Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
File:                     E1GrIbf03rgU81lO-IKc3VSFi8g.mft (raw, json)
Hash identifier:          OAMXb1bw0Xu3N8qgDwvbJpgMwR9h0UwoRcv8/aUtn5A=
Subject key identifier:   A7:7F:4C:29:4E:E1:E1:C3:AD:90:8D:5D:73:1D:9F:DE:E4:4A:29:47
Authority key identifier: 13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8
Certificate issuer:       /CN=F3618B80AF/serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
Certificate serial:       02A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
Manifest number:          029E
Signing time:             Mon 16 Jun 2025 04:03:44 +0000
Manifest this update:     Mon 16 Jun 2025 04:03:43 +0000
Manifest next update:     Wed 18 Jun 2025 04:03:43 +0000
Files and hashes:         1: E1GrIbf03rgU81lO-IKc3VSFi8g.crl (hash: zxF8kByKys3SVt5pbc5Wl0TexDdcz7sC5bYyYIw36RQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618B80AF, serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
        Validity
            Not Before: Jun 16 04:03:43 2025 GMT
            Not After : Jun 18 04:03:43 2025 GMT
        Subject: CN=684f979f-27e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:46:67:2e:fd:b0:c0:d8:22:d1:72:f0:9c:
                    b2:84:4a:72:5c:e2:52:a1:86:78:85:80:9e:b2:5f:
                    ea:d9:02:6d:13:93:b9:ce:ec:f8:fa:f0:80:c1:c2:
                    c1:c4:25:ae:b5:11:15:7d:7e:cd:50:f2:34:76:ea:
                    68:76:77:3b:01:75:a3:8a:10:49:f0:e1:b5:29:f6:
                    cd:b5:82:d8:68:cd:2a:f8:6d:d4:bf:c1:74:18:eb:
                    4b:3f:9f:50:19:14:c6:57:02:98:c6:eb:1c:67:16:
                    cd:4f:a9:35:8e:73:f0:0a:c4:75:b6:fe:21:d7:b6:
                    e7:63:f3:38:ce:68:d2:25:62:5f:ce:f1:35:46:7e:
                    ba:cd:6f:ce:e2:17:c4:fd:28:fd:2e:72:06:13:31:
                    e9:f8:1f:c4:1a:47:8b:99:81:2d:ef:7d:36:97:c1:
                    1c:95:f5:7f:86:33:45:4c:10:90:5c:59:8e:44:5c:
                    8b:54:29:dc:4f:48:a6:7b:b0:cc:b6:09:b5:2c:34:
                    a4:01:9b:dd:a6:bc:58:9c:0e:55:5d:4e:bd:a0:31:
                    34:c0:ea:fb:6e:10:e3:12:dd:f9:4a:3b:e5:14:ac:
                    4e:92:88:ba:6d:6e:b5:c1:64:6a:f1:7d:f8:f7:87:
                    54:04:0f:8b:42:87:62:4c:5f:94:6c:1f:5a:39:c8:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7F:4C:29:4E:E1:E1:C3:AD:90:8D:5D:73:1D:9F:DE:E4:4A:29:47
            X509v3 Authority Key Identifier:
                keyid:13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:fb:09:6c:17:b4:3c:e3:1a:f6:d7:21:18:17:28:fc:f4:
         62:f2:ce:20:7f:86:a5:b2:88:59:a1:29:7f:39:34:b0:c3:a9:
         b4:d2:49:8a:93:98:55:39:2e:64:29:68:22:c9:95:af:e2:1a:
         e7:71:bd:28:fd:01:ba:69:72:2e:39:fa:19:81:79:ed:6d:6c:
         4c:d2:ee:41:99:e4:19:71:0a:f1:9d:c9:dd:18:96:ff:35:cf:
         28:70:f9:a4:4b:f4:9c:24:d3:8b:74:27:e7:7a:86:1a:dd:7e:
         ad:0f:da:7c:12:5b:8c:61:ab:9a:2a:82:7a:78:22:c8:d1:67:
         fa:65:df:92:60:92:9b:d1:ea:d8:0c:f1:11:e0:de:ef:d7:8c:
         2d:95:2b:cb:38:e9:4a:ca:32:92:14:5a:d9:fb:12:98:53:3b:
         58:f1:85:04:30:97:df:d6:54:d9:92:ca:32:0d:e5:b5:18:1a:
         00:2d:b3:8c:79:ef:61:9f:ae:5c:4e:1a:8f:7c:1b:f2:df:78:
         6d:b9:65:6a:42:37:97:ab:bd:ea:f4:e9:3c:03:07:4f:47:15:
         54:49:d0:4a:88:97:55:76:51:56:23:b7:4c:1e:03:2c:49:99:
         02:74:3f:a3:88:60:49:47:a1:55:59:7e:b5:66:35:bf:92:9c:
         a7:eb:64:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:54:00 2025 by rpki-client