Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          nS328e3FtUu/aLraEcsVd0fNDBqfDMvZsR9alrP3ViA=
Subject key identifier:   EA:03:C1:74:53:33:4C:61:7C:ED:81:7B:3B:79:BE:BB:82:D9:31:7E
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       036F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          036E
Signing time:             Tue 13 May 2025 03:31:08 +0000
Manifest this update:     Tue 13 May 2025 03:31:07 +0000
Manifest next update:     Thu 15 May 2025 03:31:07 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: L62fj7OG5kJ3PQpRhwRxSE+vEd1OPZfxw7DEc+UNmZw=)
                          2: B4A262BA97E111EDBE23EF7CF1222468.roa (hash: oz3acEqmAFW6Q64G1pO2mcOXINAlKbbqHe9mAvDeW6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 May 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: May 13 03:31:07 2025 GMT
            Not After : May 15 03:31:07 2025 GMT
        Subject: CN=6822bcfc-9fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:a7:e8:bb:85:d4:71:a0:fd:f4:35:12:c2:
                    8f:10:23:a7:25:b7:46:10:e7:5a:0b:1f:3b:51:ba:
                    3e:2e:e0:dd:38:17:48:62:f9:af:1f:e7:76:38:8b:
                    11:2d:13:1e:c3:f6:5e:fc:c3:3c:0a:c5:fe:fc:2e:
                    4f:8a:71:a5:33:e8:29:9d:7f:3b:39:63:02:20:f9:
                    25:7b:23:eb:1c:26:ca:05:6e:e4:2b:43:04:8f:1b:
                    0f:7a:22:94:5b:69:0b:bd:7a:88:b3:c5:02:ee:b5:
                    e0:4a:9f:2f:19:68:02:35:61:23:bc:0f:59:0c:8c:
                    0e:2f:5b:42:b7:b7:93:fe:7a:f4:c8:83:5f:5a:9d:
                    ed:aa:19:f9:a3:4b:9a:d4:62:c7:b7:cc:dc:96:39:
                    79:04:b2:a3:61:36:ce:fc:58:b9:5d:cc:36:51:9c:
                    a5:24:84:c2:0d:8c:56:bb:2c:c3:b9:24:64:77:c1:
                    25:d0:3c:e6:1d:6f:93:72:a8:c2:ab:98:6c:82:a7:
                    aa:e1:c4:0d:f1:2d:0f:1d:4b:c9:1b:bd:44:17:15:
                    fc:a9:4e:19:08:ef:97:dd:d2:19:30:1d:24:f5:20:
                    4a:7b:cf:c4:f8:45:fe:f2:3c:90:b9:bf:1c:33:6c:
                    45:7b:0d:db:1d:00:51:a0:7e:17:26:be:99:db:55:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:03:C1:74:53:33:4C:61:7C:ED:81:7B:3B:79:BE:BB:82:D9:31:7E
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:14:b9:db:cf:e0:3e:5f:74:72:8b:65:74:41:df:07:e9:
         ec:71:2c:4a:ce:6d:97:88:f5:50:0e:7c:7d:5f:1a:31:50:33:
         dd:59:74:17:bf:61:fe:7d:f9:38:8f:cb:58:60:20:aa:91:65:
         48:dd:59:18:ab:35:73:d8:f5:ca:da:58:fd:5b:d8:26:9f:e9:
         94:06:3b:31:5f:99:4a:9e:e9:51:8a:32:4a:8e:67:65:2b:2c:
         ba:8e:04:88:00:7e:95:ea:80:78:68:af:fd:5b:f5:77:a3:d2:
         ed:85:ac:a0:c7:45:13:59:16:0c:90:ca:47:ea:c0:7d:08:56:
         e6:3c:b0:4d:d0:07:30:31:22:e6:f2:6e:ad:65:0f:7a:ad:1c:
         34:90:21:7f:0c:2f:cf:a9:fb:d6:a6:cc:b9:c1:19:52:74:0c:
         5c:e4:03:80:1d:b7:f5:80:10:a6:9f:d5:38:15:84:7f:d7:5a:
         40:72:df:f1:18:66:62:09:62:7a:83:43:b1:cb:7b:1c:d6:93:
         d8:05:fd:fa:8b:5b:dc:7f:27:0d:93:cb:9f:fa:a6:f9:18:f3:
         34:6d:ca:73:c4:69:0d:c9:a3:76:c2:c7:0a:e4:85:0f:4d:a1:
         16:9f:21:ac:56:73:7a:37:71:82:57:9f:2a:09:3f:ee:ad:fa:
         5f:41:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:18:09 2025 by rpki-client