Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          hJjvhFXHbuzRmfLtlsHgkpvgGQKY6LZmPsaZNPDhQCc=
Subject key identifier:   8F:71:7A:19:D1:35:DB:E7:98:AE:73:A6:AC:A3:30:0C:AF:B2:65:AC
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       0634
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          0631
Signing time:             Tue 17 Jun 2025 02:12:21 +0000
Manifest this update:     Tue 17 Jun 2025 02:12:21 +0000
Manifest next update:     Thu 19 Jun 2025 02:12:21 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: 7/js5oFF4TkO1PI1mf5cRlIBzAMXxeI7qot5urnRYD8=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 19 Jun 2025 00:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Jun 17 02:12:21 2025 GMT
            Not After : Jun 19 02:12:21 2025 GMT
        Subject: CN=6850cf05-b632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:3c:9f:8e:a6:e2:df:fb:ec:a0:14:8e:03:
                    1c:ac:94:da:65:7b:c9:99:55:01:df:5d:9a:6d:74:
                    15:07:d5:41:5f:03:18:54:b0:52:24:5c:34:3c:28:
                    20:d8:6f:3c:39:21:34:5f:ad:81:8b:1e:aa:6a:11:
                    39:2b:83:d3:5b:f8:6c:66:67:4b:3d:59:e2:f8:ca:
                    34:d3:4e:98:20:ea:e0:26:79:a4:75:98:8c:96:3e:
                    6e:f3:e9:78:9b:8a:e6:40:48:3b:db:b0:f0:28:00:
                    70:80:2d:82:22:12:13:60:9f:78:9e:94:98:73:a0:
                    0b:81:7b:e2:4f:b9:64:c6:a1:f3:86:f4:ba:0d:38:
                    7c:d1:12:c6:1e:fa:25:d8:dd:db:2c:26:af:3d:74:
                    2b:d2:e7:18:ef:14:2d:cd:a1:66:65:67:5f:07:f5:
                    46:0d:a4:29:fe:d4:bc:2d:d5:f2:a6:c5:1e:f1:b6:
                    69:7e:dc:f7:f8:a3:7e:72:52:de:62:d4:6d:67:63:
                    d2:48:5f:bf:d3:5f:f7:95:c8:8a:c0:69:40:40:f6:
                    5c:9f:9f:1b:e1:3c:82:6b:e4:f1:f7:a0:57:1b:01:
                    74:f0:11:1e:6f:c0:74:79:3a:3b:56:06:9d:5d:8c:
                    ee:96:1e:cd:93:1e:f3:35:3a:19:2b:78:7c:2f:31:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:71:7A:19:D1:35:DB:E7:98:AE:73:A6:AC:A3:30:0C:AF:B2:65:AC
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:12:04:56:43:cb:27:6d:94:51:48:0b:a1:7f:87:93:01:f6:
         10:24:b6:fa:3a:80:69:e2:79:9d:15:50:35:3f:0b:77:4d:c9:
         2e:09:72:ba:a1:54:74:67:48:8e:c8:6c:20:2f:75:4a:99:66:
         4d:85:81:04:6d:70:a5:63:54:1c:7b:26:8a:f4:9e:e8:b7:04:
         41:1a:b3:e7:02:fb:bb:6f:42:35:e7:3a:99:f2:ce:8d:11:c7:
         15:58:21:fc:68:e7:04:e4:93:bf:ec:2b:1d:00:d0:22:12:d1:
         28:77:aa:b1:2a:89:ef:54:b6:83:0c:c5:fc:a1:f6:e9:18:01:
         ad:12:58:11:85:bb:92:7d:0f:af:e1:83:0d:df:06:81:cb:ad:
         59:9e:12:f6:5c:cf:44:be:74:42:9e:bb:6b:19:b4:b0:17:6b:
         58:42:0e:70:75:3c:cf:bf:80:e2:b1:f1:92:23:1d:3f:4e:57:
         65:d2:e2:39:b9:57:1a:1f:60:fb:79:bc:7d:67:de:d9:ad:61:
         03:09:66:01:03:c1:9b:7e:00:02:78:36:d3:6c:0b:0a:a1:b9:
         72:b2:56:52:e1:34:33:f8:ef:21:1f:95:d1:89:14:a3:98:f2:
         9a:37:46:3f:2e:b3:c8:73:66:a1:fb:b9:70:c1:15:54:f9:f9:
         7d:f0:c1:0f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDREQUVBRjExMC8GA1UEBRMoNzA3QTFGMjg2QUUyOTg2REY2NDkxMEMzMDM0RTUx
ODlBN0MyMTZERDAeFw0yNTA2MTcwMjEyMjFaFw0yNTA2MTkwMjEyMjFaMBgxFjAU
BgNVBAMTDTY4NTBjZjA1LWI2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCv8zyfjqbi3/vsoBSOAxyslNple8mZVQHfXZptdBUH1UFfAxhUsFIkXDQ8
KCDYbzw5ITRfrYGLHqpqETkrg9Nb+GxmZ0s9WeL4yjTTTpgg6uAmeaR1mIyWPm7z
6XibiuZASDvbsPAoAHCALYIiEhNgn3ielJhzoAuBe+JPuWTGofOG9LoNOHzREsYe
+iXY3dssJq89dCvS5xjvFC3NoWZlZ18H9UYNpCn+1Lwt1fKmxR7xtml+3Pf4o35y
Ut5i1G1nY9JIX7/TX/eVyIrAaUBA9lyfnxvhPIJr5PH3oFcbAXTwER5vwHR5OjtW
Bp1djO6WHs2THvM1OhkreHwvMel9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUj3F6
GdE12+eYrnOmrKMwDK+yZawwHwYDVR0jBBgwFoAUcHofKGrimG32SRDDA05RiafC
Ft0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0REFFL0Y3MUU3NjU0OTcwNDExRUJCOTM2MzczMEY4QUVBMjI4L2NIb2ZL
R3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NIb2ZLR3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDREQUUvRjcxRTc2NTQ5NzA0MTFFQkI5MzYzNzMwRjhB
RUEyMjgvY0hvZktHcmltRzMyU1JEREEwNVJpYWZDRnQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAREgRWQ8snbZRRSAuhf4eTAfYQJLb6
OoBp4nmdFVA1Pwt3TckuCXK6oVR0Z0iOyGwgL3VKmWZNhYEEbXClY1QceyaK9J7o
twRBGrPnAvu7b0I15zqZ8s6NEccVWCH8aOcE5JO/7CsdANAiEtEod6qxKonvVLaD
DMX8ofbpGAGtElgRhbuSfQ+v4YMN3waBy61ZnhL2XM9EvnRCnrtrGbSwF2tYQg5w
dTzPv4DisfGSIx0/Tldl0uI5uVcaH2D7ebx9Z97ZrWEDCWYBA8GbfgACeDbTbAsK
oblyslZS4TQz+O8hH5XRiRSjmPKaN0Y/LrPIc2ah+7lwwRVU+fl98MEP
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:27:01 2025 by rpki-client