Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File:                     UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier:          vuHpg7RCjY8vQG7S2yrpBUAa5/pobCaOpEAqUlD6isc=
Subject key identifier:   44:C5:F8:72:9F:6A:2D:CF:97:26:12:7C:50:44:A2:D3:D0:93:B1:C8
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer:       /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial:       034B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number:          034B
Signing time:             Tue 17 Jun 2025 03:36:16 +0000
Manifest this update:     Tue 17 Jun 2025 03:36:15 +0000
Manifest next update:     Thu 19 Jun 2025 03:36:15 +0000
Files and hashes:         1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: HHwtZJmelNcm7SwbmXR6hFgYaA7BFCh8w0jGU3DS2Ig=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 19 Jun 2025 00:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
        Validity
            Not Before: Jun 17 03:36:15 2025 GMT
            Not After : Jun 19 03:36:15 2025 GMT
        Subject: CN=6850e2b0-71b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:b2:a5:28:1f:b0:22:24:a9:61:15:06:47:
                    12:a3:c0:1f:6c:6b:ed:34:34:c7:39:b8:7a:e4:9b:
                    0d:11:5b:36:fc:17:f0:29:fa:95:ee:08:4a:af:31:
                    16:f7:cb:7d:91:2a:4a:f2:21:62:fd:79:82:63:15:
                    47:58:68:06:b3:a8:e7:63:b0:37:74:ed:20:45:a1:
                    07:cb:40:f3:5c:03:e9:1e:65:41:3f:71:28:7d:69:
                    e6:2e:34:77:7a:bb:21:30:ea:fe:ba:2b:17:3d:ee:
                    98:e5:07:a8:55:a4:01:61:e4:21:64:c9:36:66:ca:
                    17:32:30:e9:40:55:05:00:cb:5f:02:c8:66:b2:f9:
                    9d:d2:22:8c:dd:82:8b:ff:ad:79:07:5a:bf:71:8a:
                    91:be:91:7f:aa:35:38:2e:aa:76:72:91:47:d2:f5:
                    46:08:df:2b:8a:33:8d:83:5c:51:cb:15:a3:8d:63:
                    08:62:8d:6d:c0:ea:f7:e9:f6:36:b3:13:45:fd:13:
                    06:1e:26:dd:50:2e:f7:f9:5f:7f:1a:79:b3:bb:0a:
                    1c:e4:e8:fb:29:c1:32:7f:12:e8:d7:09:8f:59:73:
                    90:81:a3:1d:2f:2d:13:c1:16:71:54:83:65:e6:f8:
                    72:57:ed:62:b0:bb:80:8b:34:15:f2:a8:b1:d0:c2:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C5:F8:72:9F:6A:2D:CF:97:26:12:7C:50:44:A2:D3:D0:93:B1:C8
            X509v3 Authority Key Identifier:
                keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:76:e6:b5:7c:c1:99:88:62:3f:2b:64:8f:9a:6b:15:e4:fd:
         88:e9:7d:6b:1a:db:a4:7f:52:90:99:c5:b1:e9:50:16:57:2a:
         43:f6:75:23:2b:9e:6a:21:1b:ff:4b:4c:30:c2:c4:03:0c:70:
         1f:ad:b3:f6:42:07:48:27:60:2b:fa:65:5e:2f:d5:b1:72:5e:
         30:23:eb:42:14:40:5f:78:db:1b:1a:6d:2a:a4:87:38:f0:cd:
         02:b8:f5:dc:37:42:8e:99:0c:5f:09:e3:6d:9a:3c:b6:94:ac:
         6a:aa:f0:9d:68:46:62:5c:07:82:75:35:1d:ac:9f:28:12:77:
         93:e2:21:13:7b:b2:71:11:ab:32:a5:c0:c2:66:a1:60:a5:34:
         a5:24:b8:a0:61:18:b7:fd:1a:30:a1:a3:e5:82:22:f5:c6:6c:
         b4:47:43:12:79:97:af:8c:af:3d:24:96:8c:e7:93:53:ae:cb:
         9a:03:7f:38:eb:7c:b4:6a:f2:f7:6e:d1:35:6d:ea:c2:eb:1c:
         55:28:a9:83:96:20:1f:09:55:75:da:f5:2d:1c:5d:0f:2d:dc:
         bc:59:2d:d8:04:c8:1a:20:80:81:64:f3:af:56:0a:90:18:c4:
         02:b5:83:e5:b4:70:fa:9a:88:76:da:69:28:a0:79:03:a2:df:
         b3:45:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:05:17 2025 by rpki-client