Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
File:                     9s_tdm0YWlpEFVDpcITTe-KcA-s.mft (raw, json)
Hash identifier:          7yrIhMB6a1sHqamLKFSBhD/yCcjdK6vFJYGHM2XWUEE=
Subject key identifier:   5C:3B:51:ED:C8:A6:B2:04:3B:B7:A2:56:DF:60:BF:3C:33:FE:9B:34
Authority key identifier: F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
Certificate issuer:       /CN=F363DDF3AF/serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
Certificate serial:       04D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
Manifest number:          04D2
Signing time:             Sun 27 Apr 2025 02:46:04 +0000
Manifest this update:     Sun 27 Apr 2025 02:46:03 +0000
Manifest next update:     Tue 29 Apr 2025 02:46:03 +0000
Files and hashes:         1: 9s_tdm0YWlpEFVDpcITTe-KcA-s.crl (hash: E/s6GpXT151QoRGi9eyM9BSDpW98BeCAHw44TTN7DUg=)
                          2: 4982356676DE11ECB3098D8D5A40D577.roa (hash: F+0U8dG2rCXUcTvEY7rr1zknmOkjpUBOw8pBbcMuxcw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DDF3AF, serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
        Validity
            Not Before: Apr 27 02:46:03 2025 GMT
            Not After : Apr 29 02:46:03 2025 GMT
        Subject: CN=680d9a6c-2467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:58:da:1d:46:e9:67:8b:7b:04:80:56:28:
                    f2:ac:2e:c6:42:4f:f1:c5:40:11:1d:1d:e3:2c:8b:
                    f4:79:4c:bf:2c:d5:81:cd:3c:55:50:83:8e:db:c7:
                    f5:4b:31:26:2d:41:7d:a5:3c:fe:86:7b:64:f5:ef:
                    6c:a9:6a:e3:01:a0:6a:93:22:be:02:08:3b:b1:5a:
                    44:20:e2:95:a1:f0:09:d5:12:29:77:3a:10:94:cc:
                    1b:68:2b:b8:4b:10:7d:bd:62:96:2f:03:37:67:f4:
                    ce:c1:e6:c1:cc:58:55:54:06:e7:77:6f:06:44:01:
                    2c:db:35:88:3a:79:7b:b2:7b:19:9b:74:85:26:99:
                    44:84:30:d9:1b:c7:ec:c4:4a:dc:1e:e5:e6:8e:aa:
                    4d:33:d2:2d:79:4b:63:95:3a:65:52:a5:49:19:ca:
                    e8:af:31:62:a4:15:67:6f:11:ae:19:44:9d:19:51:
                    1c:14:e3:64:17:a8:97:24:47:97:81:d4:45:63:0b:
                    69:e7:0f:0e:a4:b5:01:d2:a7:33:ce:eb:8c:38:d7:
                    59:6e:e2:a3:99:32:ad:82:a3:51:66:e1:44:9d:09:
                    44:55:44:df:eb:a9:af:56:f6:be:37:60:90:89:d1:
                    bb:a7:f7:3f:f9:6b:58:30:14:dc:63:e0:ce:18:f2:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3B:51:ED:C8:A6:B2:04:3B:B7:A2:56:DF:60:BF:3C:33:FE:9B:34
            X509v3 Authority Key Identifier:
                keyid:F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4e:bd:1d:80:77:8a:cf:6d:7f:a8:f3:4a:e9:d0:ba:4c:3f:
         64:5e:9d:de:b2:54:47:76:0a:1d:c7:bc:88:44:89:10:f8:9d:
         40:65:10:a5:4e:f8:ee:cc:b7:a8:06:d1:91:44:ca:1f:56:55:
         20:c0:0e:ef:bc:77:1d:79:7a:69:6d:6e:b8:51:2f:28:40:a7:
         b2:72:35:e1:e0:a4:b3:9e:61:7a:6b:8a:c5:4e:c3:fd:6f:a4:
         57:1d:9a:21:80:9d:08:1e:d4:82:07:ff:cf:3d:4d:79:b4:ba:
         e0:5d:0c:9f:47:44:dd:19:e0:53:e9:b0:5b:f6:19:5d:23:14:
         45:60:5b:ac:07:b7:c0:4f:dc:90:47:8c:0b:c6:91:40:a3:7c:
         97:e3:1c:1a:bc:82:36:5b:fe:09:c6:57:8f:32:8f:f0:ff:26:
         cd:f2:9c:52:30:d0:34:89:cd:e7:94:8b:b0:71:eb:de:81:52:
         b9:5c:1a:8d:22:3f:91:c4:e7:b6:e2:de:ba:98:a7:ff:55:18:
         74:a5:11:2f:4b:3a:5c:01:98:4d:e8:63:27:e1:92:bd:4f:19:
         44:d7:02:e6:f1:a7:a6:e7:2d:72:8e:1b:38:63:a6:e4:4d:e3:
         30:2f:a8:be:01:b3:8a:37:4b:62:d8:af:c2:d5:c3:fa:31:3d:
         df:af:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:11 2025 by rpki-client