Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
File:                     v10_TcmvF_i6c_VaHXLzlZwFGOI.mft (raw, json)
Hash identifier:          Ayb4eQrtylV01ymVjrAvZpNGNGNaqT+ImZ2JAZ7ExCE=
Subject key identifier:   2F:1E:44:4E:C3:92:5E:5F:2F:28:9E:D2:81:33:7B:58:A2:18:71:55
Authority key identifier: BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
Certificate issuer:       /CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Certificate serial:       056A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
Manifest number:          0563
Signing time:             Thu 03 Jul 2025 02:40:29 +0000
Manifest this update:     Thu 03 Jul 2025 02:40:28 +0000
Manifest next update:     Sat 05 Jul 2025 02:40:28 +0000
Files and hashes:         1: v10_TcmvF_i6c_VaHXLzlZwFGOI.crl (hash: UFZOdSjIzqAAyvXvL/U09QucsjP3SZY00cYCy3YlaOc=)
                          2: C22CE7B8848211EFB04104A3762E951A.roa (hash: UvSKfzbPPPDmh9qt5fUcWRDz2kLL0/oUIRFROj/013Y=)
                          3: DAF0E168407F11ECB8D6EB12D8A014CE.roa (hash: hHFxlWCSnH4gDexnkdfm1eIFVHKF3ZADP/XYQDBgtyE=)
                          4: EC73A322848211EFA35B4DA3762E951A.roa (hash: E9n0BXdEdCO4VUpJ00TALsQfI4M1cW8WL9kQTleR3iM=)
                          5: 4FE58CA0848211EFB21CDAA0762E951A.roa (hash: hT4mSK8j0yF0krAa2/n501dY/MbNiSKbpGMw/g08dhw=)
                          6: C6263998848011EFAA998A96762E951A.roa (hash: 7pLiVykcpNB61b9uTOfPQKtdMaNQfNXZhZHjF5fDR2M=)
                          7: FD442A68977511EFAFDE5CA6762E951A.roa (hash: jCYhuEuX8SeXpiy1mcrGpnTn+Pm2iMoNn/fsKbfF3rg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 02:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D32D1AF, serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
        Validity
            Not Before: Jul  3 02:40:28 2025 GMT
            Not After : Jul  5 02:40:28 2025 GMT
        Subject: CN=6865ed9d-4237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:f8:ac:b9:f1:4c:05:ff:77:2b:09:33:8a:
                    36:47:b0:5f:25:bd:1f:2f:f9:ce:b7:91:20:eb:24:
                    7a:3f:16:26:2a:8b:03:f5:e7:18:5e:ee:4d:a4:a7:
                    57:c3:3c:5a:cd:9c:c8:ea:87:5d:84:28:f3:ae:a5:
                    d9:26:b2:29:e5:9f:34:fe:00:ae:cf:ac:fb:b7:ad:
                    2c:ae:15:ae:33:84:86:85:39:8d:99:8f:9f:7b:df:
                    04:af:8d:bc:0f:2d:be:54:18:29:5d:79:dc:a6:15:
                    e1:73:b4:42:12:c9:54:6c:da:be:23:34:c4:58:09:
                    ac:c5:39:7a:12:f6:d5:97:30:e9:86:80:69:c4:0d:
                    d0:94:15:30:74:15:a9:27:dc:3e:7a:46:69:a1:f5:
                    c7:4e:3d:d2:f6:e9:62:71:e4:3a:6d:13:cc:86:4d:
                    0e:36:7b:9e:06:2d:24:9d:fd:84:84:3f:6f:0d:b6:
                    10:96:86:a5:98:8d:48:f6:b5:3d:b3:d4:b1:b6:7c:
                    86:d4:38:94:9e:3a:d8:c7:00:06:2c:bb:55:7c:91:
                    2f:64:fa:00:80:47:eb:21:86:60:54:86:69:e4:78:
                    a5:37:b5:c4:aa:b1:7c:81:cd:41:98:bf:3e:05:d4:
                    be:a9:31:93:05:12:b5:e4:51:df:c4:e6:27:69:db:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1E:44:4E:C3:92:5E:5F:2F:28:9E:D2:81:33:7B:58:A2:18:71:55
            X509v3 Authority Key Identifier:
                keyid:BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:63:eb:aa:95:98:6f:e7:b6:84:2c:b5:f0:5d:47:cc:f7:21:
         ee:c2:55:24:bc:c3:f1:10:be:67:73:cb:f2:5b:e4:66:24:5b:
         e7:12:61:2f:6b:5d:83:8f:4c:0b:4f:4c:4b:09:e3:ac:15:83:
         06:b8:e0:bf:3c:80:e1:3f:c5:8c:1b:eb:99:3c:fe:aa:fe:63:
         8a:c1:0b:27:7b:fe:c2:1d:00:f5:44:f1:98:9c:71:ec:39:83:
         b8:16:e9:56:de:96:35:20:a7:5f:9b:87:12:cb:01:ae:ef:8c:
         77:98:d6:0e:f4:12:f3:3b:9b:dd:40:57:02:e6:e4:ef:88:71:
         72:5a:0b:2a:7a:0e:88:a4:63:fd:1d:70:99:cc:b0:c2:f8:89:
         78:71:42:f8:30:1e:b6:2a:bc:a5:58:29:58:2e:43:5d:d3:bd:
         0c:17:f1:1f:f9:91:a2:f9:5f:b2:83:ef:88:d9:e8:54:f7:09:
         92:a7:b3:d2:55:85:59:b3:11:d2:20:ca:5e:7d:7e:57:40:8e:
         aa:df:22:19:2c:34:02:01:30:93:d0:c8:3f:93:28:f5:d5:3a:
         1b:a2:df:4e:36:29:bc:1d:82:10:46:e4:c0:e9:74:b1:12:85:
         d8:39:ee:53:d2:a4:46:ba:e7:a6:a9:30:a8:da:7b:9e:71:d9:
         f5:99:8d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:43:47 2025 by rpki-client