Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File:                     PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier:          NM4gItAYug2pX8Ac3492yfYjzxCS6J0OGNcn3qyTEYg=
Subject key identifier:   3F:22:E3:73:58:85:9A:0D:B4:77:3E:24:1B:F9:38:05:06:47:76:45
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer:       /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial:       02F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number:          02F1
Signing time:             Sun 15 Jun 2025 03:48:24 +0000
Manifest this update:     Sun 15 Jun 2025 03:48:23 +0000
Manifest next update:     Tue 17 Jun 2025 03:48:23 +0000
Files and hashes:         1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: D5pCY+xv5rW9OQ7XVixYvcknTGkp1Ja9xw+yq7iXJos=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 03:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAF, serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
        Validity
            Not Before: Jun 15 03:48:23 2025 GMT
            Not After : Jun 17 03:48:23 2025 GMT
        Subject: CN=684e4287-5168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:27:5f:59:4f:c1:55:3e:fb:a4:3e:74:87:
                    bd:3e:96:62:04:5f:c9:35:f9:0f:e9:e1:b5:a2:e1:
                    fc:0a:4c:4b:da:7b:b4:d8:88:5f:e3:01:d5:f7:18:
                    20:5a:99:d1:be:91:33:b4:9c:56:88:38:b6:37:07:
                    be:e5:e0:ad:cb:cb:f0:77:14:dd:92:1d:08:75:04:
                    f8:30:19:2a:aa:ee:af:2e:33:89:df:ab:9f:81:d9:
                    e5:52:d4:42:58:8a:19:5b:11:c8:15:17:db:b9:f2:
                    1b:f1:14:a0:8d:84:2a:3e:17:b8:62:18:34:cd:f8:
                    48:00:27:a8:bb:18:0e:28:89:87:fc:de:a5:ba:e3:
                    94:71:a6:ee:52:16:db:5d:62:77:29:31:46:f7:58:
                    e1:ae:41:18:8d:e0:2d:a0:e0:44:20:dd:ef:1c:3a:
                    b4:cf:95:6a:5b:4e:74:74:a4:8b:3f:b3:54:73:e6:
                    55:c8:23:dd:7c:fa:0a:49:c2:2c:97:aa:0f:4a:47:
                    2d:59:4d:19:27:26:90:b9:39:be:d8:52:1c:1f:6e:
                    76:fb:bf:40:68:f3:a9:a3:64:49:af:6d:b3:d5:e1:
                    b3:40:24:7b:eb:4d:89:bd:5a:1b:62:69:da:c8:6b:
                    29:be:1c:81:db:6b:02:b7:aa:db:29:8c:dd:0d:f5:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:22:E3:73:58:85:9A:0D:B4:77:3E:24:1B:F9:38:05:06:47:76:45
            X509v3 Authority Key Identifier:
                keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:26:8f:a6:67:b8:9e:e5:eb:db:fa:ed:ee:01:02:71:1f:2a:
         53:e7:e3:41:d1:7c:de:62:ae:a7:0e:a6:72:93:37:fc:00:d2:
         7e:79:d8:e0:e1:db:e0:5e:51:2e:98:2c:47:33:8c:f7:b1:8e:
         0d:0d:3f:af:16:b8:02:5e:f3:d9:63:b5:12:b9:e7:d8:9a:82:
         87:ee:27:e8:13:9c:93:86:60:61:93:5e:d2:ee:09:5d:00:be:
         da:08:dc:c7:4c:ec:88:5a:1c:1b:8a:97:b7:ee:c0:92:5f:bc:
         79:90:4e:65:06:21:63:f9:a7:c6:32:ce:6e:b5:cd:d7:a3:29:
         ed:3b:46:b3:b6:79:d9:e9:b6:08:2e:7a:b6:17:2d:8b:de:ea:
         a3:87:40:1e:dd:da:73:a3:e9:6c:16:86:9d:8b:a9:74:3e:bf:
         09:70:4e:c0:f0:59:cb:a9:11:1e:be:97:4d:8e:94:3c:c7:46:
         7c:22:6d:53:31:26:a6:6d:17:e7:b9:4f:ad:04:ae:5a:d1:b1:
         54:d9:1d:36:e7:f8:51:d3:f9:c3:7d:73:72:e8:49:9a:b0:af:
         9f:da:a2:49:e4:af:38:7b:e1:62:7d:d6:b2:b8:a4:c7:b4:22:
         71:73:51:5a:f9:12:57:c1:0e:10:59:15:4a:20:26:84:ee:b3:
         0b:b9:e3:c7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjZDRkZBRjExMC8GA1UEBRMoM0UwOUQ1QzNBQzI3QkZGOTVEOENFNUFGMDA0MTFB
MDE3NjgwNjU0QjAeFw0yNTA2MTUwMzQ4MjNaFw0yNTA2MTcwMzQ4MjNaMBgxFjAU
BgNVBAMTDTY4NGU0Mjg3LTUxNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCoSSdfWU/BVT77pD50h70+lmIEX8k1+Q/p4bWi4fwKTEvae7TYiF/jAdX3
GCBamdG+kTO0nFaIOLY3B77l4K3Ly/B3FN2SHQh1BPgwGSqq7q8uM4nfq5+B2eVS
1EJYihlbEcgVF9u58hvxFKCNhCo+F7hiGDTN+EgAJ6i7GA4oiYf83qW645Rxpu5S
FttdYncpMUb3WOGuQRiN4C2g4EQg3e8cOrTPlWpbTnR0pIs/s1Rz5lXII918+gpJ
wiyXqg9KRy1ZTRknJpC5Ob7YUhwfbnb7v0Bo86mjZEmvbbPV4bNAJHvrTYm9Whti
adrIaym+HIHbawK3qtspjN0N9amvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPyLj
c1iFmg20dz4kG/k4BQZHdkUwHwYDVR0jBBgwFoAUPgnVw6wnv/ldjOWvAEEaAXaA
ZUswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2Q0ZGLzAxNzZCMTAwMEFBMDExRUU5MTBGOUUzQTRBRDlFNkZDL1BnblZ3
Nndudl9sZGpPV3ZBRUVhQVhhQVpVcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BnblZ3Nndudl9sZGpPV3ZBRUVhQVhhQVpVcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjZDRkYvMDE3NkIxMDAwQUEwMTFFRTkxMEY5RTNBNEFE
OUU2RkMvUGduVnc2d252X2xkak9XdkFFRWFBWGFBWlVzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNJo+mZ7ie5evb+u3uAQJxHypT5+NB
0XzeYq6nDqZykzf8ANJ+edjg4dvgXlEumCxHM4z3sY4NDT+vFrgCXvPZY7USuefY
moKH7ifoE5yThmBhk17S7gldAL7aCNzHTOyIWhwbipe37sCSX7x5kE5lBiFj+afG
Ms5utc3XoyntO0aztnnZ6bYILnq2Fy2L3uqjh0Ae3dpzo+lsFoadi6l0Pr8JcE7A
8FnLqREevpdNjpQ8x0Z8Im1TMSambRfnuU+tBK5a0bFU2R025/hR0/nDfXNy6Ema
sK+f2qJJ5K84e+FifdayuKTHtCJxc1Fa+RJXwQ4QWRVKICaE7rMLuePH
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:14:11 2025 by rpki-client