Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          599ytDkcmY41cX3X8jjtaaSom6kQv9+z4jnQV/4ab5A=
Subject key identifier:   DF:C9:B2:A9:29:09:B4:8A:BC:64:D0:68:33:2D:17:62:1A:2C:69:BE
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       02FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          02FB
Signing time:             Mon 12 May 2025 03:41:46 +0000
Manifest this update:     Mon 12 May 2025 03:41:45 +0000
Manifest next update:     Wed 14 May 2025 03:41:45 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: O+/0IUW0UrEQ2+GpRRw09a+iLhnkCyevS3IjDvlpXvE=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: May 12 03:41:45 2025 GMT
            Not After : May 14 03:41:45 2025 GMT
        Subject: CN=68216dfa-fa01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:61:2e:42:ff:c6:95:80:0f:2c:e8:dd:d9:
                    9e:41:8d:ea:75:d3:ad:df:90:26:bd:52:a8:6f:eb:
                    27:c7:66:89:d2:c6:31:53:8c:2f:41:a7:3e:ed:06:
                    31:af:fb:26:39:6f:7a:8d:e3:6e:72:f0:c8:67:c8:
                    af:a8:de:32:c5:8d:53:6a:c1:c7:66:e0:65:04:35:
                    70:80:6f:ad:be:98:33:55:cc:e6:e8:e0:68:2f:33:
                    3c:e8:5f:db:7b:43:63:6b:28:7f:f4:04:4d:ba:0f:
                    a7:0d:39:76:16:d7:b7:55:9a:a4:42:09:b8:b8:40:
                    3c:34:a7:6b:85:a0:07:df:f4:7a:61:90:bf:6f:7d:
                    d5:f8:05:0e:d0:f7:ca:16:dd:9f:d8:03:f5:c7:30:
                    87:d4:13:4f:eb:65:e7:ea:c7:89:80:64:bc:2f:d6:
                    1a:ca:45:28:e7:9c:25:af:6e:72:f0:c4:dc:db:a9:
                    95:be:84:43:7c:c0:77:8e:db:3e:6c:ef:e9:d3:a3:
                    ab:96:8b:bd:31:c3:93:54:72:4a:cb:c8:d6:40:4e:
                    99:bb:d8:f2:c7:f1:58:8f:f5:55:75:e8:06:57:e5:
                    f1:f7:a8:c9:a5:31:d5:1f:e0:cf:15:a8:a2:d9:d4:
                    8b:3f:e2:c3:69:70:6f:eb:3a:ba:47:4d:a0:a0:1b:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C9:B2:A9:29:09:B4:8A:BC:64:D0:68:33:2D:17:62:1A:2C:69:BE
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:f0:f5:c3:c7:cd:e4:1e:10:df:bd:38:40:69:c9:82:9a:
         22:d3:ed:1b:12:80:a8:e8:95:0c:b0:d6:12:7d:ff:b8:a6:cc:
         00:ef:e9:f6:61:11:4b:ff:fc:81:fc:af:9b:a1:02:4a:a4:f9:
         5c:de:63:ef:a7:5e:a4:4a:e4:3c:9f:8f:64:b3:80:d8:d3:5d:
         e3:da:8d:96:6c:e9:f7:95:7c:f1:0d:80:da:fc:1b:3b:45:d4:
         07:9e:65:59:3b:b0:0e:c0:10:d9:e5:43:cb:5f:8e:28:c8:e2:
         27:1c:f4:bc:b6:8b:5c:22:3f:84:c5:2e:36:e0:a2:6d:27:12:
         a7:2b:e5:76:51:14:d5:df:c7:0e:f2:f3:42:0e:ce:ea:05:c5:
         d0:ce:90:dc:cf:a8:06:d2:c1:65:f1:58:24:bc:23:e9:d8:21:
         ba:a1:d1:34:1f:e2:41:c6:cb:67:cb:65:cf:a4:b1:a0:72:bd:
         cd:03:46:92:df:33:7a:0e:7c:c2:71:f3:15:2b:72:9b:75:f8:
         97:6a:d3:d0:95:e2:93:2c:93:66:41:f0:1e:5a:21:59:d0:1f:
         3f:7b:a5:c5:93:71:db:79:ba:a1:a9:87:18:6a:3b:f9:2d:8e:
         e2:d9:5f:77:21:40:72:34:76:07:a3:99:3c:74:0d:53:a3:0e:
         d5:31:31:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:53:25 2025 by rpki-client