Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
File:                     wzA4fNIYxMz6UivFNddwdVvPe28.mft (raw, json)
Hash identifier:          P2UwZ9j65hk1wqxJM33pLUJl1lncclSa+L9GGCu6rN8=
Subject key identifier:   95:60:92:8A:7C:48:EF:10:95:A8:E7:50:53:5D:39:17:15:3D:8F:83
Authority key identifier: C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F
Certificate issuer:       /CN=F36D591BAF/serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
Certificate serial:       01BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
Manifest number:          01BA
Signing time:             Sun 04 May 2025 04:24:51 +0000
Manifest this update:     Sun 04 May 2025 04:24:50 +0000
Manifest next update:     Tue 06 May 2025 04:24:50 +0000
Files and hashes:         1: wzA4fNIYxMz6UivFNddwdVvPe28.crl (hash: 76cNQ5P6QFd1kStzWAwYVrQPWPaN1JGnSmdTMNYoqG4=)
                          2: D27A6A28D7C111EE8A342CA3775412E6.roa (hash: peA4+LIUnTnNHVNJXvAgPW0H2f9Uqrwu8nzHISX24Zo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 May 2025 04:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D591BAF, serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
        Validity
            Not Before: May  4 04:24:50 2025 GMT
            Not After : May  6 04:24:50 2025 GMT
        Subject: CN=6816ec13-2a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:bf:17:e8:fa:2d:03:10:be:73:39:1e:a1:
                    36:5e:75:68:d2:2e:8e:8a:27:c9:25:92:dc:a0:fd:
                    69:8a:ac:44:04:0f:d3:6b:a0:d6:c5:e8:0a:fd:a6:
                    70:03:87:1e:6d:7a:68:4f:e2:2d:25:d3:a4:e8:d7:
                    0b:fd:62:76:8b:2b:77:07:6a:1d:52:22:d3:ff:3e:
                    50:3b:3f:af:39:1d:6a:e7:bc:72:27:75:74:e6:a5:
                    6b:44:7b:7b:3d:9b:9f:bb:77:6c:de:25:df:9a:4f:
                    4e:30:6c:c3:ee:4d:4a:97:32:c0:22:3c:c3:ce:ad:
                    5e:c4:fc:26:bf:b9:68:2c:49:f1:fc:cc:8f:ed:00:
                    5f:d0:a5:ec:6a:f6:92:68:5b:bd:3b:7d:49:ae:97:
                    18:57:c7:21:b6:ca:47:99:e9:0a:dc:3e:9d:5f:3d:
                    1e:93:60:a5:00:40:88:00:68:db:c0:36:65:e9:ef:
                    c8:94:32:bf:3d:44:56:d9:40:0c:2a:dc:e0:f7:27:
                    8c:28:ec:d3:94:17:56:8f:dc:33:52:60:e1:83:a8:
                    ea:c7:7e:29:ea:65:34:03:e3:fa:a3:a6:22:e8:a3:
                    8c:3c:b6:40:34:3c:40:da:d0:90:0b:a6:98:b5:23:
                    ed:e0:4c:ac:bc:05:f6:f8:1b:0d:e3:b1:a1:ad:22:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:60:92:8A:7C:48:EF:10:95:A8:E7:50:53:5D:39:17:15:3D:8F:83
            X509v3 Authority Key Identifier:
                keyid:C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d8:7c:6a:04:21:91:eb:35:5a:fa:8d:67:ea:ac:cb:b2:a3:
         9e:c1:c9:e4:3d:1f:99:53:d7:e9:79:92:1a:2a:5c:71:76:2e:
         c4:5d:57:89:4f:1b:49:bd:10:70:48:08:d1:48:30:b3:83:09:
         e9:62:90:fa:28:fd:e7:09:08:3b:33:ea:f6:b0:f2:d1:de:2e:
         3e:46:43:ae:d3:65:4e:6b:63:a5:4d:df:ed:73:24:43:b4:d0:
         d6:1c:ac:91:12:c9:b1:c7:0f:32:22:30:9a:e1:ee:8d:cd:36:
         a1:3d:0d:1f:6d:81:39:7b:ce:2f:19:96:45:11:65:57:d3:6d:
         0d:fa:a0:2c:d1:05:e1:8c:0e:47:cb:b2:c1:1f:d3:de:df:24:
         a3:c8:79:95:be:9c:9c:84:8d:15:2f:e7:de:36:cb:24:12:35:
         af:b8:10:5b:f0:a6:8c:b1:88:6c:a8:27:df:3f:f1:48:57:3b:
         79:1f:d0:1e:49:02:df:eb:18:e0:af:e2:6a:5d:8c:1f:41:79:
         6c:57:b0:60:60:9a:30:a6:00:3f:36:80:d9:06:41:79:c8:08:
         5a:a7:54:25:8d:a1:64:37:2d:d4:77:97:1f:97:c2:34:39:ab:
         fd:c8:c4:22:7b:d5:f0:0b:61:ba:cc:fc:3a:39:70:2c:55:26:
         fa:e1:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:38:32 2025 by rpki-client