Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
File:                     3tjUZmQoMBoc4GZckKo0Jgr_74k.mft (raw, json)
Hash identifier:          icYKwZfdo0dTq+9Ge1kNUIpN9BRHTrc85aPtqslnvNw=
Subject key identifier:   1B:18:8B:51:39:20:23:B8:37:2B:C9:F0:3E:4E:BC:A6:C1:7C:0F:04
Authority key identifier: DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
Certificate issuer:       /CN=F36A8A05AF/serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Certificate serial:       011D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
Manifest number:          011C
Signing time:             Thu 03 Jul 2025 04:57:27 +0000
Manifest this update:     Thu 03 Jul 2025 04:57:26 +0000
Manifest next update:     Sat 05 Jul 2025 04:57:26 +0000
Files and hashes:         1: 3tjUZmQoMBoc4GZckKo0Jgr_74k.crl (hash: QjFMnYT1VcZjXNTu4nOcWubsIJyvMdLOw3y/JAP5XTg=)
                          2: 9058BEEA816411EF8E2AA088762E951A.roa (hash: RCn22Xwu4T2MS/ROjl1vK38sisW96USMCz48c97gNCE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 04:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A8A05AF, serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
        Validity
            Not Before: Jul  3 04:57:26 2025 GMT
            Not After : Jul  5 04:57:26 2025 GMT
        Subject: CN=68660db7-0449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:f5:4e:b8:85:77:48:be:fa:e4:1f:a8:59:
                    38:b8:0f:9a:27:70:9f:39:75:28:3a:5c:21:57:a4:
                    a3:d8:ed:16:e4:2b:9f:b6:9f:e1:57:68:33:ea:5f:
                    6c:45:80:0f:37:6c:1d:df:ba:0f:cc:a0:fb:c2:a2:
                    47:c6:a9:4d:94:c8:b3:33:aa:c6:95:61:92:6d:ee:
                    77:fc:09:2e:4f:0f:60:d5:d1:ae:ba:86:41:d8:6a:
                    d8:22:af:68:7b:8b:ea:cf:af:79:fc:b8:19:9d:ff:
                    ae:41:c0:60:01:81:16:85:d0:a0:17:ec:89:c0:5c:
                    a7:fe:e2:c1:5d:0d:18:b3:76:53:61:1d:6e:17:81:
                    34:8e:ba:d9:0b:bc:12:ed:4b:57:c4:11:cc:e2:98:
                    8d:91:5f:03:76:fd:0a:08:98:a6:00:44:0f:08:4b:
                    82:09:94:ee:a3:ae:cb:1d:3e:0a:d5:a5:a8:83:cb:
                    22:38:49:4a:9a:55:05:9a:82:d0:08:6b:b4:cc:78:
                    c5:4e:0e:a3:1b:e6:8d:5b:0c:2f:e0:4a:c7:3e:3e:
                    e7:e4:14:fc:95:1d:02:cb:9f:6d:7f:4d:63:07:02:
                    e5:16:13:ce:3e:10:b6:7b:18:1b:4a:0f:f0:e7:36:
                    2b:36:f6:a1:67:fe:87:91:4c:f4:9d:20:06:db:63:
                    fd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:18:8B:51:39:20:23:B8:37:2B:C9:F0:3E:4E:BC:A6:C1:7C:0F:04
            X509v3 Authority Key Identifier:
                keyid:DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b0:3b:fc:ef:a1:5c:46:b0:38:8e:d6:ee:4d:37:d5:c4:7c:
         2d:a5:69:c4:56:87:e4:5c:b3:52:e9:fa:22:f1:a7:9d:15:68:
         5b:1b:f4:eb:85:57:49:8a:b8:a6:1b:00:52:36:3b:54:3b:fc:
         7f:7d:c4:12:3d:7e:e9:51:50:b7:81:c2:fc:50:59:2d:21:55:
         69:f5:8f:8d:f3:cf:b4:09:99:fd:72:da:ac:b7:a9:e3:1b:6b:
         b2:6b:59:41:e9:d5:c7:c8:ac:02:fa:d6:90:73:19:38:53:29:
         52:b5:b0:01:4e:15:2e:62:26:39:3b:86:bd:ac:04:f6:07:d8:
         58:4f:6d:a9:02:89:dd:c4:14:f1:76:16:bb:e8:7d:12:74:81:
         a7:70:46:3d:12:82:b9:a7:90:6f:26:20:b8:fa:36:05:61:53:
         ad:9e:78:a4:8a:f4:e4:71:39:4f:48:34:2a:21:1f:25:19:26:
         34:3a:fe:2c:d6:eb:33:2f:cf:f4:cd:15:20:53:9b:35:24:c3:
         da:00:f8:6e:a2:2c:3b:cd:45:31:ef:12:6d:66:d0:f1:a1:99:
         c2:ad:4a:2e:70:28:90:87:c2:41:c3:52:1b:80:43:f8:33:56:
         15:bb:d6:e5:37:d4:a9:a0:e4:37:4c:73:ab:19:00:43:8c:76:
         95:3c:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:21:31 2025 by rpki-client