Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
File:                     fB-8tURrPURYdKAjdA4kfWIwI10.mft (raw, json)
Hash identifier:          smXfWkzYzM1aTGH3uNVYYogbnfd+BkBMF3hkLHbyqWM=
Subject key identifier:   49:46:61:EE:AD:84:33:47:FD:66:18:19:00:26:E4:F4:5F:16:2F:A7
Authority key identifier: 7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D
Certificate issuer:       /CN=F363C154AF/serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
Certificate serial:       0123
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
Manifest number:          0120
Signing time:             Wed 30 Apr 2025 04:44:40 +0000
Manifest this update:     Wed 30 Apr 2025 04:44:39 +0000
Manifest next update:     Fri 02 May 2025 04:44:39 +0000
Files and hashes:         1: fB-8tURrPURYdKAjdA4kfWIwI10.crl (hash: yivMXF7ef9iR1jkEqPI4dMRkuv42vogrprB1VeD5D3k=)
                          2: 69176EDA54B411EF85302264762E951A.roa (hash: aXC5ZcMaKvppj9wFu7iH9bADIONa5jeymvvlcxe0MZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 04:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C154AF, serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
        Validity
            Not Before: Apr 30 04:44:39 2025 GMT
            Not After : May  2 04:44:39 2025 GMT
        Subject: CN=6811aab8-79d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b0:70:b2:21:d7:37:ad:95:4d:52:27:c8:c7:
                    21:9c:b2:55:1f:fc:2e:c4:c3:20:ab:85:01:0b:cb:
                    a5:85:ed:ae:a0:db:3a:93:fa:1c:bd:7b:57:32:4a:
                    22:f5:5b:3e:03:67:e6:6f:a4:cb:0c:ab:84:64:f9:
                    42:ea:b1:86:f6:cd:77:e7:5e:ef:fd:91:9e:67:1e:
                    cd:f3:79:f5:96:3e:1d:ea:7b:04:ce:0d:86:93:2a:
                    be:8d:ad:53:61:4d:9e:76:e8:6d:a7:3d:1d:45:3e:
                    9a:01:d4:99:ef:c2:82:55:d7:48:c3:70:d9:b8:f7:
                    be:17:69:b5:8f:fb:e8:0a:66:0a:ab:33:8b:89:0e:
                    6e:85:02:65:d1:b8:73:aa:af:ab:0b:3c:de:8b:90:
                    58:d7:02:fc:f9:a6:a2:18:27:95:0b:05:18:65:22:
                    b0:31:1c:ad:6a:93:64:e2:ff:5e:10:c6:24:bb:9d:
                    e8:61:d0:66:3f:fe:1c:84:46:14:f4:20:ba:63:01:
                    d6:b6:a8:77:1e:13:66:d2:ad:a5:29:37:07:db:5e:
                    f7:0f:83:94:f3:d5:b5:13:1b:ad:46:a5:bc:be:c6:
                    81:9f:91:c8:a4:d1:45:64:b3:2c:4e:93:b2:11:09:
                    23:20:d3:fb:5c:13:93:38:78:0f:c5:8e:c5:6d:b6:
                    e5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:46:61:EE:AD:84:33:47:FD:66:18:19:00:26:E4:F4:5F:16:2F:A7
            X509v3 Authority Key Identifier:
                keyid:7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:64:9e:4f:98:d7:83:a5:7a:07:f8:bc:9b:15:73:f2:9b:24:
         32:40:29:24:2a:9e:b1:76:62:3a:9e:11:be:90:c9:36:80:12:
         56:de:db:65:be:27:ec:0d:3b:20:b7:64:20:83:3f:98:4d:90:
         dc:88:39:05:86:9e:06:8c:dd:35:49:a3:b3:8a:f9:11:dd:0e:
         9e:8e:d1:72:dd:e5:49:04:90:53:29:75:49:7f:ce:a5:83:dc:
         8b:10:b2:41:29:8f:f1:c1:dc:37:27:b2:c9:d2:48:c6:2d:7d:
         b8:07:b4:50:ab:67:38:94:3e:cf:26:0f:24:52:8c:82:cd:a2:
         7d:4d:10:1c:df:0f:36:ad:37:4b:d0:15:df:fe:42:fe:a5:d2:
         64:37:48:8e:ce:73:bb:e0:e5:98:df:5e:1a:77:a3:21:3f:20:
         54:ef:5b:77:49:5a:b2:fd:c5:4f:59:8f:88:8b:fb:33:5c:67:
         87:18:2e:b4:85:a3:06:9a:2a:7e:33:b9:2f:cd:45:f4:f8:73:
         e2:22:54:6b:4a:60:0b:3c:1f:11:22:49:f2:24:8d:52:ae:d5:
         17:e6:88:50:75:d0:b5:e5:9b:ee:4c:94:2d:12:da:b3:21:56:
         ba:99:78:28:49:76:8b:e6:d7:3a:b9:c9:9a:ec:aa:cc:5d:ac:
         d1:6c:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:06:30 2025 by rpki-client