Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
File:                     hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft (raw, json)
Hash identifier:          dWsugUCzp5DbT/KD84v/uwi7R2LiGdaZipqCeH/1NA4=
Subject key identifier:   BF:B0:AE:72:37:7B:8D:39:5A:FA:8A:1A:CF:57:B9:05:D0:70:A1:54
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       063C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
Manifest number:          0608
Signing time:             Sun 29 Jun 2025 02:31:53 +0000
Manifest this update:     Sun 29 Jun 2025 02:31:52 +0000
Manifest next update:     Tue 01 Jul 2025 02:31:52 +0000
Files and hashes:         1: hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl (hash: AgT2CDS0Keq5xczHea0KyC4U5MiwNXhhhYdnbO2xzQk=)
                          2: BA66E382187811F08601B5D76DB8BCC6.roa (hash: xrkKMEoemFwLFxynJW5/pf7m3USWr81uszWJPf1EKM8=)
                          3: 15C50C50FC6B11EB9A564508D8A014CE.roa (hash: edvjHiFr4+tEmm64tF6z1Z3h19PfKmEG5a35CcgMLjw=)
                          4: 35BED484D8C011EFB6BFB04B762E951A.roa (hash: oDvQs4f0WaWrVqYQFzpm5ZbnNud9b5El6CV6+hbaiT8=)
                          5: B5E34AB41FC411F08383C1F2DAE4EC9C.roa (hash: tv2g7fBLEkGwfRIA98uHxsVaQARroQ6iH0sntcIrsFo=)
                          6: 7C4390DE274411F0A1BF9AAEDAE4EC9C.roa (hash: yBSz9Ncf3wrX5w+sZQadKSbDDM9+WXy4dRTX6NzVK2w=)
                          7: 6F610D6EB15211EFBDDE33A8762E951A.roa (hash: hU8BoAyDFHgCQ5xHdbCUfglrlvg4aN+lgDNHGzvLeys=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Jun 29 02:31:52 2025 GMT
            Not After : Jul  1 02:31:52 2025 GMT
        Subject: CN=6860a599-8972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:56:b1:5c:80:8f:24:31:5c:3c:82:a4:38:6d:
                    79:2c:00:fe:31:b2:6d:a1:31:71:f8:d6:83:1e:6c:
                    19:6d:f6:48:c6:ac:28:9b:2c:4e:4d:a1:91:e9:b7:
                    9a:be:f0:d0:9b:39:f3:e2:d1:85:90:82:c7:27:dd:
                    eb:42:08:e3:eb:b2:32:76:82:a9:f3:c4:fb:5b:fc:
                    40:2a:6c:d4:b0:08:ef:d9:38:7a:82:26:6d:74:62:
                    6e:45:69:89:c2:c1:28:04:06:fb:ae:d4:1b:de:43:
                    6c:ef:c6:a5:39:60:07:ce:ee:15:be:d3:84:c2:7c:
                    43:46:32:82:29:04:7a:a6:2c:48:4f:90:91:c0:ab:
                    ac:e7:12:02:da:3e:19:d6:68:b8:c9:38:b0:83:ee:
                    a3:15:e6:01:7c:50:cd:6b:0b:39:f0:b1:a5:88:2f:
                    15:0c:d6:a0:a3:f9:02:5f:ba:1f:60:09:f1:3f:27:
                    83:9e:07:eb:38:26:4c:41:1a:1d:43:84:4a:b1:b5:
                    91:c8:53:30:3a:fe:83:fa:f7:3f:56:cb:7c:93:dc:
                    c8:1a:e0:ca:a0:77:52:33:68:95:df:22:a4:37:da:
                    2c:54:20:07:a6:34:57:18:06:b0:50:9b:87:91:28:
                    a0:db:a1:64:49:d1:31:09:60:d6:18:76:d0:1c:90:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B0:AE:72:37:7B:8D:39:5A:FA:8A:1A:CF:57:B9:05:D0:70:A1:54
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:37:69:bc:12:40:7a:ef:ce:6a:90:3c:bb:08:ad:94:88:a0:
         71:86:8b:ff:44:c9:6e:f0:bb:3a:58:57:d7:06:c2:4c:5f:99:
         05:b5:22:18:ad:84:1a:fc:a8:15:77:88:12:a7:93:8a:d3:5c:
         d9:ca:db:41:69:21:e2:99:98:51:f3:fd:6f:98:82:d6:e6:ae:
         8d:32:16:f8:f3:23:bb:c7:1d:62:3e:8c:4a:3f:88:75:55:2a:
         19:da:a3:8f:29:1c:69:e9:f6:db:2d:e9:9f:ee:b4:af:c2:d1:
         8c:ff:ad:de:fd:a2:b3:d9:7f:9c:e4:f6:b6:b3:bc:63:09:ab:
         ef:1e:4d:ce:94:24:d7:df:ae:fd:f7:3b:66:07:c6:b9:e8:2c:
         45:d4:09:a8:47:1e:71:74:99:70:c1:19:79:7b:e9:ed:2a:58:
         6d:f2:15:7d:7f:74:fe:be:bc:72:cb:0d:4f:08:d6:6b:a5:94:
         6c:ff:81:88:60:f5:ee:6e:dd:3f:36:f2:77:94:f2:86:90:47:
         f5:f6:d3:51:43:6d:18:25:a7:98:87:d7:33:55:47:a3:ea:ab:
         9d:a6:63:40:08:58:82:16:fd:07:cb:fc:81:15:c9:86:c5:c5:
         6a:74:5e:b7:70:bb:06:21:14:a0:40:3c:44:34:92:3c:39:3d:
         63:eb:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:34:22 2025 by rpki-client