Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
File:                     gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft (raw, json)
Hash identifier:          vhroIthmch3545ufXjAHBKO2Dy1dA2Jxfc03adytEHA=
Subject key identifier:   D6:A5:B0:2F:8D:CA:85:8A:BD:DD:98:88:7C:0C:40:05:A5:39:44:6B
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Certificate issuer:       /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial:       0362
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
Manifest number:          035D
Signing time:             Mon 12 May 2025 03:28:49 +0000
Manifest this update:     Mon 12 May 2025 03:28:48 +0000
Manifest next update:     Wed 14 May 2025 03:28:48 +0000
Files and hashes:         1: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl (hash: 3THzzCw8A1ncXGEPRFUIQZSQYJQ221BOxhZhFU/sG04=)
                          2: 98A7885C8DDF11EE856E001B4AD9E6FC.roa (hash: TrALYequ4gbamTwRj8gCMuUP9BJ+K7+H8Khcj3l43ng=)
                          3: AB725E028DE011EE9520701E4AD9E6FC.roa (hash: 7fwPCumSJFs34OrhghTo8l+HdWqKbq+1hmCpmK0WZcE=)
                          4: 22934508A60D11EDB81041C4F1222468.roa (hash: iIIKmZv0hW8wlHoV6xZsUe6KFdRjuYNOIqMfAgHd9Rk=)
                          5: 0845198C8DDF11EE841826194AD9E6FC.roa (hash: RjAkig7q9LVsQiCR96gKwlxjshut4m5EhwHTV6qeAo0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 03:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
        Validity
            Not Before: May 12 03:28:48 2025 GMT
            Not After : May 14 03:28:48 2025 GMT
        Subject: CN=68216af1-d7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:eb:b7:db:44:d0:28:da:ef:80:0c:c3:52:
                    e1:13:36:f7:5d:49:5b:ec:d4:5f:dc:87:25:be:3f:
                    32:11:0f:c4:57:f8:a6:28:ce:eb:58:f9:3a:a4:1e:
                    f0:50:87:42:e4:8c:fc:8c:17:d4:dc:e7:f0:db:7e:
                    82:94:93:b1:e0:31:75:07:5a:69:be:35:ba:2a:87:
                    52:a7:c6:7c:9f:60:5b:20:82:4e:c8:00:6a:02:a4:
                    90:07:d7:ed:e3:a7:c8:b2:6f:4b:2d:63:2b:84:6e:
                    14:20:18:a4:d4:bf:01:b0:f5:2d:ce:6e:2d:fe:b3:
                    8e:3a:a4:de:25:ff:ec:99:cb:6f:26:08:3b:c3:de:
                    ff:cd:4e:30:71:7c:3b:9f:b8:cd:37:c4:08:50:c6:
                    05:ca:01:1a:dd:ca:4b:a7:f9:e7:da:50:f6:8b:ad:
                    64:55:41:f0:46:83:7c:72:76:51:bf:85:9d:e5:26:
                    13:82:ed:df:c3:89:15:b5:a8:e0:7d:e9:fa:79:2c:
                    07:a7:ec:18:3d:95:a7:0f:42:a6:4e:d0:2f:49:f9:
                    10:ce:50:d4:95:33:94:f0:af:9c:e2:dc:7b:30:d5:
                    02:00:ec:69:62:a8:e8:7b:b0:27:4d:2b:55:bc:25:
                    c1:ad:47:7a:9c:96:3f:84:f6:a1:f0:d2:48:54:9c:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A5:B0:2F:8D:CA:85:8A:BD:DD:98:88:7C:0C:40:05:A5:39:44:6B
            X509v3 Authority Key Identifier:
                keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:94:7d:86:ac:cd:89:ce:ae:db:3e:b0:c6:92:61:2e:96:2c:
         e7:af:87:fd:19:7e:9a:49:8e:9b:85:10:12:7b:ac:3b:a2:55:
         89:63:e0:d8:5b:ae:74:cf:8f:8e:7b:ac:ed:16:5b:38:2a:b5:
         21:d5:0b:d1:79:0d:87:25:9b:8a:05:d7:99:59:c2:ad:47:2f:
         8f:fa:70:b4:48:64:18:9e:49:5a:58:bc:d2:4e:da:79:58:33:
         b2:3e:24:91:99:e0:0e:10:32:f5:6a:83:e4:8a:64:ed:e4:b5:
         d0:9b:9b:f8:56:7f:4b:98:34:32:81:3d:2f:d7:ae:03:47:91:
         cc:a8:c0:a8:93:5d:23:a2:e7:ac:c5:db:0c:7d:c9:8c:fb:4d:
         40:b3:2c:2f:f5:6f:6a:1d:3b:50:fa:04:a4:16:f8:19:62:bd:
         ac:ae:e1:97:b4:1a:56:6b:cf:85:87:4a:cb:f0:ab:94:7c:04:
         ee:3e:7b:be:18:70:d0:bf:bb:ec:73:ad:86:a6:43:09:3a:ec:
         03:63:de:e4:64:fc:95:d8:94:d9:25:c0:ff:7a:f5:f5:80:52:
         b0:e2:3c:f9:6c:33:e7:77:8d:07:42:bf:5a:dd:1b:23:32:64:
         c5:82:67:92:a3:01:25:c3:bb:7a:cb:97:c7:b5:68:19:92:d3:
         c8:9f:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:55:12 2025 by rpki-client