Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
File:                     x2kBfEr3fF65-LyEaI2IawFQMjo.mft (raw, json)
Hash identifier:          E5WeIROCvkEubCPz04aPk0VtJiOXuXSAfV1j97BLSF8=
Subject key identifier:   6D:78:68:73:E8:B3:13:A9:EB:47:31:26:4E:E5:AA:4D:01:20:67:CE
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Certificate issuer:       /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial:       039C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
Manifest number:          0397
Signing time:             Wed 07 May 2025 03:22:30 +0000
Manifest this update:     Wed 07 May 2025 03:22:29 +0000
Manifest next update:     Fri 09 May 2025 03:22:29 +0000
Files and hashes:         1: x2kBfEr3fF65-LyEaI2IawFQMjo.crl (hash: A0NIl6t9AFmtCaklKlcNlq1KnUWoy+Y7pqElqrFHksQ=)
                          2: 72225BFEA05C11EFA3BA68B5762E951A.roa (hash: ptoIi4ERlN82BasAiG/RRS1jzH5R046ZZLHto70J/kQ=)
                          3: B6F83C207D4111ED99A5A8DEF1222468.roa (hash: Z4JFecH0Pxw3ortmqmh93AEMH7ET0Xm0pVB1yg4vYI0=)
                          4: 6F61D56CD3F011EF874D80BD762E951A.roa (hash: aQ5eotveqGJrhssXyUfqPg5E0r4EtEOvK2qBBQ8Oc9Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 May 2025 00:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924 (0x39c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E4C8AF, serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
        Validity
            Not Before: May  7 03:22:29 2025 GMT
            Not After : May  9 03:22:29 2025 GMT
        Subject: CN=681ad1f6-c318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:f6:cf:0c:e9:47:a4:ab:4d:5c:a4:fd:a6:
                    b0:89:ba:a0:8d:c6:09:67:d6:ff:ce:09:1e:30:87:
                    dd:59:a9:7f:5b:30:01:31:db:5d:60:ef:7b:08:59:
                    61:74:99:71:42:5b:f0:12:71:ca:e4:d9:c2:9c:5c:
                    e6:d2:ee:99:22:ef:64:05:d5:ca:5c:03:20:5b:1f:
                    d5:1e:89:a8:03:50:52:2b:46:a7:89:73:07:e3:c9:
                    a1:ee:dc:63:76:4e:36:71:d6:f1:20:be:e5:32:a8:
                    93:96:ef:78:31:ec:f6:32:d1:fd:c8:f2:2e:e2:b6:
                    ab:5e:43:9d:1b:1c:fa:fe:15:05:fe:61:c2:31:96:
                    3a:cb:f5:ea:63:e7:50:7a:c4:0e:be:8d:11:49:5f:
                    e0:49:f5:b3:c5:94:3d:64:79:b8:77:a2:e6:02:ae:
                    66:c7:b3:56:63:cc:a9:aa:c3:46:34:f6:08:29:86:
                    a5:1b:d8:47:86:e3:e3:9e:17:fd:52:5c:a9:c8:a3:
                    fb:2b:5e:43:85:93:35:c2:3e:29:94:ba:f2:02:56:
                    6c:b4:28:e8:00:d7:23:af:30:1b:d0:db:f9:30:19:
                    5f:24:49:ba:ce:13:a9:7a:18:df:97:68:94:1a:56:
                    ea:51:29:a7:c8:82:30:68:55:fe:33:31:3b:5b:4b:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:78:68:73:E8:B3:13:A9:EB:47:31:26:4E:E5:AA:4D:01:20:67:CE
            X509v3 Authority Key Identifier:
                keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:36:a3:33:1a:54:81:9f:ce:1e:e4:ea:84:a5:14:23:fe:22:
         d0:a5:a9:23:0f:de:c6:7f:d3:b3:03:c8:b6:07:39:8b:5b:6d:
         0e:c0:37:19:a6:62:39:f7:a6:03:b3:cc:02:69:96:08:c2:7f:
         08:80:8d:47:d1:68:21:fc:0d:91:1b:6d:f8:01:98:fc:82:a9:
         c8:39:c8:86:4f:24:5b:e8:08:0e:e9:1e:92:26:a5:b4:60:6f:
         69:02:e9:11:70:59:89:09:57:ed:56:e2:62:cc:b3:1d:f2:9d:
         de:f4:92:6d:3a:6e:4f:ad:73:52:30:1c:22:34:27:87:4f:fb:
         db:7a:f7:b3:73:83:72:74:e9:ef:b8:81:4b:7f:75:88:92:14:
         88:b4:72:4c:4e:30:5c:d7:cf:bd:bb:53:d7:2c:3a:71:e4:a1:
         ed:2f:67:39:fe:01:cf:cf:05:47:1a:e6:68:ce:40:10:57:d1:
         aa:89:17:65:77:78:3c:97:14:8c:70:a5:70:fa:be:1d:4c:7b:
         d9:d4:62:0c:21:95:53:5d:71:35:be:58:74:e4:f6:24:5a:f5:
         75:ca:95:c9:54:a7:ba:2f:44:3e:a1:10:dd:bc:cb:07:89:06:
         4b:34:d4:d2:0b:fa:b0:d8:ae:fd:d5:0f:b3:ac:a1:cb:3d:8e:
         a7:5b:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:57:13 2025 by rpki-client