Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
File:                     D1pm1nbRb8eSfE4kaUoejHekQGs.mft (raw, json)
Hash identifier:          1Rw0jqNopQdysg17vZjK2sKe7hv5LGGPz9jrMQLKrI4=
Subject key identifier:   8B:87:DA:82:E5:56:B1:B0:A0:19:B1:2A:2E:21:48:EE:5C:90:0E:6B
Authority key identifier: 0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B
Certificate issuer:       /CN=F3619C8CRI/serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
Certificate serial:       013B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
Manifest number:          013A
Signing time:             Mon 16 Jun 2025 04:52:06 +0000
Manifest this update:     Mon 16 Jun 2025 04:52:05 +0000
Manifest next update:     Wed 18 Jun 2025 04:52:05 +0000
Files and hashes:         1: D1pm1nbRb8eSfE4kaUoejHekQGs.crl (hash: Ac637nr+rC616uiDMVuqEXGuE0448yjcjvQl7KEM5iE=)
                          2: 556811145FEA11EF84A2058A762E951A.roa (hash: P0gvfxM0hcVTDkEmLqEkHZpP55/CRPi31FOdnN+KXYg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                          rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CRI, serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
        Validity
            Not Before: Jun 16 04:52:05 2025 GMT
            Not After : Jun 18 04:52:05 2025 GMT
        Subject: CN=684fa2f6-8b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:85:21:37:6c:2b:97:a5:d1:c9:82:3b:f8:f5:
                    ec:49:00:f6:6e:71:a5:7a:c6:f9:02:dc:8d:c2:d1:
                    5e:fd:e7:88:e5:ca:ef:46:9f:37:0d:02:e1:84:72:
                    18:c6:c8:52:82:dc:08:e2:06:bb:38:b3:d1:9a:37:
                    20:85:64:73:0f:4b:01:fe:95:79:c2:51:49:9c:59:
                    aa:a1:73:79:d5:e4:3a:93:27:f1:1e:e5:4e:db:85:
                    9a:e1:89:77:30:ff:66:29:8c:86:ba:ec:01:89:1e:
                    a2:f7:28:bf:5e:ae:12:c2:11:ca:1f:c5:9d:14:0b:
                    ea:a5:eb:fb:bc:38:27:73:2a:d5:66:53:9b:d7:9b:
                    05:07:ed:3c:20:f2:76:ea:30:05:e2:7e:c2:91:5d:
                    71:fd:9d:3c:03:21:e8:62:3b:f8:ee:97:39:ef:af:
                    ca:a2:8a:a2:8c:da:eb:44:30:84:bd:8f:5e:71:88:
                    a9:3b:62:fb:7d:18:2e:2e:f5:3b:9d:4d:7c:99:60:
                    93:10:03:d0:15:42:88:78:e8:f2:92:ef:df:8b:48:
                    f1:29:6f:d0:52:4d:0b:8a:d3:3f:dd:f2:be:8c:bb:
                    a8:14:81:29:4e:0b:57:15:80:6e:9d:7f:b0:83:af:
                    66:29:66:d9:3b:85:c2:53:d9:ef:44:7e:92:51:63:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:87:DA:82:E5:56:B1:B0:A0:19:B1:2A:2E:21:48:EE:5C:90:0E:6B
            X509v3 Authority Key Identifier:
                keyid:0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:79:d0:ec:20:ae:0b:a8:e1:86:04:bf:d2:06:79:42:c1:79:
         b4:d8:04:8c:7c:5c:e0:3e:6e:41:28:3e:63:47:31:17:7d:c5:
         98:be:93:6a:b4:09:ab:03:4b:7a:97:be:11:38:ea:a9:23:b1:
         3f:f1:99:91:6e:df:a3:5e:a4:fc:1a:5b:78:ce:45:ab:cc:83:
         26:a4:66:fc:9c:de:2f:99:eb:d2:b5:53:31:03:2e:52:b6:88:
         24:4e:6f:4f:cf:e3:51:a3:d7:4d:27:83:13:d8:64:6e:fd:91:
         dd:e3:a7:94:a5:cf:c4:14:57:cf:45:ac:91:f4:9e:a7:87:83:
         53:99:fd:8d:3c:19:84:f6:2d:ec:b8:db:be:ab:4f:45:03:cc:
         cc:ab:c1:76:b0:03:6c:33:68:bd:2e:b1:6a:db:70:a2:45:e8:
         69:e8:ec:f6:0b:fb:a1:7e:e7:36:38:e5:dd:50:a2:42:0f:b5:
         3d:9d:f6:32:23:f0:19:da:30:86:66:3b:92:e6:96:94:d2:ae:
         eb:51:8c:fe:12:e5:63:df:7c:9e:d1:01:fb:91:d3:a8:c7:ff:
         55:2a:57:ec:62:6f:18:53:11:5d:5c:7c:10:b9:c2:56:aa:1e:
         13:dc:64:3f:95:70:b6:32:a4:2e:7f:1d:2c:34:d3:8d:2b:4b:
         ed:40:fb:9f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICATswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTlDOENSSTExMC8GA1UEBRMoMEY1QTY2RDY3NkQxNkZDNzkyN0M0RTI0Njk0QTFF
OEM3N0E0NDA2QjAeFw0yNTA2MTYwNDUyMDVaFw0yNTA2MTgwNDUyMDVaMBgxFjAU
BgNVBAMTDTY4NGZhMmY2LThiMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD2hSE3bCuXpdHJgjv49exJAPZucaV6xvkC3I3C0V7954jlyu9GnzcNAuGE
chjGyFKC3AjiBrs4s9GaNyCFZHMPSwH+lXnCUUmcWaqhc3nV5DqTJ/Ee5U7bhZrh
iXcw/2YpjIa67AGJHqL3KL9erhLCEcofxZ0UC+ql6/u8OCdzKtVmU5vXmwUH7Twg
8nbqMAXifsKRXXH9nTwDIehiO/julznvr8qiiqKM2utEMIS9j15xiKk7Yvt9GC4u
9TudTXyZYJMQA9AVQoh46PKS79+LSPEpb9BSTQuK0z/d8r6Mu6gUgSlOC1cVgG6d
f7CDr2YpZtk7hcJT2e9EfpJRY5kZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUi4fa
guVWsbCgGbEqLiFI7lyQDmswHwYDVR0jBBgwFoAUD1pm1nbRb8eSfE4kaUoejHek
QGswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5QzhDL0RFMjhCMTZDNUZEQTExRUY4QUNFQjlBOTc2MkU5NTFBL0QxcG0x
bmJSYjhlU2ZFNGthVW9lakhla1FHcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0QxcG0xbmJSYjhlU2ZFNGthVW9lakhla1FHcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MTlDOEMvREUyOEIxNkM1RkRBMTFFRjhBQ0VCOUE5NzYyRTk1
MUEvRDFwbTFuYlJiOGVTZkU0a2FVb2VqSGVrUUdzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyedDsIK4LqOGGBL/SBnlCwXm02ASMfFzg
Pm5BKD5jRzEXfcWYvpNqtAmrA0t6l74ROOqpI7E/8ZmRbt+jXqT8Glt4zkWrzIMm
pGb8nN4vmevStVMxAy5StogkTm9Pz+NRo9dNJ4MT2GRu/ZHd46eUpc/EFFfPRayR
9J6nh4NTmf2NPBmE9i3suNu+q09FA8zMq8F2sANsM2i9LrFq23CiRehp6Oz2C/uh
fuc2OOXdUKJCD7U9nfYyI/AZ2jCGZjuS5paU0q7rUYz+EuVj33ye0QH7kdOox/9V
KlfsYm8YUxFdXHwQucJWqh4T3GQ/lXC2MqQufx0sNNONK0vtQPuf
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:03:17 2025 by rpki-client