Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
File:                     _JRbBmroeaYb32_LGIWcV6LnFtA.mft (raw, json)
Hash identifier:          M+APkMzZQRhWhy1TmHPkFIEtEmhg1TCl2dR9n1SWcmg=
Subject key identifier:   DF:F4:FC:FE:AA:94:27:96:CD:F0:61:ED:9E:FD:A0:44:74:F1:25:13
Authority key identifier: FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
Certificate issuer:       /CN=F36D518DAF/serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
Certificate serial:       05CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
Manifest number:          05C5
Signing time:             Sat 10 May 2025 02:22:17 +0000
Manifest this update:     Sat 10 May 2025 02:22:16 +0000
Manifest next update:     Mon 12 May 2025 02:22:16 +0000
Files and hashes:         1: _JRbBmroeaYb32_LGIWcV6LnFtA.crl (hash: Tpms0iDRQ0x/qiC1UpYvb+CyB9tiLq+50PHLBzDJYU8=)
                          2: 9E14C3CCA2DB11ECAC4872A95A40D577.roa (hash: sqHCz7QhDeQNCk+Oi9HPhFuqRLltffe8AfdV9zemzA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D518DAF, serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
        Validity
            Not Before: May 10 02:22:16 2025 GMT
            Not After : May 12 02:22:16 2025 GMT
        Subject: CN=681eb859-b689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:33:59:c1:8d:26:e0:d6:1a:42:d6:fd:34:
                    08:43:f8:c8:50:6e:46:fb:48:2e:d5:83:fb:b7:c6:
                    30:38:d8:9e:36:c4:7b:1f:6a:64:25:19:98:a0:14:
                    63:c7:a4:6e:b8:bd:82:ae:db:71:a4:33:56:18:39:
                    bc:7c:74:7e:7d:0d:1e:8f:40:19:a3:bf:cb:fa:a0:
                    4d:de:a6:78:2b:6d:b4:2b:46:e9:90:b9:b1:95:0f:
                    b9:3e:e6:2a:94:12:a7:2c:31:f7:9c:f2:8b:83:f5:
                    c0:56:ff:8b:04:d6:17:5b:e6:79:54:f3:ae:57:10:
                    59:ec:4f:2e:8e:16:bb:fc:22:cb:89:07:e6:02:b9:
                    6d:34:af:76:c3:19:93:93:96:c1:dd:df:aa:c5:5a:
                    15:2f:bf:e3:d0:88:86:b0:e2:13:c7:23:0f:6e:bd:
                    12:22:c5:58:97:2d:0e:ae:a7:27:a0:ab:61:88:c9:
                    95:e2:c6:11:ad:99:ea:dc:16:d7:5e:2b:4f:49:91:
                    10:78:d7:75:8d:f8:93:cf:40:1a:6d:1d:4e:ea:3a:
                    5a:c9:65:85:cb:46:ed:12:6e:b4:4b:d2:7a:96:0f:
                    d4:8e:35:fb:b7:8a:d1:0b:3c:f6:6f:6c:f7:8c:c8:
                    e4:e5:13:f0:72:55:5f:b8:ec:1e:5e:3a:02:38:68:
                    79:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F4:FC:FE:AA:94:27:96:CD:F0:61:ED:9E:FD:A0:44:74:F1:25:13
            X509v3 Authority Key Identifier:
                keyid:FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f9:8d:9d:11:80:72:7d:05:f8:aa:0a:22:60:90:ca:7a:91:
         6c:b1:f9:52:c5:56:60:dc:ee:3c:6b:36:da:ce:cb:13:f5:5d:
         c3:84:fa:d3:1f:2a:35:b2:b2:32:1b:59:b0:5b:bf:a0:ee:c6:
         f9:83:99:bf:e4:3d:6b:50:9d:98:b3:9d:7d:f9:a4:c3:a5:1d:
         35:f9:31:1b:9b:5a:b4:0a:ca:71:b7:10:08:4d:b7:83:12:c9:
         83:4b:7d:e5:ce:e8:3d:d1:eb:27:7d:eb:3c:ba:a2:60:a3:8d:
         39:5f:80:7d:2c:bf:1e:2a:0b:a4:8a:33:fd:91:c3:c4:24:0a:
         f9:e1:b9:a9:1a:5c:f5:92:aa:c1:dc:3e:31:de:a2:de:ed:36:
         2e:08:81:fa:ff:67:1d:79:0a:ba:3a:af:80:70:b9:97:04:2d:
         fd:2f:f4:66:62:9d:a8:ae:da:b7:47:0d:77:84:e0:fb:8b:d2:
         3a:03:ed:42:61:ed:4b:6c:fc:ab:1a:20:12:16:5d:d1:14:09:
         e9:49:e1:62:05:54:d0:55:41:7e:00:fe:14:c4:18:be:e1:38:
         60:94:9a:57:21:f8:c6:85:52:af:00:b0:c5:96:15:0d:0a:88:
         7e:82:e7:d3:28:53:04:16:65:d3:35:bd:2e:37:0c:a0:97:1c:
         26:cb:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:32:43 2025 by rpki-client