Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          IniDg49/0x/L3ffpMOHHPma5m/Faho5hL1Vghe2hf8c=
Subject key identifier:   48:EC:5E:B7:C9:F3:D1:08:95:CA:72:99:F9:D0:16:90:AB:04:03:57
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       020C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          0207
Signing time:             Mon 16 Jun 2025 04:26:31 +0000
Manifest this update:     Mon 16 Jun 2025 04:26:30 +0000
Manifest next update:     Wed 18 Jun 2025 04:26:30 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: Ls+OC7pxaa+bh43hEyoZ/ZXQ0R6gVSU0IXPNL0s+nsI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 04:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Jun 16 04:26:30 2025 GMT
            Not After : Jun 18 04:26:30 2025 GMT
        Subject: CN=684f9cf7-ec9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:79:28:29:ac:80:f7:05:ad:fb:02:27:9b:
                    c3:18:d6:1a:e5:ea:9f:46:06:0c:b2:4a:32:62:10:
                    31:62:af:bb:b2:e0:cc:bb:9d:e0:b1:c7:f8:34:71:
                    42:bc:80:62:71:6d:60:55:d7:77:58:d7:22:f8:3a:
                    2d:97:cb:cb:f9:67:ab:e8:3e:a1:3f:4d:4e:a1:81:
                    8a:e1:03:de:a1:19:e8:2c:06:a8:a8:ba:99:a7:fe:
                    96:f6:0e:5f:93:a9:f0:94:b1:05:71:1b:60:ce:50:
                    d2:d8:ca:6c:84:5b:04:ca:f9:df:cf:f8:81:fa:b1:
                    f7:9b:28:c2:32:10:c4:22:02:22:9d:00:f1:b2:28:
                    10:40:e9:14:f8:d7:e8:60:20:02:17:8c:39:ab:5b:
                    e4:a8:8c:ea:4b:ba:e5:64:93:bb:70:50:61:f3:56:
                    6d:16:75:f0:07:ad:53:37:c8:10:13:c1:dc:70:e1:
                    27:dd:c2:8d:57:d0:78:65:46:60:68:d0:c7:b0:e8:
                    a6:ea:a5:5f:e2:36:ab:ae:d3:bd:6f:31:df:d5:59:
                    ac:1a:11:4f:4e:ed:e4:d9:fd:97:23:28:31:12:68:
                    a2:ad:9d:06:04:4d:70:00:5e:3d:b9:e5:5a:df:ed:
                    9e:91:75:b2:1f:87:fb:90:62:c7:bd:10:41:2e:dd:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EC:5E:B7:C9:F3:D1:08:95:CA:72:99:F9:D0:16:90:AB:04:03:57
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:11:6e:9f:b5:f7:44:1f:02:c2:aa:c0:dd:2c:ec:ec:5c:07:
         1a:74:eb:9a:f1:da:e1:f1:0c:38:4f:47:c8:3d:83:ff:b0:be:
         3f:7b:d2:6c:5d:dd:4a:5f:09:0a:ad:ea:f4:bc:95:c0:4c:43:
         58:92:5b:f3:35:1b:08:00:88:5b:ea:10:94:74:0f:87:fa:d9:
         78:16:91:ab:b9:73:8e:ee:c7:be:97:b7:d9:4f:69:53:12:35:
         ea:20:81:ef:29:35:11:97:f4:00:3d:4c:64:3f:9b:2b:bb:6c:
         2e:b4:0a:89:08:1e:56:73:85:31:77:08:71:5b:01:6d:0a:fa:
         23:01:c5:c9:f7:80:ba:1a:2a:ba:51:d6:d3:3d:a2:0e:d8:d8:
         71:79:c0:21:8b:4b:df:e5:91:4a:f4:a4:30:46:3a:75:be:b7:
         f6:ab:56:04:c0:d7:dc:8d:05:c6:1c:94:a8:df:fb:cd:4e:fa:
         78:4b:3c:22:1b:9f:cb:ad:2e:e9:20:2c:6c:27:21:e2:d9:83:
         03:dd:83:a1:36:f7:70:4a:99:fc:01:34:e2:d5:fe:05:5a:82:
         74:ed:06:d1:60:b1:8c:e5:b3:a4:c0:c2:e4:8d:c2:33:9e:ac:
         ad:39:3e:e8:d6:55:63:2a:0b:49:70:ed:ed:a3:39:4c:05:02:
         b9:f5:89:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:41:29 2025 by rpki-client