Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
File:                     Ga2syP-jkxMYpsdToKwbKukpXgM.mft (raw, json)
Hash identifier:          ozpdHC3AsD42yfT0gQIUOA03LJQYyvC9OxzSlesU93I=
Subject key identifier:   34:7E:C5:18:21:B2:0B:27:71:71:14:70:BD:1F:11:49:7E:41:03:0C
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Certificate issuer:       /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial:       0950
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
Manifest number:          0945
Signing time:             Sat 23 Aug 2025 01:21:15 +0000
Manifest this update:     Sat 23 Aug 2025 01:21:15 +0000
Manifest next update:     Mon 25 Aug 2025 01:21:15 +0000
Files and hashes:         1: Ga2syP-jkxMYpsdToKwbKukpXgM.crl (hash: 6DB+Hd6c8Ot5ww+rPUT8e3KyTbqt1WzWiTdacJMXHD0=)
                          2: 40F0EA0C864C11EF8B0D4162762E951A.roa (hash: 5nZTReAvtcbgPm+oRDhQ83p7XciRK3gVMtmCqG06N7Q=)
                          3: 19DBEAFC864C11EF91E74660762E951A.roa (hash: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=)
                          4: 8F04BF5C864C11EF8F687464762E951A.roa (hash: MFVB+4npBxn/Yh83eigumhh31Iuk3EG7QH/ll1Qzce0=)
                          5: DF0FB1A6864B11EFAA421C60762E951A.roa (hash: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=)
                          6: 325E4A4E864B11EF9931C05B762E951A.roa (hash: uilxINn6WdcvcjXq+Nwl5lpnynygHnR6cPspfvXc/m0=)
                          7: EB320A3E864511EF82F333B8762E951A.roa (hash: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2384 (0x950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6AF, serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
        Validity
            Not Before: Aug 23 01:21:15 2025 GMT
            Not After : Aug 25 01:21:15 2025 GMT
        Subject: CN=68a9178b-3c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:66:1d:28:89:be:f4:c0:29:d1:2b:61:f3:52:
                    55:64:01:03:46:c6:71:a4:7b:8c:e4:4e:17:07:d5:
                    ea:78:b9:57:bb:25:1a:b6:64:11:1c:61:27:fa:01:
                    d1:2c:79:74:f8:ad:b1:a9:62:93:26:c9:40:cd:9b:
                    8f:85:71:58:f0:86:ce:31:46:7a:c2:31:02:e1:bb:
                    c0:1c:58:c5:9e:27:c6:dc:40:33:43:d8:4a:97:8e:
                    ef:ec:e6:98:28:61:83:72:41:74:d1:41:c4:50:b0:
                    6f:51:e9:5c:eb:f2:72:19:16:a7:51:12:fa:aa:67:
                    a9:fb:46:d6:5f:b3:30:36:ee:37:f4:2f:f3:53:6c:
                    e9:25:87:d4:72:94:d2:35:40:77:d5:31:bd:c8:f0:
                    22:1c:fb:27:a4:ce:07:0f:19:6b:b1:4a:5f:85:f7:
                    04:18:bb:41:ad:d5:ae:e5:f1:5f:e0:76:bd:22:09:
                    e2:dd:a7:84:94:a4:66:3e:7e:07:08:9d:e7:ff:cd:
                    f2:6d:48:df:c7:fa:48:fb:70:60:a9:86:d0:ec:d7:
                    2e:a6:2a:93:a1:e6:fb:1d:01:62:c0:0f:67:24:06:
                    52:ec:72:f8:55:50:57:78:40:f0:8c:7a:64:be:da:
                    64:ed:15:f3:88:5b:db:21:4f:d0:1c:0c:a0:58:ad:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7E:C5:18:21:B2:0B:27:71:71:14:70:BD:1F:11:49:7E:41:03:0C
            X509v3 Authority Key Identifier:
                keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:01:86:aa:41:52:8b:69:24:24:fe:45:96:25:47:53:fd:de:
         97:bf:b2:aa:09:17:e3:6c:13:0b:10:a3:2c:de:fb:32:0e:3b:
         68:6d:10:3f:1b:d4:35:67:0e:a2:cd:77:ad:a8:e8:bc:89:60:
         30:7c:43:77:27:81:7d:8a:dd:a6:6d:d0:58:60:db:79:14:4d:
         f5:44:70:b3:5d:d5:2d:14:dc:cb:0c:b7:8e:90:87:55:50:ec:
         d1:9f:82:bf:aa:58:2c:5b:4b:ce:4d:00:06:8b:c1:37:49:7b:
         7a:d2:3d:ca:5e:3b:25:c2:c9:fc:b6:60:9a:85:9f:bd:5f:fd:
         96:6c:9d:1b:2f:f3:46:c9:92:d6:0a:2f:bf:90:4e:34:cf:40:
         c9:53:54:1d:a6:1f:60:97:2d:56:0b:80:92:65:4e:81:78:2d:
         eb:b8:f3:1c:65:e6:e4:b7:b4:f7:66:52:53:9d:eb:08:49:ae:
         c5:ce:3e:83:43:16:0b:c2:bd:25:8a:ae:49:8c:a3:ca:e7:39:
         af:e2:55:8d:cb:8c:5a:f8:44:dd:2b:10:90:a5:c3:88:72:c9:
         a3:dc:6c:54:4b:34:e8:67:22:4a:9b:3e:de:a6:39:9b:9c:b6:
         42:fe:50:b1:c7:d1:50:ea:91:50:4f:f3:b2:d0:3d:2f:02:cc:
         ef:4f:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:11 2025 by rpki-client