Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          l5sotdBaOkHP0o7FCELtbbnM8WapwQbGSwAN8SjBaTU=
Subject key identifier:   81:89:2C:2D:A2:E5:FD:EE:32:7B:D1:FD:35:F5:36:27:2F:E2:75:6B
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       088E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          088E
Signing time:             Sun 04 May 2025 01:35:31 +0000
Manifest this update:     Sun 04 May 2025 01:35:30 +0000
Manifest next update:     Tue 06 May 2025 01:35:30 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: o1YHjnRjzRnbz1NSVmvGooXMuAk8yF2DjOKM5VfrKbY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 May 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: May  4 01:35:30 2025 GMT
            Not After : May  6 01:35:30 2025 GMT
        Subject: CN=6816c463-9ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:77:75:54:d9:68:be:e6:45:51:b8:70:4c:
                    77:28:8f:32:e7:10:63:c3:02:17:25:f2:eb:1b:07:
                    cd:f4:45:db:3f:29:15:3d:43:90:09:41:4c:db:46:
                    2e:8b:10:fc:38:e0:82:ea:b8:24:d4:df:92:10:1c:
                    fe:b2:fd:ba:4c:ca:d1:3c:0d:5c:0c:6d:71:65:9d:
                    20:19:84:33:82:03:89:d1:e9:2c:4b:55:7a:26:15:
                    e1:a1:7b:6d:51:82:25:8c:35:59:49:55:5b:81:60:
                    d4:dd:fb:74:da:01:f0:d9:64:91:68:de:0d:fe:6a:
                    04:ae:ed:22:cf:d2:95:2d:4c:81:0b:0b:1b:38:ba:
                    1b:fb:5c:af:90:1f:cb:ed:1c:3f:18:f0:72:77:ac:
                    c9:e1:7f:3e:16:43:3a:53:73:0c:0e:78:95:ca:83:
                    df:5c:43:89:b2:9d:6f:90:e8:ce:ab:13:b5:17:2d:
                    ee:e4:ef:fe:41:03:47:6c:f3:7d:27:de:c0:ba:76:
                    a2:34:f0:12:55:b9:7a:23:60:ff:fa:21:4c:66:4f:
                    fe:42:73:79:03:3a:0e:b1:c2:25:70:48:c9:e8:13:
                    96:08:be:06:7c:ed:6f:a3:a6:e4:c0:4e:db:b6:06:
                    3d:32:a5:b7:54:78:99:23:ea:dd:3e:58:07:90:a4:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:89:2C:2D:A2:E5:FD:EE:32:7B:D1:FD:35:F5:36:27:2F:E2:75:6B
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:97:33:d3:de:9e:db:c9:59:7c:90:a4:07:14:da:2e:bb:dc:
         eb:45:fd:ad:c1:bf:06:08:91:e0:5d:2d:13:b1:a8:eb:7a:48:
         0a:95:cc:5c:fa:8c:c2:27:c1:65:e1:b4:0e:6c:80:70:f7:bc:
         44:31:7c:89:d1:d5:29:b0:0b:db:ba:8a:70:a6:95:74:ec:56:
         3f:10:ea:c0:05:56:17:1e:9b:13:6a:1f:16:ee:14:01:39:60:
         ad:c7:7b:35:db:de:48:b2:ce:42:cc:8c:7a:6d:b6:a5:5d:70:
         61:18:13:a7:83:47:f6:92:f7:29:ef:2c:52:70:f8:92:c7:dd:
         62:d9:39:55:55:9c:38:55:f4:73:5d:68:d9:f7:53:20:62:21:
         57:b5:1a:58:6b:37:ae:06:ec:ec:01:9c:d8:d5:ec:f5:b6:28:
         e4:38:e4:fd:ac:00:90:66:05:97:e4:08:b1:ce:f5:80:37:f2:
         c7:65:31:a5:3e:41:6b:ee:21:fb:53:56:af:2d:27:0b:da:2f:
         49:85:db:3f:d4:2b:07:60:dc:7b:82:f8:6b:0f:4c:e8:c4:53:
         f4:3f:b8:79:02:19:ad:40:35:59:1c:c9:8a:84:69:5b:91:81:
         3a:a4:69:3f:e9:e4:29:0e:43:f4:ac:97:de:0f:97:e3:92:18:
         4b:1d:94:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:27:07 2025 by rpki-client