Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
File:                     ai026HfXJSbET24AT680-ZBPIxE.mft (raw, json)
Hash identifier:          0rv0QUdL1vBPv+A9rb1M3ZWiwVNu5YmmcHCitqZExkA=
Subject key identifier:   71:09:CC:AF:17:9F:ED:11:25:FC:69:77:A6:8D:6C:CE:C9:38:96:7E
Authority key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Certificate issuer:       /CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Certificate serial:       06A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
Manifest number:          06A6
Signing time:             Mon 12 May 2025 02:03:35 +0000
Manifest this update:     Mon 12 May 2025 02:03:35 +0000
Manifest next update:     Wed 14 May 2025 02:03:35 +0000
Files and hashes:         1: ai026HfXJSbET24AT680-ZBPIxE.crl (hash: KMAcSVZSgQgm4IK+dweBtTAtGOGmqYRDDn1wP8SR96I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 02:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1702 (0x6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DAF, serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
        Validity
            Not Before: May 12 02:03:35 2025 GMT
            Not After : May 14 02:03:35 2025 GMT
        Subject: CN=682156f7-44b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:3b:3b:66:b9:e0:d8:98:95:ab:86:cd:e4:
                    6b:ff:7f:e3:0e:b7:44:8b:37:ae:3f:65:f5:5f:8c:
                    04:06:26:26:49:3f:dc:6a:59:08:c2:35:02:6e:d6:
                    ff:22:9b:a7:e4:59:b7:dd:6f:5e:d8:13:19:5e:65:
                    92:44:38:21:6b:d9:e5:69:ad:2d:60:97:03:69:7d:
                    7c:b7:1a:2a:57:42:82:e8:e0:71:f5:6f:ca:f3:0d:
                    37:a0:3e:ce:e5:c5:b1:51:dc:d1:e7:d5:b3:5a:59:
                    84:d0:18:09:e9:7a:7c:8c:29:37:ca:d8:00:33:bc:
                    df:11:23:97:7d:02:9f:3f:4d:f0:c8:dc:5b:ad:f6:
                    cb:31:f5:80:fd:b5:39:49:fb:63:07:e8:55:bf:bc:
                    8b:20:71:80:b2:8b:ff:08:fa:65:f9:ba:85:39:36:
                    a1:a7:80:d6:26:d1:32:a9:92:a3:e7:5e:8e:56:23:
                    c6:df:c0:58:7d:30:a1:13:8a:a1:2f:76:74:08:93:
                    3a:3b:82:98:b9:62:0e:3f:1e:d8:92:0d:1d:7c:fc:
                    fe:c5:c4:8b:94:b5:28:be:82:44:d2:85:17:69:1d:
                    11:73:1c:69:25:99:1a:d3:d0:53:90:ac:45:cd:3a:
                    ef:ad:cc:25:c7:18:79:da:1e:e5:49:60:1b:b1:74:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:09:CC:AF:17:9F:ED:11:25:FC:69:77:A6:8D:6C:CE:C9:38:96:7E
            X509v3 Authority Key Identifier:
                keyid:6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ea:1b:8c:5e:43:67:7a:41:37:fe:c8:28:9d:a2:46:21:f1:
         8f:38:32:1c:fe:17:da:44:13:e4:ce:9c:7e:57:34:52:9c:2e:
         0a:55:15:e8:20:f1:8f:f0:2b:1a:ff:50:2c:94:96:42:47:dc:
         04:8c:46:41:5a:2d:ce:aa:f1:d5:72:fd:b4:d2:5b:b3:cf:a2:
         93:f9:4c:28:f4:0c:bb:42:89:e7:ad:22:98:1e:a3:12:9b:6e:
         50:b7:15:3c:53:07:46:86:04:ac:8e:ed:9c:b3:f7:5e:b7:9a:
         f2:9b:9a:60:0c:85:39:36:2c:22:31:d3:8b:02:31:9a:95:6f:
         f8:88:0d:cc:24:6a:b7:de:32:5e:dc:3c:a4:84:a7:68:16:69:
         6d:35:cf:47:d1:13:a8:70:57:57:37:3d:87:a4:b0:14:d0:42:
         4d:30:ac:1c:31:b9:e4:41:82:82:99:63:e2:25:fb:f6:61:67:
         24:71:90:40:38:4f:d3:62:15:cc:29:92:23:b7:a2:bf:bd:c6:
         5b:8b:57:fb:68:94:2c:99:5b:d7:88:65:3a:b8:88:ed:25:0c:
         fc:ca:ae:30:6b:d7:18:17:82:be:0e:58:c8:4d:f5:b6:2d:10:
         1f:c0:ef:b4:e5:4c:16:34:cd:ea:3b:23:c5:88:5e:d1:98:f7:
         36:24:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:52:57 2025 by rpki-client