:ff:9e:c7:59:02:05:
                    ca:9c:86:c4:e8:b9:17:b9:cb:67:2a:b9:dd:2c:46:
                    70:fb:97:ad:7a:57:44:af:a3:3e:8b:ab:28:54:f9:
                    ec:0a:aa:b5:88:26:c7:1e:ed:47:df:a6:0a:65:45:
                    2c:27:e4:ff:15:34:d8:36:8f:61:53:76:1f:c1:22:
                    e4:65:4d:f1:11:9b:1d:09:8d:d8:52:91:ae:06:56:
                    9d:a6:cd:20:e1:a2:e6:f5:bd:e5:94:ed:37:3b:41:
                    6c:ae:47:a3:b8:4d:4d:9a:1e:7c:76:19:7b:c6:7c:
                    f9:7b:20:d9:74:2b:dc:1a:5b:c7:06:61:f9:65:64:
                    45:f6:08:d5:13:42:a0:79:f6:c2:5f:ca:90:55:7a:
                    a6:ba:88:0c:8a:0c:35:7c:e6:1b:44:58:38:59:e8:
                    79:af:40:40:8f:79:ca:35:83:f7:cb:47:56:f7:20:
                    43:46:55:34:48:ba:f9:5e:33:51:88:18:32:db:f7:
                    07:bf:aa:37:2a:60:e9:d2:b1:31:ad:29:95:39:88:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C6:BA:21:73:F6:08:60:A3:A5:75:DA:8E:71:B1:B7:1F:A6:51:ED
            X509v3 Authority Key Identifier:
                keyid:FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:87:fa:87:19:d5:4a:88:29:6e:fe:71:8e:b3:a2:85:01:e0:
         5c:4a:6f:e1:b5:a1:ad:6e:03:d2:ec:3a:43:f8:9b:56:80:89:
         70:07:c1:67:60:8c:1c:60:5a:d1:bc:ee:bb:cc:b4:23:2a:fa:
         f2:66:9a:0a:b1:20:ee:8e:7a:4a:de:3f:25:4c:cd:46:56:2c:
         a8:44:d2:a7:5f:16:67:af:c0:fe:2e:64:b0:13:8b:e5:e1:c6:
         a7:cb:98:8b:be:b0:8e:76:e0:58:0d:32:8d:57:4e:53:1f:b3:
         05:09:46:6c:02:ee:8e:f9:20:87:b3:6a:64:b2:da:61:d6:d6:
         96:ab:97:16:f6:bc:ac:2b:b0:ed:4d:f7:66:de:b2:bd:12:8e:
         7e:75:f1:63:7b:bf:35:20:f8:0e:77:af:c7:17:e6:02:c8:c1:
         7e:6d:a2:0e:d8:0f:72:5b:c7:ae:96:f6:ca:b7:07:f7:e7:95:
         a5:2f:f4:7a:da:3b:da:46:cd:77:88:9d:0a:59:65:f6:90:7a:
         09:80:b2:44:77:4c:10:1c:6f:7d:ab:91:fc:93:77:f5:b6:81:
         e1:fa:ec:bf:69:97:61:1c:aa:1b:87:39:35:d6:40:98:c0:24:
         c2:ee:1a:aa:5b:eb:9b:22:e1:91:77:8b:9a:76:6c:4f:af:03:
         fc:86:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:40:57 2025 by rpki-client