Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
File:                     mwftdzFoum4LC-Pl3LLPeB96yCo.mft (raw, json)
Hash identifier:          QV3CMdwU7Zm+jgr+Bdw661pk290lGnRJK3RqPNk6RYE=
Subject key identifier:   87:D8:3A:07:1E:8D:29:11:CE:5A:06:5F:0F:92:D4:E3:68:BE:E8:54
Authority key identifier: 9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
Certificate issuer:       /CN=F3668037RI/serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
Certificate serial:       0CA9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
Manifest number:          0CA7
Signing time:             Wed 30 Apr 2025 01:04:36 +0000
Manifest this update:     Wed 30 Apr 2025 01:04:35 +0000
Manifest next update:     Fri 02 May 2025 01:04:35 +0000
Files and hashes:         1: mwftdzFoum4LC-Pl3LLPeB96yCo.crl (hash: tflOIE4gwr/bqUfDBUWUaGbb2055r/frJoA82Eo4bc4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
                          rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 00:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3241 (0xca9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037RI, serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
        Validity
            Not Before: Apr 30 01:04:35 2025 GMT
            Not After : May  2 01:04:35 2025 GMT
        Subject: CN=68117724-c40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:93:c8:2c:1c:85:57:51:2a:28:fe:e9:34:
                    7f:3f:b3:52:c3:2e:9c:1e:61:16:d7:38:5a:b3:5e:
                    01:d5:cc:f8:df:d8:0d:08:4f:4e:fb:16:e5:57:29:
                    94:53:9b:d5:56:3b:22:fe:1d:05:9c:fc:f8:f2:2e:
                    2d:6e:4b:4f:2c:f4:3e:87:bb:78:ad:f6:3b:3e:e6:
                    df:21:0b:d4:c9:19:cb:97:b6:9f:96:13:b0:7f:69:
                    f8:a7:e4:4d:8b:9c:56:1d:76:e7:a7:1d:6d:10:73:
                    df:47:6e:61:3e:1c:ca:00:5d:28:b5:0b:81:20:79:
                    b7:f9:c1:97:3f:26:f7:03:0b:7b:f1:a1:80:8f:b3:
                    73:31:ce:fe:ad:8a:7e:6f:bc:62:21:c9:03:10:bc:
                    4b:d6:37:a4:20:22:65:c3:02:df:3b:88:2d:6a:fa:
                    88:f5:b3:59:ff:97:ea:32:79:66:dd:c3:03:2a:3e:
                    40:0f:23:8e:0b:67:58:a7:e9:ab:be:34:81:47:86:
                    37:6e:0d:af:25:96:53:a1:c9:5b:2c:92:74:2b:9d:
                    aa:d4:22:cc:42:ae:37:da:30:d1:60:85:80:7e:17:
                    a4:af:17:e8:4f:22:c0:6a:57:46:38:94:62:f9:d7:
                    5e:f5:30:86:8a:1b:f0:87:19:21:b4:ca:80:e2:dd:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D8:3A:07:1E:8D:29:11:CE:5A:06:5F:0F:92:D4:E3:68:BE:E8:54
            X509v3 Authority Key Identifier:
                keyid:9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e9:9f:b1:0c:32:0c:ea:fe:47:18:3e:b5:cd:68:61:a4:91:
         b1:ad:d9:5e:41:f8:92:dd:5c:f0:68:e8:87:f6:16:78:b3:54:
         7f:b4:25:fd:76:c2:94:51:22:46:7b:84:e4:1c:93:e7:77:24:
         3c:ad:cb:11:82:23:8e:26:c8:ad:d3:42:c0:1c:93:74:6d:ae:
         12:5b:23:23:0d:81:a2:84:69:95:d9:d4:c1:41:cd:fc:3c:2b:
         12:59:36:34:e5:e9:f9:44:4e:31:8b:8b:52:b0:24:29:f0:6a:
         a7:b8:55:f1:f5:d0:54:8f:e7:b0:ca:36:4e:f6:2c:86:b0:6e:
         25:f0:70:2c:32:17:3d:2e:f6:cb:a4:fb:b2:29:5f:81:72:da:
         d3:b0:b0:cb:48:1e:60:a6:2e:a6:7a:eb:5f:33:75:85:6d:ee:
         1e:18:66:97:95:94:ce:6e:5b:83:f2:1f:5b:bd:ca:ed:f5:9a:
         b3:85:93:26:28:e6:9d:40:c8:96:b8:d3:48:9b:54:9c:ed:ed:
         0e:e4:9b:b4:20:06:20:c5:fc:bd:a2:fc:bf:e9:98:fc:9a:f4:
         61:2f:1f:eb:c7:e9:23:14:d7:cf:d0:38:12:5d:c0:b6:d4:80:
         0e:b6:19:48:2c:7e:41:85:73:58:c6:fc:28:ce:f1:12:58:22:
         32:a6:3a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:28:10 2025 by rpki-client