Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
File:                     nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft (raw, json)
Hash identifier:          Fd+dTFdFFCL0QlPROPtgXdX9UlZ3GJnEPhOTSUvCpqk=
Subject key identifier:   2C:10:C9:08:D2:65:20:FA:A0:E7:75:66:0C:FB:7A:58:5A:1F:54:0B
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Certificate issuer:       /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial:       42
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
Manifest number:          41
Signing time:             Tue 01 Jul 2025 05:19:48 +0000
Manifest this update:     Tue 01 Jul 2025 05:19:47 +0000
Manifest next update:     Thu 03 Jul 2025 05:19:47 +0000
Files and hashes:         1: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl (hash: LtEFZniN4sRiWMOr4+YRYYHV2aKyD0rXFyTEv3ZKQa0=)
                          2: 0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa (hash: yV3qp3Snn6vcZINsGIupcA7CLhBh7nsh5NGhTfu+GnU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 05:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
        Validity
            Not Before: Jul  1 05:19:47 2025 GMT
            Not After : Jul  3 05:19:47 2025 GMT
        Subject: CN=68636ff4-f5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:71:11:0f:ba:0b:85:37:5c:4c:00:c0:b0:b3:
                    43:46:f5:d9:0e:8f:b3:76:21:f6:26:df:c5:52:51:
                    80:34:a9:01:26:51:89:19:f5:fb:de:23:bb:42:f2:
                    8a:24:d5:98:13:48:19:bf:bd:d6:cd:96:5d:04:13:
                    31:d0:de:a7:82:05:93:3d:90:f0:77:f3:10:c5:81:
                    24:31:6e:65:9a:0c:18:09:70:a9:59:59:19:a1:d1:
                    b8:77:e2:36:b0:e9:7e:26:12:e1:6f:bf:28:c3:51:
                    7c:e8:ac:6b:d8:a5:a7:ed:32:8e:e7:fe:eb:76:65:
                    e8:be:db:d3:36:c2:50:71:6f:91:5c:5a:9c:99:22:
                    71:47:11:ed:76:5a:bb:8e:cd:ae:35:e2:b8:10:71:
                    e9:cc:7b:c6:7c:d7:66:d6:cb:55:78:df:a4:5d:35:
                    11:cb:f6:7a:c0:54:3c:37:9f:4f:e8:fc:09:bf:65:
                    9d:d0:27:54:eb:b7:70:67:52:8f:12:ae:e4:2a:ad:
                    13:83:f0:b4:6e:eb:2a:15:f8:92:d6:01:f7:09:4b:
                    83:fb:67:de:03:23:68:09:a1:f0:ad:75:ec:c7:52:
                    70:d4:68:a0:52:cb:9a:32:8d:68:8e:3c:2d:bd:11:
                    74:2e:21:91:4b:e8:2f:04:b7:1a:1f:0d:8f:e5:18:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:10:C9:08:D2:65:20:FA:A0:E7:75:66:0C:FB:7A:58:5A:1F:54:0B
            X509v3 Authority Key Identifier:
                keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:43:d2:46:57:91:da:f3:8b:81:0a:24:f6:af:f1:8c:1f:e0:
         8d:c1:8c:c1:5b:1e:b9:46:d0:12:9b:25:ee:f2:fd:0f:b3:44:
         c9:5c:95:70:b2:e6:38:92:f8:37:c7:25:1e:c5:f2:61:8c:83:
         10:fe:2e:8e:f5:cf:19:b4:d9:1a:f8:a7:3c:73:d0:4b:6d:f5:
         40:7c:9d:23:6d:59:45:04:4f:40:da:ca:0a:74:e6:17:d4:a7:
         28:81:d2:43:50:09:9f:ba:33:de:55:0d:5d:77:70:ac:a4:b4:
         03:3d:85:a3:9f:50:b6:2c:4b:fe:7c:d5:cc:e8:d2:cb:83:3e:
         50:7a:10:97:92:59:de:45:57:f6:63:ba:61:65:94:57:30:cd:
         40:12:f3:50:31:8c:ff:52:d0:c4:be:c8:89:b8:55:58:ad:ce:
         30:9f:7f:55:9d:1a:83:b7:98:2f:33:67:51:a9:1b:9b:55:01:
         b6:36:f3:7b:ed:0c:97:c5:ba:d0:c0:5a:88:18:5c:84:47:db:
         d2:40:3d:43:68:06:20:7f:4c:f1:ba:5e:df:cc:03:5f:58:11:
         f0:cc:d5:3d:9b:5d:38:32:67:30:cb:ed:2e:fd:fc:49:d5:e3:
         4a:55:92:ba:a3:b3:2b:18:08:ad:24:7c:20:78:e5:5d:a0:d8:
         f5:3b:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:17:44 2025 by rpki-client