Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
File:                     165kWvnltuIirj4ZQpl0u9hlaUE.mft (raw, json)
Hash identifier:          ZcSg4oygTbFavftc8H3kMnYraSNZr/VGDSWCJoVp3sA=
Subject key identifier:   03:9A:5A:6F:5E:2B:26:73:4C:00:E0:B0:4E:D9:94:F1:18:32:25:EA
Authority key identifier: D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41
Certificate issuer:       /CN=F36A9688AF/serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
Certificate serial:       057C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
Manifest number:          057B
Signing time:             Tue 13 May 2025 02:36:09 +0000
Manifest this update:     Tue 13 May 2025 02:36:08 +0000
Manifest next update:     Thu 15 May 2025 02:36:08 +0000
Files and hashes:         1: 165kWvnltuIirj4ZQpl0u9hlaUE.crl (hash: MdxBm9/K2fhvef6SOwlzkID9B9k2nqSdbi3gGJG6pg0=)
                          2: 2A3F25CA461211EDA2ED7DD4F1222468.roa (hash: lvPd6VTKcLMhU/3Nl8dyjCE5frGwG4hqXNXwJymfNBg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 May 2025 02:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9688AF, serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
        Validity
            Not Before: May 13 02:36:08 2025 GMT
            Not After : May 15 02:36:08 2025 GMT
        Subject: CN=6822b019-4eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:d8:23:9f:21:ba:b6:dc:e4:de:d0:22:06:
                    f8:26:82:09:bd:6a:65:aa:1a:77:02:58:36:bf:99:
                    fe:b9:2b:1c:66:f5:b8:6c:3b:42:6c:64:33:5a:7b:
                    7b:a0:ac:6b:9d:58:4e:96:34:70:b7:1c:5a:34:36:
                    7d:65:e1:61:48:a6:eb:28:27:85:e6:d7:aa:40:6f:
                    80:6b:9d:35:92:a8:f1:c8:25:62:80:0e:da:23:5f:
                    7f:c9:0e:eb:77:7e:36:3a:1d:8e:98:57:3c:b5:66:
                    93:08:bf:db:6a:51:d0:18:92:70:8f:0d:7d:c9:37:
                    e4:a9:ec:ee:c5:43:7b:61:f0:45:36:97:ab:41:14:
                    24:5b:eb:f8:f0:8d:74:da:2e:25:19:55:c4:08:cc:
                    c8:50:3b:c0:da:6c:66:a7:d9:d4:83:68:da:38:65:
                    a6:93:3c:9e:9a:5c:74:da:97:e4:1a:9e:b2:b9:02:
                    f1:5b:7b:8a:52:2c:b3:d6:70:02:01:fb:cd:e0:75:
                    c6:d7:6e:24:49:66:10:39:39:f3:f2:6e:91:58:60:
                    7c:42:1d:8e:db:33:19:6b:78:20:cd:b5:b2:7b:89:
                    01:a0:d8:24:40:d3:be:f4:e5:f0:bb:55:3a:46:40:
                    f3:3c:65:49:34:ff:ac:7a:fd:b1:50:06:5d:77:42:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9A:5A:6F:5E:2B:26:73:4C:00:E0:B0:4E:D9:94:F1:18:32:25:EA
            X509v3 Authority Key Identifier:
                keyid:D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9f:30:1b:9a:76:63:ef:43:43:12:22:91:f3:f7:d3:72:04:
         64:1f:83:37:29:00:5f:fa:8b:30:11:98:43:05:90:32:90:6b:
         f2:70:71:7b:d3:90:45:f0:d7:d2:26:a5:c6:1d:2b:83:77:54:
         c9:12:b3:00:15:9a:d3:22:cd:6a:39:46:72:a8:27:d9:3a:49:
         89:b9:87:c8:90:bb:94:24:21:eb:c5:f1:0c:b4:30:21:73:a1:
         b0:38:17:51:ff:c2:78:b3:f0:21:09:8a:d5:53:6c:fd:bc:fb:
         04:ca:2d:57:35:a2:69:a7:3e:ca:bf:8b:71:86:4e:6f:de:4c:
         34:bf:cb:dd:4f:76:41:fa:33:2f:c3:5d:f6:32:b4:80:ba:90:
         be:3e:da:a5:96:ae:b6:96:82:7d:22:55:a9:7c:6f:5e:20:71:
         b5:82:42:e7:12:9c:2b:9e:40:d6:fd:79:bd:56:4f:f4:ab:90:
         c3:a8:85:12:39:9f:8f:3f:65:5e:4e:ca:c5:ec:2b:61:f6:0b:
         57:cb:64:78:90:f7:9f:35:fc:7d:4e:51:29:9a:6a:17:90:1b:
         f3:d6:36:c2:cd:3b:ec:06:b6:60:cf:60:7a:6b:8b:45:7a:22:
         a2:73:25:9a:19:3b:48:85:fd:1f:3a:2c:d3:18:44:b5:c6:0e:
         49:80:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:14:21 2025 by rpki-client