Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
File:                     kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft (raw, json)
Hash identifier:          iogAKNGsSZrS8syaF8kdHSw5XerPzcHQmO0PF44cdjY=
Subject key identifier:   C8:AE:DB:AC:51:CC:3A:D9:66:0E:54:53:6D:08:82:1A:95:6C:20:50
Authority key identifier: 90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D
Certificate issuer:       /CN=F366F2B5AF/serialNumber=9093645F56187261E65B708274DBD52C00DF250D
Certificate serial:       0120
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
Manifest number:          011E
Signing time:             Mon 16 Jun 2025 04:56:37 +0000
Manifest this update:     Mon 16 Jun 2025 04:56:36 +0000
Manifest next update:     Wed 18 Jun 2025 04:56:36 +0000
Files and hashes:         1: kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl (hash: Eh5amR+wGmuGdnHnp1U7rkjklsyXzfi+xeM6Dk/03a8=)
                          2: 6217C884742E11EFA821E659762E951A.roa (hash: DqF+PQ0X8r1rRPiZ8RZ4fS3gA5sEXR5BPLyS3G+8cdE=)
                          3: 132CDF5C741511EFA9C5BABD762E951A.roa (hash: 02xv9vPnDrOOLcJupKl7YdL1bTFmoSlfefstM9Glp04=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F2B5AF, serialNumber=9093645F56187261E65B708274DBD52C00DF250D
        Validity
            Not Before: Jun 16 04:56:36 2025 GMT
            Not After : Jun 18 04:56:36 2025 GMT
        Subject: CN=684fa405-e56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:40:05:ba:5a:ca:68:0e:40:ed:a2:a2:76:
                    b1:18:2c:1f:e9:41:ec:70:67:23:0d:a6:2e:18:38:
                    7c:e9:b7:66:50:f2:ea:60:da:18:60:e8:3c:3b:36:
                    d0:b2:01:c1:9b:7f:19:05:ee:b0:c0:dc:31:14:1a:
                    c7:b7:0a:f3:ea:00:2c:cc:fa:f4:67:20:77:92:b0:
                    56:91:a4:02:e4:8d:0c:4c:15:02:97:f1:17:03:87:
                    e9:28:f8:38:e8:38:4d:ac:8d:75:b3:91:42:d4:54:
                    7a:df:e4:64:f7:42:8a:a4:38:f1:51:4b:4a:97:87:
                    f6:b3:89:5d:ef:72:ee:67:f9:fd:d6:c6:ec:d3:60:
                    49:4c:97:94:e4:ad:8a:40:32:16:4a:b7:f3:7c:0c:
                    36:c7:01:76:1d:66:d5:14:f2:0b:1d:01:af:85:c4:
                    b7:ea:a7:3d:27:01:a3:52:6e:5d:dd:f1:69:8e:14:
                    30:a0:43:63:8f:ca:0c:7d:15:5d:e4:09:81:82:1f:
                    05:55:de:b8:3e:b6:61:f3:4b:8a:39:ac:8d:2e:f8:
                    1f:c3:df:80:59:27:2f:11:a6:f1:05:ad:ac:49:ac:
                    9e:21:c2:4b:0a:ef:e2:61:3f:46:f2:e2:8c:a9:3e:
                    91:0f:5a:97:da:dd:44:d3:ec:4c:b1:fb:cd:da:ab:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AE:DB:AC:51:CC:3A:D9:66:0E:54:53:6D:08:82:1A:95:6C:20:50
            X509v3 Authority Key Identifier:
                keyid:90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7a:a6:a3:3c:e9:9f:2c:5f:a2:2c:4d:64:4a:bd:0b:89:e2:
         f1:ce:94:e5:34:fd:3c:61:d8:3d:37:59:1b:21:b8:7f:9e:e6:
         da:e0:94:bd:53:6c:a8:11:b9:4f:c9:cb:2d:5c:6b:2d:f1:91:
         4e:17:1a:9f:aa:87:27:29:74:18:77:46:29:bc:54:1c:8f:7f:
         8a:e7:35:b1:f3:57:4c:1a:f6:83:ef:df:ea:34:f9:76:a2:b2:
         02:94:29:86:ba:69:15:34:8b:75:e2:ae:0b:09:8c:bd:7f:2b:
         5d:02:b3:04:47:95:98:90:d6:3a:38:fa:8c:29:e1:20:65:a6:
         e0:53:0f:5b:73:ab:a4:08:60:2b:64:1f:09:eb:7d:24:39:65:
         7b:59:e7:c6:fe:72:78:c0:6a:02:61:f5:64:ea:ec:63:43:47:
         16:a9:1e:eb:77:ae:dd:4b:0a:ef:d5:f4:90:1b:4c:9d:e5:06:
         e3:26:3f:e9:bf:03:c7:f1:4c:b9:25:f6:df:95:f8:f2:bd:89:
         94:75:6f:01:ac:bb:59:b7:53:60:69:0f:8b:08:5b:f5:fa:a3:
         fd:86:17:e1:f4:cb:33:4c:96:04:08:56:67:e1:7b:63:c0:f6:
         9a:bd:9b:2e:63:6a:45:4d:b8:e8:35:e6:85:4e:55:e6:63:4d:
         95:94:81:21
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICASAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkYyQjVBRjExMC8GA1UEBRMoOTA5MzY0NUY1NjE4NzI2MUU2NUI3MDgyNzREQkQ1
MkMwMERGMjUwRDAeFw0yNTA2MTYwNDU2MzZaFw0yNTA2MTgwNDU2MzZaMBgxFjAU
BgNVBAMTDTY4NGZhNDA1LWU1NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEg0AFulrKaA5A7aKidrEYLB/pQexwZyMNpi4YOHzpt2ZQ8upg2hhg6Dw7
NtCyAcGbfxkF7rDA3DEUGse3CvPqACzM+vRnIHeSsFaRpALkjQxMFQKX8RcDh+ko
+DjoOE2sjXWzkULUVHrf5GT3QoqkOPFRS0qXh/aziV3vcu5n+f3WxuzTYElMl5Tk
rYpAMhZKt/N8DDbHAXYdZtUU8gsdAa+FxLfqpz0nAaNSbl3d8WmOFDCgQ2OPygx9
FV3kCYGCHwVV3rg+tmHzS4o5rI0u+B/D34BZJy8RpvEFraxJrJ4hwksK7+JhP0by
4oypPpEPWpfa3UTT7Eyx+83aq8Y3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUyK7b
rFHMOtlmDlRTbQiCGpVsIFAwHwYDVR0jBBgwFoAUkJNkX1YYcmHmW3CCdNvVLADf
JQ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGMkI1L0E5QzA2QThDNzQxMTExRUY4QjBBOURBODc2MkU5NTFBL2tKTmtY
MVlZY21IbVczQ0NkTnZWTEFEZkpRMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tKTmtYMVlZY21IbVczQ0NkTnZWTEFEZkpRMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkYyQjUvQTlDMDZBOEM3NDExMTFFRjhCMEE5REE4NzYy
RTk1MUEva0pOa1gxWVljbUhtVzNDQ2ROdlZMQURmSlEwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBReqajPOmfLF+iLE1kSr0LieLxzpTl
NP08Ydg9N1kbIbh/nuba4JS9U2yoEblPycstXGst8ZFOFxqfqocnKXQYd0YpvFQc
j3+K5zWx81dMGvaD79/qNPl2orIClCmGumkVNIt14q4LCYy9fytdArMER5WYkNY6
OPqMKeEgZabgUw9bc6ukCGArZB8J630kOWV7WefG/nJ4wGoCYfVk6uxjQ0cWqR7r
d67dSwrv1fSQG0yd5QbjJj/pvwPH8Uy5JfbflfjyvYmUdW8BrLtZt1NgaQ+LCFv1
+qP9hhfh9MszTJYECFZn4XtjwPaavZsuY2pFTbjoNeaFTlXmY02VlIEh
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:18:35 2025 by rpki-client