Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
File:                     3XSZqMjBKrZ-FetJKAimku1LWfQ.mft (raw, json)
Hash identifier:          oL1N3TJJDbEKsCCiM4RWgfAZFmdZts64zh9gjGbUm7U=
Subject key identifier:   39:96:06:59:A8:EF:0D:DA:08:0B:44:47:02:08:99:76:83:CB:1F:83
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Certificate issuer:       /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial:       0607
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
Manifest number:          0601
Signing time:             Wed 18 Jun 2025 09:18:01 +0000
Manifest this update:     Wed 18 Jun 2025 09:18:00 +0000
Manifest next update:     Fri 20 Jun 2025 09:18:00 +0000
Files and hashes:         1: 3XSZqMjBKrZ-FetJKAimku1LWfQ.crl (hash: znJSM7le8rNwMYT2B58x1EkmP6QsF/gH6uNUKiUl+w4=)
                          2: 1D79094AD6B211EFB2D3FF42762E951A.roa (hash: DubCazr+DZeeKepCVu6sjSupYBoZCqIo6H/IBZvf+PU=)
                          3: FB1FEEF4D6B111EF8099CF40762E951A.roa (hash: +7phxm5TzkZRyeFGhR37ALd4AEcaf9TKaQBnWBb/gF0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Jun 2025 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1543 (0x607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C79EAF, serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
        Validity
            Not Before: Jun 18 09:18:00 2025 GMT
            Not After : Jun 20 09:18:00 2025 GMT
        Subject: CN=68528449-5fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ad:9a:6d:87:47:aa:10:a7:24:f7:89:dd:91:
                    fd:42:2c:1c:31:e5:5d:ca:17:8e:4b:fe:8a:57:25:
                    8b:43:2a:69:49:18:6f:d9:c0:c5:ef:23:91:c1:49:
                    70:0e:94:0e:d1:28:4a:9c:19:ca:bc:e4:5e:32:00:
                    dd:58:91:14:fb:d2:0a:aa:1d:d2:a8:5e:19:d7:af:
                    bb:1d:8c:54:99:e1:70:15:a7:cf:a1:2c:16:56:7c:
                    b9:d0:e4:25:29:c4:6e:a7:b9:78:22:19:cf:2a:a3:
                    eb:61:fe:e3:3d:55:e7:d4:12:af:be:4a:8c:1f:b6:
                    53:78:0e:cb:8c:77:16:e0:63:6a:b2:ea:02:04:0a:
                    c2:48:67:da:0b:9c:42:3c:a9:59:a2:30:77:f3:3a:
                    23:68:c1:aa:78:36:60:01:d5:ad:99:fc:93:f9:89:
                    1d:c1:ef:03:12:cd:b1:74:e5:8d:45:47:e9:94:6e:
                    bf:9b:97:0f:26:67:c4:b5:15:8b:45:8b:74:a7:ee:
                    51:50:b9:88:57:81:3d:00:08:5f:1c:63:78:34:87:
                    27:55:4a:42:9f:16:40:b9:2f:71:dd:49:3a:0c:13:
                    53:47:67:ff:03:ef:a0:c1:29:ac:37:4a:26:87:99:
                    97:de:94:97:5b:7d:1a:7f:c6:c5:02:6e:16:d3:4f:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:96:06:59:A8:EF:0D:DA:08:0B:44:47:02:08:99:76:83:CB:1F:83
            X509v3 Authority Key Identifier:
                keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:0d:2f:13:98:d5:19:e8:67:6f:2f:9e:69:d6:f8:24:23:43:
         6b:04:8f:5a:ed:ee:0c:d9:96:86:90:ba:6e:9f:2a:91:52:ce:
         ba:b7:23:93:52:c0:83:9b:ca:6a:09:70:ac:b8:e6:6d:08:d3:
         28:0f:d1:f2:9d:ec:a6:3d:0e:01:14:0c:95:ca:4c:29:2c:2d:
         2f:fa:65:8e:60:92:30:1c:17:27:64:4c:1a:4a:77:e9:6c:ea:
         af:e1:f2:2b:68:b2:17:9c:d4:5e:2f:a5:15:86:84:b4:ef:99:
         55:c7:df:29:a1:57:93:12:eb:a8:9c:31:a9:72:6c:36:b3:ab:
         04:13:0c:7c:7f:82:b2:2e:a5:20:10:5c:e1:2a:2a:05:76:6c:
         ef:ee:bb:35:d6:99:1b:58:55:6f:38:27:97:be:65:0b:f0:cc:
         bb:aa:49:70:1e:da:00:fa:5d:86:63:79:66:2c:3e:18:20:91:
         66:9c:89:fa:c3:9e:b6:87:6b:43:07:fb:24:51:63:e7:b3:6c:
         61:13:1f:e6:66:dd:57:77:a5:32:ea:52:73:20:f6:01:04:7d:
         75:dd:6a:a0:67:92:99:66:8b:02:b8:f5:f4:b8:84:df:f4:21:
         2f:1f:4b:70:2b:26:bc:86:12:59:25:ae:bf:50:b6:fa:a1:99:
         8e:13:23:95
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUM3OUVBRjExMC8GA1UEBRMoREQ3NDk5QThDOEMxMkFCNjdFMTVFQjQ5MjgwOEE2
OTJFRDRCNTlGNDAeFw0yNTA2MTgwOTE4MDBaFw0yNTA2MjAwOTE4MDBaMBgxFjAU
BgNVBAMTDTY4NTI4NDQ5LTVmZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNrZpth0eqEKck94ndkf1CLBwx5V3KF45L/opXJYtDKmlJGG/ZwMXvI5HB
SXAOlA7RKEqcGcq85F4yAN1YkRT70gqqHdKoXhnXr7sdjFSZ4XAVp8+hLBZWfLnQ
5CUpxG6nuXgiGc8qo+th/uM9VefUEq++SowftlN4DsuMdxbgY2qy6gIECsJIZ9oL
nEI8qVmiMHfzOiNowap4NmAB1a2Z/JP5iR3B7wMSzbF05Y1FR+mUbr+blw8mZ8S1
FYtFi3Sn7lFQuYhXgT0ACF8cY3g0hydVSkKfFkC5L3HdSToME1NHZ/8D76DBKaw3
SiaHmZfelJdbfRp/xsUCbhbTTxPRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOZYG
WajvDdoIC0RHAgiZdoPLH4MwHwYDVR0jBBgwFoAU3XSZqMjBKrZ+FetJKAimku1L
WfQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVDNzlFLzFGQzM0QkU2QkVEQTExRUI4RjVDRTI0M0Y4QUVBMjI4LzNYU1px
TWpCS3JaLUZldEpLQWlta3UxTFdmUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNYU1pxTWpCS3JaLUZldEpLQWlta3UxTFdmUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUM3OUUvMUZDMzRCRTZCRURBMTFFQjhGNUNFMjQzRjhB
RUEyMjgvM1hTWnFNakJLclotRmV0SktBaW1rdTFMV2ZRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7DS8TmNUZ6GdvL55p1vgkI0NrBI9a
7e4M2ZaGkLpunyqRUs66tyOTUsCDm8pqCXCsuOZtCNMoD9HyneymPQ4BFAyVykwp
LC0v+mWOYJIwHBcnZEwaSnfpbOqv4fIraLIXnNReL6UVhoS075lVx98poVeTEuuo
nDGpcmw2s6sEEwx8f4KyLqUgEFzhKioFdmzv7rs11pkbWFVvOCeXvmUL8My7qklw
HtoA+l2GY3lmLD4YIJFmnIn6w562h2tDB/skUWPns2xhEx/mZt1Xd6Uy6lJzIPYB
BH113WqgZ5KZZosCuPX0uITf9CEvH0twKya8hhJZJa6/ULb6oZmOEyOV
-----END CERTIFICATE-----
Generated at Wed Jun 18 14:37:46 2025 by rpki-client