Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
File:                     nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft (raw, json)
Hash identifier:          +ZYr4Z0O02nNbT9Eb2ZzncOx+hrxuyWJBU16FYrnZyk=
Subject key identifier:   D3:54:3A:8F:70:6F:73:D9:3A:B1:62:4A:E6:6D:60:B3:2F:B7:BC:F2
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Certificate issuer:       /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial:       0E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
Manifest number:          0D
Signing time:             Sun 11 May 2025 05:15:55 +0000
Manifest this update:     Sun 11 May 2025 05:15:54 +0000
Manifest next update:     Tue 13 May 2025 05:15:54 +0000
Files and hashes:         1: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl (hash: wRc0Fgoqtd4Aeze+AnguIrw7WOw0UWTVHjEAzZ+e8mM=)
                          2: 0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa (hash: yV3qp3Snn6vcZINsGIupcA7CLhBh7nsh5NGhTfu+GnU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
        Validity
            Not Before: May 11 05:15:54 2025 GMT
            Not After : May 13 05:15:54 2025 GMT
        Subject: CN=6820328b-0202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8d:71:b4:d3:45:43:c4:11:07:84:5e:08:c4:
                    ed:f1:75:66:a6:f6:2f:8e:d6:9e:30:70:21:b6:91:
                    01:6d:51:73:78:e8:cb:68:23:ec:eb:e1:49:42:ad:
                    0c:9e:28:76:00:56:2d:87:c5:c0:d2:c2:7c:59:73:
                    d6:02:34:ea:e0:9d:12:d3:ff:00:2a:e7:b8:e1:00:
                    56:bb:4b:fb:58:26:09:56:f6:71:d5:f7:28:13:93:
                    53:60:9f:3d:db:6e:d4:20:ac:9e:ec:b2:03:41:0d:
                    58:49:76:ec:1e:d4:ff:06:dc:8f:2a:e2:ab:b5:97:
                    c6:38:0d:dd:e9:2c:57:93:25:da:e6:24:27:80:94:
                    f0:ce:9d:e3:ee:df:cc:aa:3e:9c:32:7e:41:58:95:
                    57:61:61:6e:55:d7:b4:f2:d6:2c:9c:1d:f8:93:66:
                    86:d2:1e:37:f9:61:01:91:3c:13:35:b7:fa:2b:90:
                    8e:e3:73:95:05:1a:b0:91:0c:86:17:dd:87:73:47:
                    45:5f:bc:dd:c7:a8:dd:a9:33:99:43:30:88:79:58:
                    81:d7:cb:f4:4c:27:65:e5:18:a3:6b:cc:3f:c5:3a:
                    52:13:aa:fa:3e:73:59:7f:5a:65:f2:76:3e:91:90:
                    8b:b5:4a:68:4e:86:b5:9b:88:4d:7c:d2:dd:ee:56:
                    13:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:54:3A:8F:70:6F:73:D9:3A:B1:62:4A:E6:6D:60:B3:2F:B7:BC:F2
            X509v3 Authority Key Identifier:
                keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:58:7c:d5:d6:dc:0d:f6:8c:02:f1:c9:20:6d:e7:f1:fb:69:
         94:45:fc:69:48:2c:2c:b1:a3:ab:24:33:86:2e:4b:b1:be:46:
         f7:90:fc:e7:b6:75:7c:e1:2b:12:83:ec:13:4f:58:bb:02:88:
         2e:59:3e:d4:71:be:97:4c:95:d1:fe:b3:0f:c0:cf:80:f8:fc:
         b5:58:97:d7:d7:f9:29:13:3e:00:5a:d2:27:90:a5:45:c9:08:
         db:51:ac:3f:bf:25:d9:b1:ec:32:29:31:cd:e6:cf:f7:7f:1e:
         b0:7c:51:e9:f4:8d:2c:51:91:41:5d:82:c8:d6:2b:86:8a:88:
         71:e2:91:92:61:09:3e:c6:2d:9d:9a:21:20:55:28:1e:3e:a0:
         f5:18:a6:08:1a:73:11:4b:7e:16:b9:c9:84:2c:c4:13:62:ca:
         1e:df:84:c6:53:13:99:48:51:d0:69:62:b1:b7:75:b7:48:65:
         c7:d3:58:fc:36:dc:5a:2b:e8:ec:2d:97:44:e1:9e:a8:75:f4:
         8f:e6:51:f0:be:1a:41:b8:26:6d:62:dc:2a:fa:39:e9:3c:c5:
         7b:5a:c8:f5:d7:f0:1b:0e:a2:82:93:13:e3:c1:a4:77:f6:7b:
         82:74:d1:1c:98:91:30:42:4d:8d:8a:73:f7:da:06:2d:c1:36:
         f6:81:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:29:00 2025 by rpki-client