Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
File:                     bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft (raw, json)
Hash identifier:          Z17UkRT8OZ5oOsQdCLXhBI8n+WdmGW7UAQN7FNR/hwM=
Subject key identifier:   68:15:3B:37:7D:5A:F8:9B:4A:99:94:D0:D2:77:6F:2B:F9:97:7D:DF
Authority key identifier: 6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A
Certificate issuer:       /CN=F369B918AF/serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
Certificate serial:       0698
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
Manifest number:          0697
Signing time:             Tue 01 Jul 2025 02:07:17 +0000
Manifest this update:     Tue 01 Jul 2025 02:07:17 +0000
Manifest next update:     Thu 03 Jul 2025 02:07:17 +0000
Files and hashes:         1: bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl (hash: 9jjAC1Yk3pj+OKqY8i811zHzujZ67L/17CaZi2vWHAo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 02:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B918AF, serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
        Validity
            Not Before: Jul  1 02:07:17 2025 GMT
            Not After : Jul  3 02:07:17 2025 GMT
        Subject: CN=686342d5-35e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:81:e1:d8:cd:d9:8e:c5:56:7f:62:81:e1:
                    7f:96:4d:ed:39:fb:74:eb:c1:e7:95:6d:ee:2f:cf:
                    59:c3:d2:86:a8:ba:74:35:4f:c8:1d:b3:2a:b5:0d:
                    ac:4f:37:ac:0e:ab:42:89:86:23:d0:f8:cf:22:71:
                    ea:c5:6b:59:ca:72:ea:f2:2a:50:fa:54:a9:0b:57:
                    d7:74:39:93:b5:08:17:3c:a0:66:3f:75:e6:c7:ab:
                    f0:25:96:ef:7b:69:66:e2:8e:d5:47:ac:dc:47:37:
                    5e:7f:13:04:a7:c0:a6:fc:91:50:83:50:2d:ec:88:
                    03:a1:0f:61:5b:67:0c:d0:37:34:4c:5e:e7:41:cf:
                    11:2f:03:dd:57:2c:f3:b9:1d:c9:20:6c:a8:7f:8f:
                    c7:41:41:b6:2f:b1:59:90:48:3b:c1:de:18:58:53:
                    21:b3:f9:2d:ec:11:5d:62:b2:c6:be:b1:78:96:9d:
                    14:e6:e2:9b:8a:ab:5f:8c:1c:49:97:28:15:ec:e0:
                    66:a7:ec:a9:88:5e:48:2c:8f:dd:c9:9f:0d:2d:dc:
                    69:fb:ee:68:29:b8:f0:b2:bd:65:80:f4:bd:69:ff:
                    4d:d3:5f:86:42:97:89:22:64:6a:1f:9e:60:a6:2d:
                    73:e4:c5:5b:5c:0c:ee:fe:96:dc:34:71:c3:c5:af:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:15:3B:37:7D:5A:F8:9B:4A:99:94:D0:D2:77:6F:2B:F9:97:7D:DF
            X509v3 Authority Key Identifier:
                keyid:6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8f:60:eb:33:fc:8d:59:8e:26:2e:63:ad:d1:ae:4d:a8:b8:
         82:28:26:ec:33:e5:f6:ed:85:db:cd:1c:11:ba:d2:22:b2:39:
         cd:f3:d4:90:e3:ca:88:63:e7:41:86:c5:15:a8:f9:97:1b:e1:
         d3:6e:c3:2c:1e:ad:ae:f0:6e:fd:43:cf:5c:cf:31:70:cf:c7:
         d2:3b:fa:17:b7:4b:63:be:89:4a:04:7f:c7:2c:95:80:7e:18:
         6a:9d:ae:43:22:ee:a9:fd:d7:f8:0a:bb:6e:c2:f0:29:ec:e7:
         ca:ac:0c:b6:c6:ef:6f:35:6c:b0:40:d3:71:e4:c3:08:96:32:
         ba:56:44:55:bb:41:5c:28:3b:95:ab:c5:b6:44:5a:94:61:ec:
         f1:bc:be:4b:02:55:cc:a5:fd:08:8e:c4:cc:de:10:a0:d8:53:
         46:13:7d:45:4c:47:7f:65:8c:a4:34:44:ad:f3:d5:9d:e0:f9:
         71:13:59:6e:c1:7f:a6:76:5e:ec:53:21:e4:1a:d8:9c:7d:5a:
         55:54:8e:42:a1:cd:09:a9:8b:0a:04:0b:a2:74:ca:44:60:f0:
         48:98:32:56:aa:03:8e:f7:6f:b1:74:84:10:41:da:ef:8a:d8:
         36:4f:79:02:7b:f2:bb:b3:a8:63:eb:b1:fc:d7:c7:85:22:61:
         6c:15:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:04:06 2025 by rpki-client