Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
File:                     LnFCh3b4tjGvSw1suVUM0cqUVlU.mft (raw, json)
Hash identifier:          oTuNXhPOjtv8ocn6CFKSFiwqiiSutEHtdKYiP03nXRI=
Subject key identifier:   74:E2:10:58:6F:B8:24:EA:E6:B8:08:30:8F:3B:1B:5E:F1:87:4A:A7
Authority key identifier: 2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55
Certificate issuer:       /CN=F365CA10AF/serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
Certificate serial:       076F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
Manifest number:          076F
Signing time:             Thu 01 May 2025 01:50:50 +0000
Manifest this update:     Thu 01 May 2025 01:50:49 +0000
Manifest next update:     Sat 03 May 2025 01:50:49 +0000
Files and hashes:         1: LnFCh3b4tjGvSw1suVUM0cqUVlU.crl (hash: nT8SjIv3NMKLIgheDHpPtS3OMBRfqgiMlUsct4NeZzw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903 (0x76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365CA10AF, serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
        Validity
            Not Before: May  1 01:50:49 2025 GMT
            Not After : May  3 01:50:49 2025 GMT
        Subject: CN=6812d37a-24bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:f6:c9:c4:38:48:7a:1d:b9:ef:6d:fb:48:
                    3d:db:82:c0:8f:35:9b:6b:2d:1d:2e:99:ea:1e:c0:
                    e6:5b:30:40:db:df:e4:4a:d4:fb:10:b4:3f:43:dd:
                    cd:55:e3:e6:8c:cc:22:5c:88:80:a3:0c:75:46:e7:
                    f2:da:df:4e:d2:ba:ac:6c:e0:f3:e8:f5:de:2f:f1:
                    4a:33:b8:b7:69:e4:7c:97:a4:d8:a4:e1:cf:7f:fe:
                    d4:2b:e9:3e:41:4d:7a:14:97:38:9b:34:8d:9f:10:
                    0a:e8:23:f7:b4:5d:e2:e6:35:2d:a2:d2:d1:e0:cb:
                    e7:18:e0:32:27:a1:00:b8:db:a3:e4:08:33:0f:4f:
                    70:46:10:d2:a3:5d:01:84:83:63:c7:16:fd:30:a4:
                    cb:8a:84:37:39:83:a0:f9:84:08:94:da:1a:99:30:
                    10:38:e1:d5:97:47:db:0c:23:66:79:a4:ef:a0:5e:
                    ba:b6:90:7e:b4:11:be:77:2e:ef:c9:3b:39:72:7a:
                    09:ad:55:45:8a:34:13:58:ed:6c:ab:49:5b:ad:9f:
                    ce:30:c5:85:db:cd:7e:39:22:a8:a4:55:eb:da:29:
                    47:bb:7a:ff:78:1e:95:7c:27:d9:90:33:a0:25:ff:
                    45:ca:b0:12:3a:c1:b5:fd:76:b2:c6:2e:de:09:40:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E2:10:58:6F:B8:24:EA:E6:B8:08:30:8F:3B:1B:5E:F1:87:4A:A7
            X509v3 Authority Key Identifier:
                keyid:2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:03:20:a6:d0:4b:b1:b8:45:db:24:40:5b:e7:4d:7a:2a:74:
         6b:b8:d1:89:de:92:a3:47:a5:9e:19:2e:d0:11:9c:92:f2:17:
         b8:9d:86:58:51:13:fc:68:f8:9c:2d:7f:4e:c9:61:ee:5f:70:
         a1:b5:dc:d2:ff:d1:c7:2c:0f:f1:e6:2e:10:7a:df:7d:03:25:
         99:23:9e:71:93:c7:a9:17:a9:c2:e1:8e:18:50:72:7a:c9:a5:
         6b:50:af:f0:07:31:42:11:08:ac:25:47:95:2b:47:3a:29:40:
         ff:20:c1:58:88:7e:a2:90:dd:e7:65:cb:88:ce:a8:67:5c:8d:
         55:30:a0:54:ca:af:f5:9b:9b:d0:04:df:2f:1a:b2:8a:87:71:
         4f:27:67:c0:da:b1:78:3e:fd:ac:d7:08:26:19:97:42:58:49:
         af:9c:4b:2c:62:58:3d:99:65:a6:38:0e:76:1b:fb:6f:7d:39:
         31:2b:08:66:23:08:62:3c:7d:ad:3b:8f:ea:9e:d0:47:df:77:
         9f:30:ba:51:27:b7:a0:04:14:ed:40:44:33:bc:56:e2:d9:a1:
         6e:7f:ba:e4:5e:1c:eb:59:e2:4f:eb:de:c6:67:e7:a6:09:25:
         48:ad:e6:84:99:2e:9c:c2:b1:87:7b:83:2f:51:db:13:14:c1:
         66:08:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:10:16 2025 by rpki-client