Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
File:                     CW2z073uu30kcGbciyW5ZMxAmdc.mft (raw, json)
Hash identifier:          OcXU6pYUV/pbUaPhIneEQbhmGHMOLHGIhUICsuXW4eI=
Subject key identifier:   73:2B:0E:1F:78:B0:C1:52:41:E9:94:81:60:5C:60:8B:95:9F:47:EA
Authority key identifier: 09:6D:B3:D3:BD:EE:BB:7D:24:70:66:DC:8B:25:B9:64:CC:40:99:D7
Certificate issuer:       /CN=F3654AEEAF/serialNumber=096DB3D3BDEEBB7D247066DC8B25B964CC4099D7
Certificate serial:       01F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
Manifest number:          01ED
Signing time:             Wed 18 Jun 2025 11:26:30 +0000
Manifest this update:     Wed 18 Jun 2025 11:26:29 +0000
Manifest next update:     Fri 20 Jun 2025 11:26:29 +0000
Files and hashes:         1: CW2z073uu30kcGbciyW5ZMxAmdc.crl (hash: Cvgczju4vsqXiAnVB2Ync+H5jyI1awVHHxGfKueDO3A=)
                          2: 597BF62065CC11EFBF743291762E951A.roa (hash: l4HlkPwJ+awPbO7Z6yDcGLJG3/k4kKA73Iof+gPdMvU=)
                          3: 788D2BE0D8AC11EE9DB58DA2775412E6.roa (hash: 65eF1Tp/RlXNcWyLpB3YoIRfdS2c/kR79xeADgOJBXo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Jun 2025 11:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654AEEAF, serialNumber=096DB3D3BDEEBB7D247066DC8B25B964CC4099D7
        Validity
            Not Before: Jun 18 11:26:29 2025 GMT
            Not After : Jun 20 11:26:29 2025 GMT
        Subject: CN=6852a266-c76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:6e:27:c6:b4:30:08:38:dc:d2:d9:89:5b:
                    b5:f9:ba:94:24:28:a7:1d:78:60:ba:98:4a:95:f9:
                    83:0e:36:d0:d8:7b:fa:f9:6e:72:91:d5:ba:a0:45:
                    43:bc:11:82:f8:4b:42:7f:00:08:68:b1:85:48:95:
                    29:7f:91:32:30:a4:4b:66:e4:20:09:96:bd:c6:21:
                    35:67:b7:fc:c2:b3:03:5a:bd:b2:c5:c8:8f:e3:86:
                    2e:fc:21:ad:41:ad:db:7c:6e:33:78:e7:6a:36:5e:
                    ce:25:54:52:a0:59:1d:86:a4:fc:39:19:78:f9:2b:
                    2a:40:a3:ce:4b:94:b9:aa:5c:73:61:7b:9e:22:78:
                    6a:c8:fc:d7:07:77:0e:d2:12:01:c5:58:56:1b:db:
                    f0:99:68:59:39:fc:41:2e:ad:48:13:56:f8:de:00:
                    23:32:98:d2:19:6a:84:39:84:cd:03:e8:1a:87:c5:
                    ee:bd:40:cb:62:6d:45:56:ea:b4:ee:8f:f5:4d:32:
                    80:87:be:aa:2e:2d:71:f3:be:2c:2c:06:0d:01:6c:
                    46:4d:7c:2c:c5:f6:ce:a9:99:7c:db:d8:bc:24:79:
                    21:46:03:b5:46:9c:c8:18:1c:80:a7:3b:ba:fe:fc:
                    6a:93:21:97:0b:dd:5b:2a:0b:3b:a3:10:f6:44:66:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2B:0E:1F:78:B0:C1:52:41:E9:94:81:60:5C:60:8B:95:9F:47:EA
            X509v3 Authority Key Identifier:
                keyid:09:6D:B3:D3:BD:EE:BB:7D:24:70:66:DC:8B:25:B9:64:CC:40:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3f:66:d4:fc:bd:e9:3f:15:99:e5:62:5b:e8:d0:dd:b6:2b:
         60:5b:45:9b:92:ed:f4:62:ad:1f:8e:1b:3e:e8:77:10:af:91:
         2f:b6:93:32:3b:f0:dd:25:ee:76:9c:7a:78:23:16:93:ac:99:
         1b:79:e5:f8:cc:a1:c6:04:8a:0a:0e:9e:b2:42:9f:e7:93:e7:
         24:65:05:07:73:21:91:eb:8f:44:46:7e:bc:99:97:b4:3c:6c:
         a8:66:12:42:1a:f7:7c:ab:ae:2e:22:37:2c:65:52:be:a2:58:
         e5:20:87:36:f5:d6:fc:a3:5a:c4:9f:5c:96:ba:3f:57:55:25:
         d3:9b:79:2c:41:3c:ea:49:ee:b7:05:e6:27:f1:e5:3d:c0:bd:
         42:1d:92:3b:8f:a0:64:d6:46:46:28:26:1e:f5:14:39:2c:ed:
         10:f6:c2:a5:89:07:91:49:3b:ac:fa:50:17:9e:c6:37:02:a7:
         a0:7e:95:7d:7a:6a:30:c0:d6:9a:c7:cd:76:09:8c:15:f1:39:
         f2:02:5b:a5:a0:65:fe:dc:a4:83:ee:c4:5c:55:4e:23:59:26:
         53:cc:e0:d4:df:d4:20:f1:38:1b:45:a2:c5:1f:df:62:9e:ea:
         77:0f:09:37:d9:c7:b5:86:37:7b:85:4e:0e:20:d9:f3:62:52:
         c8:d0:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:10:11 2025 by rpki-client