Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
File:                     EoXp9a6JDQnrah2cFSaY2CVpQXM.mft (raw, json)
Hash identifier:          LFgWvzrsgJ2CdOv1wGtB14fNoBnjw++tMVUZ9QmHebA=
Subject key identifier:   C0:08:F7:19:C9:12:50:F3:4A:46:91:2C:C4:6B:FA:43:EF:06:20:32
Authority key identifier: 12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
Certificate issuer:       /CN=F36B2D09AF/serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
Certificate serial:       018F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
Manifest number:          018D
Signing time:             Sun 29 Jun 2025 04:36:48 +0000
Manifest this update:     Sun 29 Jun 2025 04:36:47 +0000
Manifest next update:     Tue 01 Jul 2025 04:36:47 +0000
Files and hashes:         1: EoXp9a6JDQnrah2cFSaY2CVpQXM.crl (hash: liWAOGV11FbBbtixKZcgrNfIJXPM8iHvuv/KzlQO6W0=)
                          2: 81A877024B1B11EF97889885762E951A.roa (hash: Jb7FsCfPieRiHewZHkBoyTfyXOoZ5GSQBgW72tN/jmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2D09AF, serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
        Validity
            Not Before: Jun 29 04:36:47 2025 GMT
            Not After : Jul  1 04:36:47 2025 GMT
        Subject: CN=6860c2e0-bc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:5b:8e:a1:ea:98:97:06:ea:56:69:fd:8b:
                    20:a3:90:7d:1a:89:d2:a2:37:fb:0b:57:a8:97:e7:
                    6f:27:01:7b:66:4b:a0:58:9d:1e:85:49:a1:e1:08:
                    5f:38:18:b7:ad:32:77:c9:34:9e:7d:dd:69:4f:ec:
                    0c:20:9c:1a:46:6c:e5:27:ce:da:13:08:84:9f:06:
                    36:12:4c:84:5b:99:16:1c:13:76:2a:cf:ba:4c:3c:
                    00:2a:71:e2:3f:5a:40:6f:9b:17:f5:85:78:fd:9d:
                    f0:3e:d2:ce:55:b3:9c:7c:db:af:ac:5a:6e:1b:3a:
                    a4:64:86:55:41:e7:2c:ae:2e:10:dd:12:54:c2:75:
                    08:27:d8:20:fc:c4:50:4e:89:05:f1:0b:22:43:4f:
                    b4:83:33:f6:59:97:0d:3b:19:f2:81:b9:37:7d:b4:
                    f2:a1:0a:e9:24:74:18:91:c1:19:38:ec:77:ba:0b:
                    d5:9f:e0:e7:0a:ad:98:3c:42:c3:e9:8f:a5:30:3b:
                    cf:23:4d:8a:23:f2:d4:13:71:c5:8f:de:8c:2d:e1:
                    8b:b0:53:2f:23:bc:bf:1f:2a:2d:11:93:99:ea:de:
                    70:83:03:fa:17:af:d2:65:89:6d:43:ef:d2:74:7d:
                    cc:6c:2e:94:42:b0:5a:68:94:35:0a:88:81:c8:fc:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:08:F7:19:C9:12:50:F3:4A:46:91:2C:C4:6B:FA:43:EF:06:20:32
            X509v3 Authority Key Identifier:
                keyid:12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:f7:64:09:eb:ed:6c:12:d6:3e:4b:e3:8c:05:55:c5:db:57:
         7d:23:49:61:82:ed:50:2f:f3:25:e9:82:24:94:67:c0:18:c0:
         c7:d4:1c:a5:3b:83:e0:ef:c2:c9:4a:04:a2:b1:61:41:b0:68:
         e9:9f:5a:49:cd:2f:aa:57:d3:68:c5:5c:f5:de:02:cf:e3:a0:
         60:fc:19:cb:43:d9:6a:b0:60:f2:10:b3:a7:d1:5c:47:8c:e4:
         06:ea:80:82:29:98:8a:8a:52:64:d8:db:56:b4:54:4e:91:37:
         10:57:d7:b1:fe:77:0e:9f:d2:2c:d6:b7:ec:1c:f2:7d:15:87:
         42:a3:e3:63:22:9a:42:af:d4:78:c9:80:e3:a5:a3:f0:40:90:
         15:10:c5:75:2b:1b:42:94:40:37:ad:38:a0:74:92:9e:a3:7c:
         2a:65:b7:b0:4c:e5:58:53:3a:bd:3f:55:9a:06:c2:49:94:6b:
         b4:d9:46:14:ae:69:72:82:20:b5:b4:3c:0d:6f:4c:b0:ed:b0:
         27:d1:df:92:3a:2d:44:14:72:b3:15:6e:80:2d:99:f4:01:b2:
         c7:c7:b0:f7:ec:e1:4c:1e:b3:fe:b3:4e:bb:62:3a:0b:fd:c2:
         ab:34:93:10:02:ab:e9:b2:8d:e6:a8:b9:41:c8:68:78:b0:76:
         69:a7:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:15:52 2025 by rpki-client