Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
File:                     2KoAqxWVGabWVnDenlmLc99qssE.mft (raw, json)
Hash identifier:          LlY6joDF8x06Gw0hVZ7odOEP26aEe+gv0L3z93z+2no=
Subject key identifier:   FB:85:AB:48:F9:C2:A9:33:D5:52:FB:C2:59:41:96:68:A9:6A:AF:57
Authority key identifier: D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
Certificate issuer:       /CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Certificate serial:       EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
Manifest number:          E7
Signing time:             Sun 29 Jun 2025 05:04:33 +0000
Manifest this update:     Sun 29 Jun 2025 05:04:32 +0000
Manifest next update:     Tue 01 Jul 2025 05:04:32 +0000
Files and hashes:         1: 2KoAqxWVGabWVnDenlmLc99qssE.crl (hash: 8P70pJVv1YdVgOPzUFmKWRQquvO0ljxjnyte7vvHwCY=)
                          2: 678B7098E48D11EFB0502A6E762E951A.roa (hash: jonAE1XfJY/5m4j4uM2w3HbC11SG5Uy6EkEVqN0G0Cw=)
                          3: 8612CEC8A8A911EFB887DDA0762E951A.roa (hash: GTU21iNyjdIeL6dIGxKDjmWXXd/5ZvujPdaZWrQ4o/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F273DAF, serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
        Validity
            Not Before: Jun 29 05:04:32 2025 GMT
            Not After : Jul  1 05:04:32 2025 GMT
        Subject: CN=6860c961-964d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:16:e7:6c:2f:6c:4b:06:12:ff:3b:e7:94:
                    3b:4c:76:f7:01:1a:22:f5:c7:09:42:d7:e8:f9:6e:
                    1e:6c:2a:f6:8a:be:9c:94:2f:b3:6a:94:c7:48:27:
                    78:8e:58:d1:ec:13:7f:3a:fc:b1:e5:23:8d:e3:46:
                    8f:b4:ca:58:01:9c:64:4e:73:a6:cc:4a:22:25:26:
                    80:1e:5e:2f:06:c8:42:24:bd:7e:2a:12:5d:e6:5f:
                    ed:34:1c:e4:b4:87:fe:c9:da:a0:eb:18:20:40:6a:
                    b8:dd:f7:ea:cf:b9:1a:3f:b7:99:9d:d9:2f:a0:28:
                    a8:1e:88:37:32:52:82:c3:70:33:aa:21:55:90:db:
                    3b:bf:0b:45:e9:8a:b4:2f:1e:d7:f7:b0:79:a6:3b:
                    3f:d5:54:e6:6b:98:04:0e:4f:c2:e1:6b:0d:e0:a1:
                    7e:9e:5b:6c:82:72:6a:c1:7e:71:7b:52:ee:05:42:
                    35:8d:09:9e:c8:16:32:bf:d4:60:74:fd:0a:46:31:
                    18:21:c6:77:41:7e:14:dc:99:fa:c9:19:45:e2:f2:
                    f9:8d:ea:a3:fe:36:cc:f0:35:a6:93:27:00:7e:74:
                    9d:f1:7f:45:67:10:62:9d:f8:d8:c6:24:37:82:da:
                    9b:4d:ad:91:ff:35:25:61:c1:4a:b6:06:82:97:0c:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:85:AB:48:F9:C2:A9:33:D5:52:FB:C2:59:41:96:68:A9:6A:AF:57
            X509v3 Authority Key Identifier:
                keyid:D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0d:25:98:e5:cd:5d:8a:e6:c0:38:0b:ee:87:2e:5a:32:23:
         07:6c:1b:02:9d:6d:63:b1:47:0f:a6:92:ed:f5:d1:1d:ba:34:
         a8:d7:89:aa:99:ba:91:65:41:8b:d2:68:c1:d2:2d:89:f0:99:
         57:de:17:73:0d:b0:fb:62:e5:bf:92:ee:f5:f6:17:2e:1f:e8:
         cd:cb:78:ba:12:1a:79:18:15:48:b9:32:39:76:f1:4d:a2:80:
         71:f1:c6:9a:f4:15:86:f6:83:cf:35:cd:41:f2:de:30:15:b8:
         b5:d8:6a:6c:29:00:3f:74:28:d0:9c:18:63:36:35:4a:7b:12:
         61:f0:36:ed:c8:85:16:56:aa:3d:fb:67:3b:37:f3:e5:6d:fc:
         f2:8a:4a:ff:f1:6f:f9:71:35:d6:3e:07:82:b4:6d:65:9b:fa:
         71:45:d8:4d:b9:a3:84:28:63:05:be:fb:01:bf:55:9f:f6:77:
         eb:c5:f7:ab:26:13:2b:88:fa:93:93:d4:6f:65:90:0f:a3:85:
         d8:d8:89:9a:e7:17:d6:da:3c:f5:c5:61:57:be:24:7c:66:dd:
         ce:48:de:4e:85:b3:9c:f5:37:24:65:c3:25:a9:1e:02:71:d7:
         45:2c:02:94:0b:f6:70:d0:32:d6:45:63:3b:6e:a7:b0:24:5d:
         c4:3d:5b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:29:14 2025 by rpki-client