Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
File:                     8N_7--IrTkOYavhggOjb0m5nNXs.mft (raw, json)
Hash identifier:          NoBVlHZpx+0A2mZlF5ttgBXhmT/7WU6NjkStfUA77Lg=
Subject key identifier:   18:9F:13:B0:4A:BD:9A:23:F3:F6:D4:13:14:61:15:DC:54:BD:62:F5
Authority key identifier: F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B
Certificate issuer:       /CN=F36D104BAF/serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
Certificate serial:       039A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
Manifest number:          0399
Signing time:             Wed 02 Jul 2025 03:27:53 +0000
Manifest this update:     Wed 02 Jul 2025 03:27:52 +0000
Manifest next update:     Fri 04 Jul 2025 03:27:52 +0000
Files and hashes:         1: 8N_7--IrTkOYavhggOjb0m5nNXs.crl (hash: tba7YH3bnohuEaQfuAQfl/aRcStVFePdEaGQf5PI16I=)
                          2: 788B31649BD611ED8E8A06CFF1222468.roa (hash: /DoapaGd3eagMu4E2GG71poz4ouCwc0M0wO9yu8zX6c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 11:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922 (0x39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D104BAF, serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
        Validity
            Not Before: Jul  2 03:27:52 2025 GMT
            Not After : Jul  4 03:27:52 2025 GMT
        Subject: CN=6864a739-11fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:da:9d:55:18:0c:31:a0:2a:9c:e2:43:59:e5:
                    05:1a:4f:c2:ed:e5:19:2d:54:29:2e:d1:df:6f:7f:
                    1d:9c:fb:e2:13:2c:cd:1f:1d:84:6f:2e:cf:8c:14:
                    77:2e:42:49:4e:44:8c:6c:83:63:c2:dc:67:1c:1a:
                    21:c1:87:89:3a:ee:77:4e:9e:0d:b9:ff:55:5e:58:
                    c3:a3:7d:01:c1:7d:44:61:bd:12:ca:36:43:a6:91:
                    29:f0:da:5d:4a:1d:cc:ba:71:63:ca:d5:c9:1d:17:
                    70:26:8f:1e:b6:f4:90:c3:50:28:3a:d1:b9:a4:e4:
                    6b:e9:64:06:3f:3a:72:27:4f:76:9d:ef:92:d9:a3:
                    0d:1d:b6:17:10:cd:a1:5a:05:48:58:3a:d6:77:da:
                    3f:3f:82:7e:3c:89:2d:55:f2:31:99:db:e0:4c:26:
                    13:41:e9:a3:8a:76:f9:8e:8f:9f:29:8f:bb:35:d2:
                    0d:9d:30:31:7f:f8:af:88:56:c7:2f:89:96:33:bf:
                    e7:27:75:8d:66:93:a9:9c:14:b1:87:c3:f3:21:65:
                    8f:f5:1d:c5:0b:e7:82:ee:c2:3a:9c:99:0f:e1:57:
                    b0:f1:df:36:60:59:1b:91:25:20:58:cd:86:8c:07:
                    cc:53:ff:27:7a:1d:cf:2c:4e:ae:fd:3b:d6:cd:cd:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9F:13:B0:4A:BD:9A:23:F3:F6:D4:13:14:61:15:DC:54:BD:62:F5
            X509v3 Authority Key Identifier:
                keyid:F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:94:41:11:65:1f:1e:df:d0:1f:e2:a5:9a:de:89:7b:3c:55:
         c0:96:d8:5c:ff:51:85:ef:d6:17:cf:9e:fa:dc:69:59:db:6b:
         1b:bd:5e:09:d9:64:4b:68:a9:0b:55:76:de:54:ab:fc:85:30:
         a8:b9:ed:73:26:00:99:f5:04:08:56:13:f0:d2:bd:b1:c0:74:
         24:8f:a4:47:1a:48:ae:26:51:c7:83:e7:f9:b6:18:e4:72:16:
         fe:10:e2:4d:c1:30:6d:06:fb:0a:a1:07:60:fd:1d:7e:95:a9:
         05:dd:bb:db:16:c5:86:76:c1:95:15:c8:82:13:06:85:3b:6e:
         0b:76:fd:a7:86:70:7a:00:c7:4a:cf:52:50:8e:62:4d:c1:c8:
         6f:dc:0c:25:8c:ba:4d:4b:5b:ae:3f:1e:f7:73:d8:30:45:98:
         c0:da:02:fd:63:a7:2a:39:80:8c:7a:95:cb:0a:0c:6b:dd:eb:
         4a:3d:19:1a:49:25:c5:d0:4d:ba:89:3e:e7:c1:8b:b2:90:a4:
         d9:aa:42:4d:3d:c5:c3:9b:d1:f2:5d:bf:32:2e:b3:4f:d3:5c:
         89:2d:8b:76:80:a5:ec:ec:cd:36:0d:96:7f:ca:e2:5b:0d:5d:
         8c:16:c5:6b:bb:e5:2b:63:f6:8c:ec:23:59:36:3e:cf:e8:3d:
         50:82:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:24:03 2025 by rpki-client