Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
File:                     FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft (raw, json)
Hash identifier:          1TUV3CTjK65M7fMc5oxXJgdaAj8bjs2FJOM8D43n/Co=
Subject key identifier:   BE:C4:5D:D5:B5:15:75:2A:4C:EC:17:2C:AA:B1:DB:32:44:66:03:B8
Authority key identifier: 15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB
Certificate issuer:       /CN=F36A32F5AF/serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
Certificate serial:       FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
Manifest number:          FC
Signing time:             Mon 12 May 2025 04:53:04 +0000
Manifest this update:     Mon 12 May 2025 04:53:03 +0000
Manifest next update:     Wed 14 May 2025 04:53:03 +0000
Files and hashes:         1: FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl (hash: xx8Z+Ifx11klxZBM/0gRn/BnxWs+lDfahVupdMyyOQU=)
                          2: B505C262710911EF82F828AE762E951A.roa (hash: xT25C22GG0twXqlKDHqtHM6ZD8MTGkUTk1OnWMySjRQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A32F5AF, serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
        Validity
            Not Before: May 12 04:53:03 2025 GMT
            Not After : May 14 04:53:03 2025 GMT
        Subject: CN=68217eb0-481f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cb:ab:ba:13:3f:ca:d1:2b:4e:47:85:ec:cf:
                    f1:21:f7:71:c5:75:fa:6a:2b:ea:da:42:da:b5:1c:
                    bd:0d:fd:f5:ae:59:10:0b:4a:4a:6f:7a:77:0c:9a:
                    f1:b3:fa:5c:ec:37:4f:47:bd:2b:46:0d:24:f3:27:
                    d6:65:39:64:0a:45:8d:64:ce:06:ca:e5:fc:3f:be:
                    62:a4:31:d8:9c:3d:fb:c0:2a:b6:68:54:0d:27:df:
                    ee:ab:ae:3e:3a:37:42:71:44:f1:19:f7:dd:fe:a0:
                    1c:db:55:bd:e8:45:63:5d:44:ae:8c:1e:40:26:b6:
                    87:d6:60:31:65:d1:54:09:5c:f1:d4:74:72:6e:92:
                    c6:de:28:68:62:54:98:8d:f7:65:49:69:76:08:50:
                    e0:e4:d2:c1:c7:65:ae:26:57:ba:24:55:8e:12:83:
                    5a:df:22:ff:07:d9:df:74:8c:4d:4f:2a:9d:42:ae:
                    83:15:9b:a3:27:d9:66:7a:32:00:be:8b:23:ec:5f:
                    64:55:da:8b:9f:05:b8:74:21:c1:d9:ee:84:fd:ec:
                    11:6a:6d:e1:c1:e9:5a:5b:10:70:a8:5d:32:56:55:
                    23:c8:9b:d3:c5:1a:7a:15:10:4c:b0:5c:5c:f0:6f:
                    7c:f3:20:45:83:df:37:d9:23:79:77:56:31:6b:8b:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C4:5D:D5:B5:15:75:2A:4C:EC:17:2C:AA:B1:DB:32:44:66:03:B8
            X509v3 Authority Key Identifier:
                keyid:15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3a:8f:50:54:93:d0:41:1a:09:6f:cb:3e:4f:c6:b6:54:ab:
         fe:83:d3:b0:7f:1e:25:1a:df:a3:0e:dd:a8:b9:11:9a:c6:d7:
         6f:d3:5f:b1:c5:f2:44:d9:99:85:fb:ce:82:99:b5:b1:22:32:
         8a:19:24:43:45:20:bb:57:69:d8:f7:a6:34:ff:e1:6b:91:49:
         f0:41:8d:88:77:92:27:57:ed:39:b3:a4:2b:28:03:0d:ca:5b:
         6d:62:2b:00:9e:e8:f9:b3:b1:22:e2:c0:f4:00:2f:20:a0:09:
         8d:cc:97:88:c9:1c:ca:1e:41:5b:9a:95:42:8f:3e:2e:f5:b0:
         34:ba:4f:d4:1c:11:95:f8:60:b3:58:e7:26:6d:58:69:44:ea:
         c4:5e:3b:68:a6:31:93:cf:5c:37:77:05:22:4a:e0:0e:a5:a0:
         89:f0:5d:fb:12:e3:c0:30:a1:63:9a:50:61:93:90:09:73:b5:
         b1:35:5a:f8:21:91:fb:2a:c3:73:94:25:c1:97:0e:15:93:ca:
         3a:f0:8a:3c:3d:0a:4a:cd:93:1d:0f:16:b5:69:be:57:3b:4c:
         54:38:ec:c7:0a:1a:50:97:3f:96:45:d9:6d:a5:02:96:a9:95:
         de:8f:2d:28:cc:92:eb:08:92:95:03:34:a9:1a:52:b9:1d:2d:
         74:b8:84:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:00:19 2025 by rpki-client