Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
File:                     _IwxIe9n77axzoOCjjTdt-4B7nc.mft (raw, json)
Hash identifier:          mp7sch6yTn9At9t52W8H77luOHkpG9ky1knh5n8GNTc=
Subject key identifier:   18:3C:0A:25:82:F5:74:32:24:B9:E6:D1:02:F3:19:04:FC:8A:44:60
Authority key identifier: FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Certificate issuer:       /CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Certificate serial:       020B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
Manifest number:          020B
Signing time:             Wed 02 Jul 2025 04:23:13 +0000
Manifest this update:     Wed 02 Jul 2025 04:23:12 +0000
Manifest next update:     Fri 04 Jul 2025 04:23:12 +0000
Files and hashes:         1: _IwxIe9n77axzoOCjjTdt-4B7nc.crl (hash: IgSCt8cpDkQ+GDk+YELHYX78af502apaFfi9w23CM9c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 04:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AF, serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
        Validity
            Not Before: Jul  2 04:23:12 2025 GMT
            Not After : Jul  4 04:23:12 2025 GMT
        Subject: CN=6864b430-cc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fa:d2:7c:04:4e:7f:f0:f2:90:c2:a8:2f:0e:
                    7b:d0:f2:fd:d8:59:b7:8a:b8:63:d8:e0:1c:24:59:
                    6b:18:0e:77:d1:88:81:41:2e:4f:83:be:39:a9:df:
                    98:f4:cf:6d:35:ec:e6:f6:30:1e:8d:5c:bd:ce:33:
                    f3:25:09:60:c0:7b:be:d6:16:f6:76:d0:49:44:2a:
                    71:fa:7a:c1:fb:a1:85:e1:52:41:15:b3:f2:d8:9c:
                    80:b0:f5:cb:e5:e2:68:80:69:c7:46:ac:96:d0:0e:
                    50:c6:bf:1a:36:f8:27:90:b6:8e:1f:51:11:91:74:
                    71:76:8b:a0:48:02:ba:02:a6:03:83:32:7b:5d:64:
                    fa:ca:90:06:66:c8:b2:47:69:50:06:6f:e7:64:ad:
                    65:ac:b4:88:47:78:eb:a6:5c:1d:b5:bc:d2:dc:72:
                    fd:3b:aa:68:df:29:a7:86:87:13:ee:8a:ba:b4:18:
                    9c:58:01:09:7d:a5:16:7f:14:34:c8:69:57:fe:14:
                    d2:36:30:dd:38:a2:9f:65:d2:38:3b:42:79:e3:2c:
                    6b:32:c0:b9:6b:05:77:ad:18:30:93:4f:7f:02:8b:
                    76:84:68:b1:29:3d:f9:6d:25:22:30:b0:91:0c:3b:
                    9f:f6:fc:2c:62:37:6f:b3:90:65:ec:3e:c7:d2:e1:
                    cb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3C:0A:25:82:F5:74:32:24:B9:E6:D1:02:F3:19:04:FC:8A:44:60
            X509v3 Authority Key Identifier:
                keyid:FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:73:a8:26:4d:b8:2d:98:f1:59:97:1c:79:71:fe:c7:94:bd:
         94:2f:e2:31:5b:85:50:92:1a:c2:50:20:27:7d:4e:87:16:85:
         a7:a7:d8:8f:5b:16:f2:8c:82:2f:67:47:fd:eb:c9:28:49:59:
         8f:e7:4b:b1:3a:15:49:06:79:c3:46:93:95:3c:2b:1d:d9:ea:
         72:ae:0d:26:85:bf:c6:b3:fc:5a:a0:65:47:f4:e9:dc:ae:c5:
         5e:33:67:2e:df:23:d2:0c:b0:2a:98:00:65:57:1b:c8:df:9f:
         55:72:7e:33:65:a1:2d:c1:30:b8:f3:21:3d:53:d7:dc:d4:cc:
         be:5b:ad:d1:c2:d7:6c:73:00:37:c7:8c:60:19:7c:55:de:2f:
         77:66:97:92:af:b3:7e:3d:d8:fd:1b:03:44:cc:46:d9:12:ef:
         6e:17:cd:09:61:78:3e:d0:07:4d:bb:bb:f5:3b:bc:6d:01:b9:
         15:7f:fc:d7:b9:5b:f5:3f:5e:60:fe:76:cf:73:19:3b:e0:10:
         86:d6:ed:ff:b4:81:df:3c:0d:3f:16:38:37:7c:ce:a2:20:98:
         b5:e1:07:72:5f:ab:eb:31:1c:c8:7f:10:5e:f4:6e:33:d8:7f:
         fc:d0:f1:01:d2:6f:b0:9f:d3:14:32:a4:5e:c5:78:f2:c6:9b:
         57:b0:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:59:00 2025 by rpki-client