Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          10zsakvShnvxxa6IY9kW04qpRH0BQOReV0MP3pgS44s=
Subject key identifier:   6F:B3:14:92:B3:15:DA:4C:0B:E9:C4:B8:8C:80:00:AA:CB:32:50:2B
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       01DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          01D9
Signing time:             Mon 16 Jun 2025 04:28:45 +0000
Manifest this update:     Mon 16 Jun 2025 04:28:44 +0000
Manifest next update:     Wed 18 Jun 2025 04:28:44 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: JsUxDtDjJ3652mkt0glwZiQcPrUCA5Vjm1joVmEAcns=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Validity
            Not Before: Jun 16 04:28:44 2025 GMT
            Not After : Jun 18 04:28:44 2025 GMT
        Subject: CN=684f9d7c-f91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:65:8d:e2:a7:85:fb:a2:4f:d5:81:1a:6c:
                    55:47:c4:d6:67:1c:4c:5c:32:68:62:64:1e:21:e6:
                    0c:3a:03:a3:eb:a0:46:9e:02:7d:cc:dd:b1:78:ae:
                    7c:91:9a:01:a7:ee:0c:67:97:e4:a8:d0:46:cc:ba:
                    32:8a:84:50:dd:20:92:6d:c6:35:bd:37:62:d4:b5:
                    25:a6:d2:26:53:d1:fb:4a:ff:26:04:8d:c8:bf:60:
                    5b:cb:3b:a9:2e:94:a3:5d:7f:b8:44:c0:02:14:d7:
                    a1:7b:13:0d:56:04:3e:ed:f8:11:84:59:a9:58:8c:
                    75:aa:bd:80:be:a8:9b:e5:c0:f8:39:03:4d:8b:30:
                    a1:61:60:ea:fe:6a:2d:63:ef:18:41:e1:55:1f:42:
                    c9:48:35:62:dd:f9:ca:14:1d:07:34:b1:5a:17:66:
                    49:2e:f1:e6:48:1c:51:c2:68:7d:9c:17:92:6c:33:
                    89:0d:9f:07:d4:28:e0:67:7d:97:dc:3d:fb:78:42:
                    ed:70:36:76:cc:b4:75:32:6b:a9:89:3b:af:de:cc:
                    b4:c2:be:d5:e5:9c:38:d7:0b:18:c0:01:70:7b:94:
                    78:99:c0:8b:28:2a:01:50:25:f2:cf:1d:23:37:be:
                    54:0a:f4:4e:22:24:24:74:f7:bc:fa:46:ab:4e:a2:
                    10:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B3:14:92:B3:15:DA:4C:0B:E9:C4:B8:8C:80:00:AA:CB:32:50:2B
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:47:2a:d5:4d:4e:68:2b:3d:9b:99:2f:be:bf:c7:0a:2d:
         25:21:9b:4a:c6:70:8a:80:f8:3c:cc:62:67:20:89:39:10:d1:
         c9:f2:6b:82:52:63:a1:d0:28:7f:e8:55:9f:52:05:a2:bc:0b:
         d9:e1:5a:79:49:73:62:5a:32:d9:db:aa:6f:53:44:47:74:59:
         7d:b0:7d:ee:6a:ce:8b:22:c2:91:04:8f:8c:77:2a:d3:f7:31:
         c3:e8:31:ec:6a:7e:e4:b2:73:db:89:97:f2:7b:48:ba:91:56:
         ac:e6:fc:61:be:80:8a:27:72:17:7b:3d:82:9f:22:d6:cd:66:
         bf:40:7d:11:dd:96:50:56:cc:50:68:2a:25:4a:f6:ba:fb:c3:
         fd:e1:4b:92:20:85:ea:fe:ec:41:a5:86:e7:d8:2c:a6:d4:12:
         4b:32:67:cf:13:25:21:ba:3e:1f:67:ec:83:49:e5:e5:cf:af:
         e8:3c:98:16:53:d0:73:a4:c3:92:13:3c:36:ff:0e:b5:1d:71:
         b2:24:3e:bc:99:c1:f8:e2:36:b5:5b:21:f8:cb:f7:68:71:c3:
         b6:8c:b8:6c:1b:f6:bf:72:7e:64:06:73:61:3c:e0:f4:d3:1f:
         2a:af:f4:84:96:c2:37:ad:d6:2f:1e:da:b9:14:26:f5:29:ff:
         d2:cc:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:39:32 2025 by rpki-client