Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
File:                     7P8kJrGvinEgph0zdg6QjBWcau8.mft (raw, json)
Hash identifier:          czOuM5cU2Pu0y98dEk5SUk4pbnPN5frml4TjLcd98Rk=
Subject key identifier:   2E:4A:66:0B:57:06:82:7C:CD:C2:C2:4F:69:A7:10:DC:F4:C6:8E:66
Authority key identifier: EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
Certificate issuer:       /CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
Certificate serial:       08E2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
Manifest number:          08DD
Signing time:             Sun 15 Jun 2025 01:28:31 +0000
Manifest this update:     Sun 15 Jun 2025 01:28:30 +0000
Manifest next update:     Tue 17 Jun 2025 01:28:30 +0000
Files and hashes:         1: 7P8kJrGvinEgph0zdg6QjBWcau8.crl (hash: TdQQ0MIzaKR0GwI+SXu54Ff/JCcSI/zsBtmsBp2iae4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274 (0x8e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AF, serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
        Validity
            Not Before: Jun 15 01:28:30 2025 GMT
            Not After : Jun 17 01:28:30 2025 GMT
        Subject: CN=684e21be-5230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:ad:33:78:a5:5b:e6:51:87:2f:54:54:7d:
                    4d:60:21:9f:ad:fd:50:6b:0c:03:5a:a9:c0:b4:e5:
                    84:79:e8:76:d3:ae:01:b3:7b:ea:28:10:99:b4:58:
                    27:23:34:ea:ff:69:1b:49:3e:8e:a5:96:09:ca:91:
                    42:68:62:9d:0e:97:cd:29:90:5e:8f:8a:b1:eb:44:
                    bd:4d:b4:20:29:06:c0:32:34:b8:14:4f:c1:89:9d:
                    87:0c:6e:f4:b8:19:9c:1a:9e:62:a7:1f:27:3c:0f:
                    03:58:15:ab:23:c8:a1:ae:2e:62:26:63:0c:de:8f:
                    ba:7c:f7:2d:d6:00:b5:78:92:63:30:5c:6c:b5:d8:
                    f1:c1:66:f2:67:c9:56:87:3d:e0:86:76:bd:4d:ef:
                    d4:d2:31:bb:d1:b2:82:60:f4:b9:49:9a:de:76:02:
                    81:49:f4:11:b7:0e:47:44:c7:e9:11:97:9d:39:99:
                    c4:d2:97:5c:d9:c7:6b:c2:c0:3f:88:16:7f:49:cd:
                    ac:24:b5:b4:24:0d:02:dc:dd:33:71:89:bd:25:b8:
                    60:75:ae:76:70:45:3f:dc:df:80:b0:6c:da:d3:fc:
                    2e:6f:26:ad:64:54:b0:1e:97:48:f2:5e:89:a4:9f:
                    34:12:82:59:5c:d8:fe:9b:8f:52:66:49:aa:3a:d2:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4A:66:0B:57:06:82:7C:CD:C2:C2:4F:69:A7:10:DC:F4:C6:8E:66
            X509v3 Authority Key Identifier:
                keyid:EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:7a:e9:3f:6a:3a:ef:ba:a8:5d:53:5a:f0:9f:4a:e9:cf:9f:
         b7:5d:66:d9:89:43:b5:7e:ab:6a:5a:95:28:9a:43:bb:d3:84:
         68:e4:ec:d2:44:b0:c2:d0:df:47:45:92:24:5f:14:73:ad:66:
         a9:8a:6d:21:5a:b0:d7:e9:26:96:7a:e4:72:35:f9:82:c9:d1:
         3f:f0:a4:b0:df:b3:09:65:6f:15:17:0b:74:d9:a4:03:f2:40:
         b5:3a:f4:93:91:22:64:18:f5:f2:2f:1d:eb:e2:93:6d:34:f2:
         c4:b0:70:a2:5d:f6:68:79:14:0a:75:d1:1a:13:ec:6a:a4:83:
         b2:0f:56:5a:be:07:16:85:ef:29:0e:00:94:38:2a:17:63:90:
         48:ce:1d:9a:6d:7e:a4:fa:2a:7d:0a:ac:a6:b7:7a:fa:f2:fb:
         25:70:ba:a9:ed:d6:22:7c:08:c2:4f:38:ed:47:9f:a0:38:da:
         de:1a:6a:94:7d:fd:27:4a:84:7e:7b:a2:6e:30:ff:52:01:b7:
         bd:2c:2b:af:63:a1:92:97:73:d1:75:da:f2:dc:b9:48:31:86:
         f3:2f:0d:b3:d3:51:db:c7:b5:18:6f:52:4a:df:a7:db:7b:e4:
         64:9c:c5:2d:6e:b3:f8:ce:e9:1d:fe:f7:70:d2:70:90:74:a7:
         4d:3d:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:06:42 2025 by rpki-client