Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
File:                     9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft (raw, json)
Hash identifier:          TY+P/E3RHSvROLfED2gjokXq/uKHF7ZRhiGhjs1fHY8=
Subject key identifier:   90:C8:A4:A2:5E:1E:8A:41:1D:88:EB:1B:5F:BE:6D:DA:B9:4B:BB:25
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Certificate issuer:       /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial:       0267
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
Manifest number:          025C
Signing time:             Sat 14 Jun 2025 04:12:41 +0000
Manifest this update:     Sat 14 Jun 2025 04:12:40 +0000
Manifest next update:     Mon 16 Jun 2025 04:12:40 +0000
Files and hashes:         1: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl (hash: UaWTn3rlFVzUWt954Y7s2BhYMo57/OB7TMbie/MiFiE=)
                          2: 771608343F6511EFB9F4EABA762E951A.roa (hash: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=)
                          3: 5A705AB83F6511EFB113C3BA762E951A.roa (hash: 46y6LOxfLG2hpzs8KqldDqb+T4CZAqoGN7kv9ge6l2Q=)
                          4: C37677449B4211EE97C01A0BD25BE465.roa (hash: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=)
                          5: 9C2FB4D49B4211EE82B8CF0AD25BE465.roa (hash: RKm1ONyaKM8MZ2trCs9RLFoAoaY0CDYQpfQjdSvu7io=)
                          6: D91B9FD2905311EF97DBC8B6762E951A.roa (hash: //pQLXl186UK+YngQ4Oqc4YBM5xFv+Ww/aM3Yp8J0R4=)
                          7: ACB50F14905311EF9F4DCCB4762E951A.roa (hash: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=)
                          8: 5AA6ED769BE611EE88684334D25BE465.roa (hash: J9soXt+A2SzJz6ium1VPFEErWV44KnKWZA3DTIrB3Z8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656BB8AF, serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
        Validity
            Not Before: Jun 14 04:12:40 2025 GMT
            Not After : Jun 16 04:12:40 2025 GMT
        Subject: CN=684cf6b9-14eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:5b:14:0c:eb:ee:cb:30:2d:a6:20:64:55:
                    9f:98:4e:c6:05:b8:82:46:44:04:0e:65:de:eb:85:
                    56:70:3e:28:84:f9:59:e9:21:58:03:dc:0b:0d:8e:
                    d8:f5:95:ba:ef:9d:23:08:6c:00:96:06:31:b8:90:
                    04:81:2a:99:9c:58:51:4f:63:85:a1:a4:88:00:0e:
                    d1:49:f9:20:f0:1d:89:b6:e9:e1:21:51:e9:21:9d:
                    7a:28:c8:73:7f:27:02:9c:00:1f:c6:c7:ac:27:0e:
                    89:d8:62:80:e3:16:ce:05:ca:1a:13:84:c8:3b:69:
                    10:3d:02:c4:f7:6f:4f:e5:3b:6d:59:3b:05:b5:ae:
                    58:34:65:7b:fe:6f:53:c4:bf:2f:dc:93:c3:51:22:
                    7a:5a:a8:2c:a9:8b:d3:64:1b:e1:6a:8a:b4:66:f6:
                    9a:55:08:60:26:dd:e2:09:9e:37:f4:1d:81:3a:54:
                    16:b5:c9:d7:fe:91:78:53:45:d5:87:9e:31:06:50:
                    0b:c7:22:2e:28:87:30:9a:e5:e5:bc:cd:05:60:9f:
                    31:b2:6c:e2:b4:a4:cb:bc:bd:9b:04:43:72:43:6f:
                    f5:f0:62:94:4a:05:a4:62:8c:be:33:e9:7a:e8:20:
                    93:cf:94:ae:05:b2:87:e7:09:ce:3c:58:44:69:30:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C8:A4:A2:5E:1E:8A:41:1D:88:EB:1B:5F:BE:6D:DA:B9:4B:BB:25
            X509v3 Authority Key Identifier:
                keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f4:9b:a1:6b:89:38:2c:0b:cd:9f:a2:12:95:2d:fc:ec:38:
         73:41:e6:d9:b5:a4:c1:7b:0a:d0:dd:5d:42:1a:3b:0a:e8:64:
         3f:4a:a3:90:e9:85:16:54:84:2c:99:b5:a0:60:3b:fc:a7:7a:
         1e:00:c6:7e:14:5f:d8:1c:7b:41:ff:ad:03:bb:3e:93:79:62:
         b7:ac:1b:cf:c6:b5:99:3e:f5:4f:30:e6:a3:a8:83:3a:68:13:
         08:d6:dc:f5:20:ed:7e:00:9d:fe:da:97:2c:9f:be:65:1c:79:
         f6:df:e6:02:5f:b6:12:be:dd:ff:5c:39:ee:0b:cf:c4:cc:fc:
         46:f5:98:5b:b7:42:02:91:3c:8a:d8:a9:9b:af:c7:69:21:4b:
         04:db:b4:e6:3c:8a:1f:6e:49:b2:d3:ad:5c:9c:e9:1e:04:18:
         f5:a0:5f:88:33:45:7d:b9:90:c4:ba:f6:f9:fe:46:0d:dc:ff:
         c2:85:93:b1:37:8a:8e:74:68:24:33:61:bd:69:1a:3a:4c:16:
         f8:3c:fa:b9:b4:6a:b1:f0:c9:13:25:61:02:94:a1:aa:99:ee:
         5b:65:f9:98:67:14:ea:f2:29:bd:90:05:2e:6d:d7:14:fe:c6:
         9d:61:df:00:d5:30:30:e3:19:b1:f9:22:56:fc:d9:84:c2:40:
         58:40:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:41:52 2025 by rpki-client