Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
File:                     L9OdkqzapRN7zkgavmyN8dzNDvY.mft (raw, json)
Hash identifier:          ucVYfygnmOgANH9xr2yS2AEqYgzHJiogBEo0vIzq9Zo=
Subject key identifier:   FD:5F:FA:5A:E1:E5:E3:A0:FB:EE:83:25:BB:E7:EE:FB:45:6D:C4:6E
Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
Certificate issuer:       /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Certificate serial:       02B1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
Manifest number:          02AE
Signing time:             Tue 06 May 2025 03:53:00 +0000
Manifest this update:     Tue 06 May 2025 03:52:59 +0000
Manifest next update:     Thu 08 May 2025 03:52:59 +0000
Files and hashes:         1: L9OdkqzapRN7zkgavmyN8dzNDvY.crl (hash: D8Y90TqGWrlLD7znzlj55Li7qOzp2XoGs8mj0JdHEQA=)
                          2: 82D2D66E261811EE84FCC57F4AD9E6FC.roa (hash: 8DOR79YopZBDIjmiAAaaEool8LnL3u27308SxIQ3uSY=)
                          3: E1F87CC6261711EE9112117E4AD9E6FC.roa (hash: L/3Ed8SgC2Eem41w8cHehrxxaShVOqXifUiGhdxr7zk=)
                          4: 2BBF61F4261711EEBF1F207C4AD9E6FC.roa (hash: uweMPd3tzGkzK5NAwH3tY1Gjy+sA5uAC5mjmqHriOro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 May 2025 00:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
        Validity
            Not Before: May  6 03:52:59 2025 GMT
            Not After : May  8 03:52:59 2025 GMT
        Subject: CN=6819879c-86c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:53:bb:9a:d8:1e:bc:68:70:26:8f:a0:2c:
                    ad:c5:5d:e6:8d:b8:33:ba:43:ca:f1:94:40:d0:11:
                    89:b7:de:15:27:71:29:a3:c3:d6:3c:26:5f:c1:4a:
                    86:b5:bc:50:76:00:28:8d:b7:18:82:5a:52:ab:18:
                    c8:e8:79:17:cb:bf:30:af:43:99:29:92:1a:5f:3e:
                    6a:31:cd:0e:69:69:5c:0a:c3:a0:0b:47:f2:65:63:
                    bd:9e:d2:ea:14:5a:21:b3:ed:37:74:41:64:4a:09:
                    06:2d:9f:5b:0d:18:49:d1:ec:53:f6:f1:dd:ce:9b:
                    15:83:c2:14:b1:9d:51:a9:e0:a7:cf:e3:b3:57:6c:
                    ee:b9:02:74:0b:16:11:35:0c:32:0b:e8:70:45:89:
                    ac:04:bb:62:09:ce:2c:8f:73:e9:60:49:5c:74:01:
                    03:1f:00:7e:9d:9a:cd:c8:4d:0b:e1:0b:64:c7:75:
                    03:66:a2:f4:93:21:83:3e:dd:8c:d9:bf:c6:80:37:
                    06:e1:d2:5f:ff:2c:34:df:a7:5f:56:5c:60:d4:67:
                    bc:ad:55:b3:27:c9:86:d8:f6:06:b9:72:d3:d2:56:
                    45:7e:7a:d4:66:a5:b0:c0:05:c0:05:22:01:ff:5a:
                    f5:c5:26:6a:5d:de:3d:ad:b6:89:12:a9:2b:df:78:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5F:FA:5A:E1:E5:E3:A0:FB:EE:83:25:BB:E7:EE:FB:45:6D:C4:6E
            X509v3 Authority Key Identifier:
                keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:ba:e6:e2:95:84:80:60:99:7a:d1:5a:f4:4c:b7:ae:4d:
         e0:d5:2e:33:d4:86:12:88:c7:0c:52:2b:9d:22:09:24:27:bf:
         b9:9d:59:f8:ad:50:de:93:28:fd:c4:fe:ae:a1:22:3d:b7:c6:
         73:f7:27:a1:68:ca:43:c2:18:64:de:d5:e2:4a:ef:d1:2a:cc:
         4c:41:ea:0c:68:a5:bf:0a:c6:a8:c6:cc:00:17:96:dd:fe:df:
         64:8d:27:2b:ac:7e:25:a7:a8:73:81:9a:d5:75:3e:2c:10:49:
         78:5a:d2:5f:0e:1f:fa:bb:8d:0c:c8:9a:f9:97:b0:26:c4:b1:
         e2:0b:ef:10:8c:35:bc:a0:9d:da:4e:38:0c:00:dd:57:13:35:
         3d:b0:9e:cc:0e:cc:f2:f4:86:e7:ce:f2:0f:fa:9c:54:3b:0f:
         79:35:ec:fe:60:70:f3:61:43:97:a0:cf:ca:d9:ae:6e:5e:a3:
         28:17:00:c5:5a:63:b9:dc:57:62:a9:1e:33:92:78:ea:54:01:
         39:a9:70:5f:0f:50:3c:45:f3:1c:67:07:2d:05:9d:a3:97:a8:
         1f:dd:1b:27:48:2f:3d:ed:73:f8:2a:ea:30:7a:e3:83:19:8d:
         d4:20:48:4c:b9:5b:3d:56:7b:47:ea:d1:9e:79:d7:5f:a4:0b:
         28:53:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:01:22 2025 by rpki-client