Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
File:                     IGKsHBhX7ixX9xZrmADtH4952XE.mft (raw, json)
Hash identifier:          lCZ1g7vmtxJrVxfLUoOLJO2I30M3FUu4y3elqY5TiPw=
Subject key identifier:   60:C3:A7:B5:B1:DA:B7:60:73:FC:41:9C:8B:B3:C4:C3:9F:EE:D8:9E
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Certificate issuer:       /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial:       0109
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
Manifest number:          0107
Signing time:             Wed 14 May 2025 04:51:07 +0000
Manifest this update:     Wed 14 May 2025 04:51:07 +0000
Manifest next update:     Fri 16 May 2025 04:51:06 +0000
Files and hashes:         1: IGKsHBhX7ixX9xZrmADtH4952XE.crl (hash: IsUacx2+o5BuyV7SV73nw/BlkcZrOISNg3uH29MvreI=)
                          2: 730CF53E6F7811EFB7469458762E951A.roa (hash: 4Xr+HaCJbqAah+5S3H7APXwnc3AnA1LsHigd1Wadgok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 May 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C3F1AF, serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
        Validity
            Not Before: May 14 04:51:07 2025 GMT
            Not After : May 16 04:51:06 2025 GMT
        Subject: CN=6824213b-015b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:cc:ec:de:60:29:15:a3:a9:38:0f:ee:b3:
                    4e:ae:e8:42:1f:5a:05:a1:3d:c6:71:6c:42:bc:57:
                    d2:21:a4:77:58:b5:6a:12:10:d6:da:54:17:57:3e:
                    0a:11:32:4f:48:a6:84:1c:e6:a0:be:ee:94:d1:d3:
                    8d:39:cc:e6:ba:b5:f1:7b:c1:30:7e:0e:11:f5:72:
                    fb:c3:35:a2:d9:64:9e:41:18:99:9f:99:93:81:8c:
                    f6:6e:ff:12:bd:d2:9c:4c:09:2f:b6:2a:7b:99:00:
                    f4:f6:ce:52:24:b0:6f:77:9d:e4:33:f2:26:c8:02:
                    08:ce:1e:65:8f:56:33:2d:01:94:79:e5:e4:a6:5e:
                    01:9b:99:07:f6:d3:68:ae:4b:b4:76:42:7a:60:3d:
                    d5:aa:81:f0:15:79:74:3e:7c:cd:b1:f5:bd:29:b2:
                    6a:03:58:42:03:2c:e2:18:7a:1c:c6:69:e1:61:1b:
                    33:a4:d2:88:3d:03:fe:6f:70:21:19:47:40:92:ef:
                    d1:bb:45:88:66:2a:5b:55:ad:da:fb:15:56:69:52:
                    25:bc:ac:78:f8:0f:54:a2:9c:92:e8:a6:cf:2f:79:
                    e3:1c:8e:76:9f:ea:b3:2e:07:da:67:df:71:0f:ad:
                    3c:4c:38:05:4b:4d:dc:9d:99:1f:bd:00:50:c3:4a:
                    21:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C3:A7:B5:B1:DA:B7:60:73:FC:41:9C:8B:B3:C4:C3:9F:EE:D8:9E
            X509v3 Authority Key Identifier:
                keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0a:0e:c0:fa:e1:af:3a:63:6b:05:9e:f7:80:f0:3a:25:61:
         ab:6a:98:a0:0c:10:e2:9c:87:b5:56:cd:71:45:f9:d9:f7:8c:
         ec:f5:91:6a:cf:95:48:29:4f:85:c3:4b:4b:ab:7d:e1:71:8c:
         c7:4e:36:97:75:fe:c5:5e:4f:4d:e9:6c:3a:0f:62:09:cb:bd:
         cf:d0:32:b2:19:3d:f7:d0:5f:68:68:ac:50:98:82:2d:a8:82:
         b2:50:bf:70:eb:b4:37:e4:12:60:93:db:d2:31:06:b5:73:5d:
         ee:14:97:39:ee:88:ae:2f:fa:ec:27:68:38:e6:d9:52:c6:36:
         d3:f5:95:4b:b2:09:92:6c:05:73:26:f8:3b:b8:27:94:e4:da:
         6e:3a:87:13:74:22:f1:db:e8:04:8c:a8:4c:52:81:5a:5c:08:
         7a:bd:06:31:97:3e:3b:14:a0:6e:3d:f6:f1:d3:95:8b:1f:c9:
         cb:34:11:c2:0d:27:2f:3f:5e:34:ae:83:c7:2c:55:72:b2:d2:
         34:c9:13:04:c8:19:f1:61:ab:74:cc:87:df:64:a4:ab:eb:b2:
         73:7f:3c:15:7c:37:c7:cc:b3:a4:4d:79:6d:53:66:d8:48:5d:
         fe:6b:a3:77:80:2a:bd:a6:1e:9f:42:ae:35:7c:a6:55:73:00:
         42:57:8e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:47:34 2025 by rpki-client