Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
File:                     fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft (raw, json)
Hash identifier:          fWDcL8iah22Hj2ht9i6Rrk1FdGA4N1IN5KXv0I0TMzM=
Subject key identifier:   94:66:A5:38:D8:01:97:DB:15:34:CB:DC:C7:0A:09:C5:8E:68:DF:0C
Authority key identifier: 7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
Certificate issuer:       /CN=F3691DC2AF/serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
Certificate serial:       058E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
Manifest number:          058D
Signing time:             Wed 02 Jul 2025 02:33:54 +0000
Manifest this update:     Wed 02 Jul 2025 02:33:54 +0000
Manifest next update:     Fri 04 Jul 2025 02:33:54 +0000
Files and hashes:         1: fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl (hash: rV4WKHjvFjJ319h0wrogEsdiZlKmglf4O+QdFiENFUc=)
                          2: CA1FC8CC1A1E11ECBF7CA134D8A014CE.roa (hash: 89ZoBOyWvLwCDH6XINtqPI4XAUHBP8Wb3FK9Ykris/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 02:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691DC2AF, serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
        Validity
            Not Before: Jul  2 02:33:54 2025 GMT
            Not After : Jul  4 02:33:54 2025 GMT
        Subject: CN=68649a92-5227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:cd:f5:73:07:46:ef:77:2a:13:02:88:bc:
                    33:f6:2d:25:8a:21:55:d1:6c:63:af:85:4c:b3:23:
                    03:3d:0b:ea:f7:84:c4:af:ea:75:48:43:c0:25:d9:
                    03:57:11:01:53:d9:82:b9:55:e9:7c:8c:d4:5e:51:
                    49:81:70:7f:b8:6f:b8:f5:0a:81:6b:8f:e3:c1:ae:
                    0f:1b:79:11:03:f8:4b:c0:14:ab:a8:fa:10:43:40:
                    d5:c8:f2:7e:6a:b4:b3:12:eb:4b:22:19:ff:0b:83:
                    e2:33:32:e0:4b:a4:74:90:2d:cf:d7:a1:cb:20:4c:
                    1d:84:1c:b2:3b:70:af:66:ba:89:4a:63:f5:1a:95:
                    b6:7c:9a:f2:3a:6c:65:49:7a:5e:46:79:cd:7c:64:
                    2d:80:13:74:c7:bd:a0:28:b4:36:ab:67:81:4f:d1:
                    12:6a:2d:b0:51:0b:db:09:7f:fc:c7:03:89:64:5d:
                    f9:a2:70:55:2e:1a:60:f1:0a:d4:45:90:a2:1d:2f:
                    51:a6:6d:73:7a:9e:af:78:86:19:b0:b8:dc:1f:62:
                    a0:98:a6:5e:fd:d9:0d:c3:41:f2:10:2d:d5:bf:8a:
                    11:61:85:0f:cb:32:68:de:cb:67:a1:3a:3b:db:80:
                    3e:21:72:c2:f9:44:bc:d7:96:74:6b:d3:12:2a:87:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:66:A5:38:D8:01:97:DB:15:34:CB:DC:C7:0A:09:C5:8E:68:DF:0C
            X509v3 Authority Key Identifier:
                keyid:7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ad:bb:38:ac:75:3b:b7:90:5e:d1:da:7e:a9:33:e5:06:e2:
         d7:b3:16:df:fe:f9:b8:8b:74:0b:bb:08:20:56:d6:84:4e:e4:
         32:e5:f3:64:31:97:34:35:6a:96:79:0e:43:98:f6:df:14:5a:
         6c:5a:d5:95:d7:b9:bc:74:19:74:a6:a0:1f:63:6a:f5:f8:4b:
         9b:97:f7:83:e1:a7:5c:c1:63:30:68:1f:50:dc:9a:eb:1f:ae:
         a1:70:2e:bf:e0:8e:d5:e1:85:d8:80:d5:3a:29:42:7a:f3:0c:
         4e:f2:6d:3d:91:0d:4f:36:fe:60:2a:33:09:17:41:82:49:5e:
         e6:ce:69:4d:48:11:f1:76:d6:bc:7a:e8:04:7b:7b:ef:b7:1a:
         e8:26:76:5c:ee:d9:23:e1:c2:23:b2:31:8f:a2:72:4d:59:4a:
         8e:89:4d:a0:07:d9:1d:e6:cb:86:7f:cb:56:a2:3b:5f:78:f1:
         26:34:38:8e:08:40:96:6e:8d:2c:d2:ba:a1:53:b5:c2:a0:8f:
         57:f4:1a:93:5c:70:b1:42:c4:f6:50:a5:20:3e:9a:fa:f4:e0:
         a7:be:c9:77:d8:8a:9e:6c:4e:fb:b1:00:97:83:f1:bf:63:0a:
         30:80:03:b0:fb:c6:a8:5c:29:9d:ed:13:8e:d1:18:72:2a:87:
         b3:f1:9b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:36:40 2025 by rpki-client