Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
File:                     dP2KmbmPfFmCclePXqFPEhiXqVs.mft (raw, json)
Hash identifier:          Pn17nPXmQ+Oy932iFERp1B2gbQ/IZKHyXP1EXVpGDpM=
Subject key identifier:   1A:38:EA:4F:91:4E:72:35:9B:29:FC:EA:61:5D:EB:65:82:B6:CD:8D
Authority key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Certificate issuer:       /CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
Certificate serial:       06DB
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
Manifest number:          06DA
Signing time:             Mon 12 May 2025 02:01:30 +0000
Manifest this update:     Mon 12 May 2025 02:01:29 +0000
Manifest next update:     Wed 14 May 2025 02:01:29 +0000
Files and hashes:         1: dP2KmbmPfFmCclePXqFPEhiXqVs.crl (hash: LRxFrLyC1MRVkYGXtkQ+aBJuyk2Q6d/qxX4LT+/TQAs=)
                          2: 315816DECF5F11ECA89077C9F1222468.roa (hash: nXuxmOxMY30f7U13vd8vjgc0lhwJby8Cd+gymuJClmU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                          rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738RI, serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
        Validity
            Not Before: May 12 02:01:29 2025 GMT
            Not After : May 14 02:01:29 2025 GMT
        Subject: CN=6821567a-ec87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:61:06:ef:0d:61:c6:28:d6:3d:e5:e4:45:a7:
                    13:14:f4:af:22:a4:7d:eb:86:37:75:f6:43:a6:b3:
                    5a:b9:bb:25:1e:1e:d8:15:22:86:99:b0:c9:67:f6:
                    5a:ba:82:ce:6d:c3:09:7c:fd:42:7d:65:69:fb:67:
                    9e:33:6a:aa:3d:6b:6f:1d:36:e4:be:70:ac:ef:c5:
                    a7:48:26:64:10:19:24:b8:65:60:df:f0:9a:a9:53:
                    bc:7f:f6:e4:02:64:f5:bc:91:dc:d5:0f:78:fa:9b:
                    e1:72:63:6c:69:b9:3a:e6:03:94:b8:fc:c8:12:00:
                    8e:8e:27:9c:79:cf:af:4e:6b:2f:7e:af:07:fe:49:
                    62:e9:86:13:a8:7b:c0:ad:26:f2:7a:4e:e8:03:13:
                    df:ce:59:eb:09:00:7b:09:da:73:a4:2f:bf:e1:4c:
                    b8:c1:de:ba:3f:28:65:b6:c1:7d:6c:de:6c:91:dd:
                    0a:3d:84:e5:42:46:f9:7d:1f:99:47:65:70:af:8d:
                    37:90:92:86:28:17:aa:5a:b2:ab:d3:c6:15:69:58:
                    73:ed:e1:1e:a9:76:e4:9d:fe:2c:61:22:00:b0:d2:
                    c8:85:e3:42:60:8e:6b:86:1d:62:f2:99:45:a1:89:
                    4f:d6:86:70:49:50:ee:6d:0b:a7:96:7e:83:0d:3e:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:38:EA:4F:91:4E:72:35:9B:29:FC:EA:61:5D:EB:65:82:B6:CD:8D
            X509v3 Authority Key Identifier:
                keyid:74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:53:fd:91:10:80:c3:84:e0:20:d6:82:fa:a2:74:5d:a0:cb:
         a7:1e:8c:b1:0b:92:97:0a:4a:93:78:80:43:6c:c9:0c:51:dc:
         66:2b:ab:c5:66:0c:1c:83:ae:76:43:48:e5:26:de:bd:28:d5:
         eb:f1:b3:2c:7a:ba:26:39:37:9b:1e:b9:13:03:68:93:77:a6:
         d9:24:47:66:0d:c8:ec:70:1d:b0:c9:1c:55:d2:55:7c:7f:f9:
         63:4d:7b:c0:a4:be:9c:05:69:be:83:49:f5:ad:48:b6:bc:33:
         47:7e:40:df:85:38:f8:90:e9:d7:e9:77:29:20:69:96:9f:7b:
         05:4f:6d:e1:b5:55:3d:37:0a:b9:11:0b:9d:f5:49:87:3f:ad:
         73:9e:ed:f7:72:87:b6:bb:4c:4f:b7:f4:be:09:81:2c:68:84:
         ed:da:43:9a:5d:ec:c9:64:16:15:3f:fc:6f:f3:2f:d9:8d:7e:
         79:36:d9:36:af:eb:38:4d:6d:03:84:3b:c9:7c:76:1b:25:10:
         39:60:07:58:68:f1:49:0c:c8:f9:db:1e:b6:0e:7b:2d:ed:f5:
         c3:22:6a:db:39:bb:75:87:19:62:51:73:a8:97:f6:85:16:b6:
         46:5c:37:f7:d9:50:42:da:6b:8f:96:04:a4:74:b9:75:61:9f:
         c9:9e:fa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:31:07 2025 by rpki-client