Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
File:                     IlhakHPb2Nx6VQRFf_nceJcpdE4.mft (raw, json)
Hash identifier:          ++2PBX0g3SFurS8HN6LS6mIt6XYQyQdTiOtXg03Saf8=
Subject key identifier:   25:4D:F7:F3:5A:B8:8F:34:AB:23:F2:8D:21:BE:54:34:7C:F4:7D:E9
Authority key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Certificate issuer:       /CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Certificate serial:       03A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
Manifest number:          03A7
Signing time:             Sun 11 May 2025 03:19:52 +0000
Manifest this update:     Sun 11 May 2025 03:19:51 +0000
Manifest next update:     Tue 13 May 2025 03:19:51 +0000
Files and hashes:         1: IlhakHPb2Nx6VQRFf_nceJcpdE4.crl (hash: N4Y3gkN+mJDqOTJrKTc6/OdhFgxTx/cqb66TTL/CayM=)
                          2: 224FE6786CD311EDB88049ABF1222468.roa (hash: ngBqwzoWf1U22IRdw9sMrCAgllF9dt3JOK+klM8EtcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 03:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
        Validity
            Not Before: May 11 03:19:51 2025 GMT
            Not After : May 13 03:19:51 2025 GMT
        Subject: CN=68201758-8bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:1b:56:7b:49:d6:91:43:5c:82:1f:1e:4b:
                    1d:fa:bc:98:2f:d5:39:79:1b:13:58:2b:5f:40:27:
                    f7:c3:fe:01:1a:97:5a:e8:40:27:4d:ab:6e:8a:e4:
                    a4:53:0d:f2:09:3a:8c:fb:30:b3:b8:48:25:f6:03:
                    2e:19:78:0a:94:e5:bc:fc:44:04:bf:82:ca:04:c7:
                    d5:a0:8b:b8:08:6c:2c:ff:32:b5:c6:8f:81:ce:fd:
                    52:98:0e:8b:29:e8:04:3c:73:68:06:63:d0:f7:59:
                    c2:13:ff:39:96:a2:91:6c:0e:d2:fc:fe:cb:85:02:
                    b1:60:ec:e2:b4:78:18:d8:3d:18:14:53:75:45:c9:
                    88:08:8d:48:a8:d0:bc:b7:44:c6:9e:ea:19:98:65:
                    c2:7f:85:54:c5:17:e2:ad:45:5b:ea:d1:5a:09:19:
                    fe:1b:2f:65:52:fb:85:75:39:eb:b9:74:3e:03:ab:
                    7e:91:b6:42:cb:38:73:1d:02:09:54:8f:1a:af:39:
                    cc:fa:12:5d:c7:5a:28:98:b1:fd:46:dd:b4:cb:11:
                    33:5c:35:cd:ab:53:13:00:ec:13:b0:63:eb:dd:14:
                    f1:5e:62:60:58:c0:24:c1:7f:41:3b:a3:9e:5c:4f:
                    ef:7a:1d:63:9f:14:79:0e:43:57:4c:ca:fc:fc:6c:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4D:F7:F3:5A:B8:8F:34:AB:23:F2:8D:21:BE:54:34:7C:F4:7D:E9
            X509v3 Authority Key Identifier:
                keyid:22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:70:22:68:11:ad:de:f1:a2:a0:95:7b:c9:5e:a8:59:91:ec:
         13:d4:50:1a:2a:c5:0b:b4:75:c9:b5:fa:fb:79:5b:52:77:6e:
         57:f8:ea:73:ae:61:1d:d2:2e:ba:1c:28:22:36:bb:20:8e:f5:
         13:80:b9:cc:1c:a0:78:ba:72:33:0c:f3:8a:80:eb:3c:94:d9:
         53:d4:4a:6f:f8:68:d9:b3:fe:73:48:f0:d6:30:1b:d1:53:37:
         fd:06:d3:32:c8:6b:27:dd:e3:69:ff:67:b1:0e:29:54:4c:f1:
         91:b2:58:5e:61:9e:1a:ec:fd:51:f1:6d:d7:96:2e:f2:6b:bc:
         67:1e:ae:ee:0d:6f:84:7a:80:2a:45:cd:f4:56:63:bd:94:8e:
         b1:b4:2f:f2:3c:d7:52:1b:e5:32:a5:43:89:24:cf:4e:08:5c:
         00:4f:34:a0:f6:52:da:82:e9:c2:97:2d:9f:04:74:ad:eb:7e:
         b3:3d:79:bb:b9:47:d4:79:f9:1b:62:b2:f3:83:8f:10:b3:77:
         15:3b:21:61:cd:b9:ef:21:19:8b:3d:a5:c3:5e:5e:f5:66:04:
         c6:99:78:5d:f2:38:ea:0b:8f:63:5d:4a:b4:d4:33:47:b4:3b:
         18:63:70:0f:43:5e:96:ec:e2:e7:c0:f6:f6:df:93:d5:00:5d:
         1f:4a:0d:72
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0NDMjRBRjExMC8GA1UEBRMoMjI1ODVBOTA3M0RCRDhEQzdBNTUwNDQ1N0ZGOURD
Nzg5NzI5NzQ0RTAeFw0yNTA1MTEwMzE5NTFaFw0yNTA1MTMwMzE5NTFaMBgxFjAU
BgNVBAMTDTY4MjAxNzU4LThiZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHIRtWe0nWkUNcgh8eSx36vJgv1Tl5GxNYK19AJ/fD/gEal1roQCdNq26K
5KRTDfIJOoz7MLO4SCX2Ay4ZeAqU5bz8RAS/gsoEx9Wgi7gIbCz/MrXGj4HO/VKY
Dosp6AQ8c2gGY9D3WcIT/zmWopFsDtL8/suFArFg7OK0eBjYPRgUU3VFyYgIjUio
0Ly3RMae6hmYZcJ/hVTFF+KtRVvq0VoJGf4bL2VS+4V1Oeu5dD4Dq36RtkLLOHMd
AglUjxqvOcz6El3HWiiYsf1G3bTLETNcNc2rUxMA7BOwY+vdFPFeYmBYwCTBf0E7
o55cT+96HWOfFHkOQ1dMyvz8bL3pAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJU33
81q4jzSrI/KNIb5UNHz0fekwHwYDVR0jBBgwFoAUIlhakHPb2Nx6VQRFf/nceJcp
dE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNDQzI0L0YxMkQyMjk4NkNDRjExRUQ4NTg4ODJBMkYxMjIyNDY4L0lsaGFr
SFBiMk54NlZRUkZmX25jZUpjcGRFNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lsaGFrSFBiMk54NlZRUkZmX25jZUpjcGRFNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0NDMjQvRjEyRDIyOTg2Q0NGMTFFRDg1ODg4MkEyRjEy
MjI0NjgvSWxoYWtIUGIyTng2VlFSRmZfbmNlSmNwZEU0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAccCJoEa3e8aKglXvJXqhZkewT1FAa
KsULtHXJtfr7eVtSd25X+OpzrmEd0i66HCgiNrsgjvUTgLnMHKB4unIzDPOKgOs8
lNlT1Epv+GjZs/5zSPDWMBvRUzf9BtMyyGsn3eNp/2exDilUTPGRslheYZ4a7P1R
8W3Xli7ya7xnHq7uDW+EeoAqRc30VmO9lI6xtC/yPNdSG+UypUOJJM9OCFwATzSg
9lLagunCly2fBHSt636zPXm7uUfUefkbYrLzg48Qs3cVOyFhzbnvIRmLPaXDXl71
ZgTGmXhd8jjqC49jXUq01DNHtDsYY3APQ16W7OLnwPb235PVAF0fSg1y
-----END CERTIFICATE-----
Generated at Mon May 12 02:13:36 2025 by rpki-client