Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
File:                     z9HOEVgucPjVG3hwclwV72fgxlE.mft (raw, json)
Hash identifier:          KtjOh0gZDF+v3a81AdFO84pHIh8y3vs6TkJjZOjCCj8=
Subject key identifier:   04:3F:D2:0C:97:C8:40:FC:85:2E:DA:6A:84:BF:54:25:F5:21:52:6D
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Certificate issuer:       /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial:       0D9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
Manifest number:          0D9C
Signing time:             Wed 14 May 2025 01:01:33 +0000
Manifest this update:     Wed 14 May 2025 01:01:33 +0000
Manifest next update:     Fri 16 May 2025 01:01:33 +0000
Files and hashes:         1: z9HOEVgucPjVG3hwclwV72fgxlE.crl (hash: +9oVK73NG4TVFmer5VAmvAZ3/qUYSsG8WfE4ySSh+4Y=)
                          2: 44FF457CB46311E58407FA55F8AEA228.roa (hash: B9WSKZRqziRr6GOCV6BDWegKxCtGmeVw42cvf6ryK9U=)
                          3: A17B340AB46311E59241EB56F8AEA228.roa (hash: 7FwQeUfCbVL0Bd2EXyoVC5y/xe6Lbd8u11SpNh5f5zI=)
                          4: F0D40794B46211E5A330CA55F8AEA228.roa (hash: t2nsrO2U23DwtiWKoe3fqAaOO4rdHwgErkagqsJpKHc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 May 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3487 (0xd9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB4B4AF, serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
        Validity
            Not Before: May 14 01:01:33 2025 GMT
            Not After : May 16 01:01:33 2025 GMT
        Subject: CN=6823eb6d-23d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:79:e8:7e:60:73:d8:64:be:d7:3a:2e:c9:
                    04:1b:90:fc:a1:aa:2d:58:5b:b1:65:13:a0:e3:6f:
                    e4:ab:3f:d5:06:24:94:df:4d:da:f8:dc:00:ad:91:
                    2d:18:23:1e:d6:4d:7f:50:7e:ac:4a:ee:4f:d0:bb:
                    bc:4b:c6:78:2c:81:75:40:c8:e9:f6:8c:5c:51:8c:
                    fd:0a:2e:40:5a:e5:ca:d4:40:ef:3e:f5:87:a8:83:
                    c0:49:54:11:37:99:00:32:64:6f:8a:b6:07:39:fc:
                    84:b5:e0:c0:f8:b7:58:9b:9d:13:1f:0c:a3:e4:55:
                    be:7e:5d:d5:02:05:bd:a3:db:35:a0:91:00:a6:bf:
                    7f:46:4f:46:d7:54:5e:a4:19:93:26:0b:30:cc:27:
                    e9:9a:92:ba:07:34:5c:90:e9:c2:29:86:72:87:ac:
                    6f:66:a9:79:36:0b:82:de:28:24:3f:8f:8d:ed:6b:
                    ab:3d:0f:8d:67:f2:2b:a7:81:53:c2:13:16:a4:8a:
                    07:c9:c9:f8:f8:9e:dc:36:26:ab:64:c7:c9:97:23:
                    ed:f8:97:a9:d5:aa:00:68:38:79:d1:8b:44:9a:7c:
                    6f:9a:ef:25:7d:97:96:b6:1e:40:aa:86:9d:08:5f:
                    1f:50:08:71:99:54:4d:99:70:31:64:16:f1:76:5b:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3F:D2:0C:97:C8:40:FC:85:2E:DA:6A:84:BF:54:25:F5:21:52:6D
            X509v3 Authority Key Identifier:
                keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:59:13:e6:8c:4a:fd:82:52:b0:e2:e3:32:37:63:2a:3b:46:
         26:a2:22:3d:77:fe:71:cb:e7:fa:18:b5:6f:db:15:74:2b:2f:
         27:01:18:30:c8:6c:b7:02:47:8f:28:7b:40:ad:35:0b:0e:8c:
         ad:0e:49:6e:2c:79:dc:0e:8c:bd:da:7c:e0:3d:35:c7:d0:09:
         b9:63:14:a8:3e:39:db:6d:aa:92:f4:fe:92:6e:af:b4:a2:e9:
         bf:f4:89:44:3e:9c:1a:82:99:f1:cd:d3:c0:57:35:e4:05:2c:
         63:d6:1d:f9:40:0b:d0:28:29:e7:9c:06:c9:45:2b:26:4f:40:
         e2:66:9d:f1:93:25:22:44:43:3c:bb:fb:2a:79:e0:b5:84:39:
         b8:f9:4a:d7:21:3f:cc:2c:4a:a8:94:4e:44:37:ff:09:be:50:
         f4:ad:01:a6:24:23:da:b5:2b:ba:12:05:db:38:e2:89:1c:d9:
         2f:e0:55:c3:af:54:a9:f6:b0:ff:c9:0f:cc:52:4b:1e:dd:53:
         e4:2a:9d:9f:36:04:fc:3d:3b:1b:2e:cb:ec:e0:5b:53:48:ad:
         68:79:bf:27:08:b9:65:00:21:3f:61:56:68:9c:12:49:56:56:
         50:7f:b2:12:84:35:55:08:57:0b:dc:c2:03:9f:5e:61:ef:06:
         fa:54:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:37:35 2025 by rpki-client