Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.mft
File:                     C8LuZhNiKANtM2Apm0qDGV6th8U.mft (raw, json)
Hash identifier:          zW2z46Ni8SQoEE4RCfiJp6e9vDR73r7onUtuaRpXSeE=
Subject key identifier:   07:36:E1:2E:1D:6C:C7:B7:A0:43:50:35:F8:F7:FF:27:2E:D5:F1:A6
Authority key identifier: 0B:C2:EE:66:13:62:28:03:6D:33:60:29:9B:4A:83:19:5E:AD:87:C5
Certificate issuer:       /CN=F367C1FCAF/serialNumber=0BC2EE66136228036D3360299B4A83195EAD87C5
Certificate serial:       0723
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C8LuZhNiKANtM2Apm0qDGV6th8U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.mft
Manifest number:          071F
Signing time:             Tue 29 Apr 2025 01:57:17 +0000
Manifest this update:     Tue 29 Apr 2025 01:57:16 +0000
Manifest next update:     Thu 01 May 2025 01:57:16 +0000
Files and hashes:         1: C8LuZhNiKANtM2Apm0qDGV6th8U.crl (hash: 3ucKYa05Nb/u0Km4AbY1rUYXI9Wvxenu5MeqnnHCC7U=)
                          2: DFF59CB6015811EFA0548F5D017001B1.roa (hash: ad0ZLY1g7kmBztnFK6luNNN+TT29RE29LZBJIZEritM=)
                          3: 0FF9F416015911EFAA054A5E017001B1.roa (hash: A/KE/DRbcAD3WaHdpO7dzDRZtCH71MkqhhsLcFOUCvA=)
                          4: 1F09D8DCD05011EB91841862F8AEA228.roa (hash: KRGqHZQevGoIR7+2zlTr66DWwG+/zfsZ71a0yXIjOog=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C8LuZhNiKANtM2Apm0qDGV6th8U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 May 2025 01:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1827 (0x723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C1FCAF, serialNumber=0BC2EE66136228036D3360299B4A83195EAD87C5
        Validity
            Not Before: Apr 29 01:57:16 2025 GMT
            Not After : May  1 01:57:16 2025 GMT
        Subject: CN=681031fd-c9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:0a:06:c1:4c:4b:27:6d:7a:07:e9:1a:57:
                    9a:b3:9d:cb:fa:fe:63:24:e5:6b:d6:45:b0:5b:91:
                    78:5b:92:70:fd:ae:3f:9e:24:b8:24:29:27:1c:e5:
                    09:b3:7e:ab:f3:3f:cd:93:43:e9:7d:02:fb:93:ea:
                    9f:d9:d0:c8:a0:f2:95:69:54:ee:08:21:4b:c4:7f:
                    e1:84:87:88:e8:48:94:ed:8b:df:86:2f:a3:ec:96:
                    ae:cc:05:54:bb:ea:76:a1:23:29:fc:f6:b1:ab:60:
                    08:e0:d6:31:04:92:8f:f1:4f:7a:38:b1:de:ef:87:
                    3b:8a:81:a1:ed:2a:6c:2e:e6:87:a8:33:85:05:30:
                    30:70:fd:e8:b9:7e:5f:a0:24:19:88:10:f5:c7:7a:
                    f5:a8:9d:c6:c5:80:40:c8:f2:39:75:65:1f:9a:67:
                    b6:20:15:12:2d:7c:d7:da:ea:47:51:d4:a7:b4:7d:
                    58:38:26:5a:86:31:8e:47:90:7c:94:32:e6:1a:cc:
                    ff:f7:b7:91:8e:af:d2:dd:49:fb:d6:dc:8b:a4:bc:
                    7f:85:6d:e9:be:32:33:fd:52:78:b8:73:b5:2f:1f:
                    1c:af:b5:69:6d:e4:6d:61:d3:bd:ea:d7:b0:87:49:
                    b5:7a:76:66:58:ba:c7:15:82:f2:e1:01:12:d0:c9:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:36:E1:2E:1D:6C:C7:B7:A0:43:50:35:F8:F7:FF:27:2E:D5:F1:A6
            X509v3 Authority Key Identifier:
                keyid:0B:C2:EE:66:13:62:28:03:6D:33:60:29:9B:4A:83:19:5E:AD:87:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C8LuZhNiKANtM2Apm0qDGV6th8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4b:dc:12:79:2a:7d:9f:30:72:e1:48:dd:e9:7c:bc:f4:6e:
         12:cc:58:8c:dd:8a:7b:49:18:c0:8e:97:e6:28:f7:b6:27:31:
         ca:31:e7:fa:07:f2:eb:37:75:ef:7e:ee:a0:49:de:ab:21:78:
         02:3b:70:bc:d5:b6:c3:f7:06:c0:87:9c:13:bc:b2:5f:57:4f:
         9d:bf:d7:62:bf:dc:99:d8:e8:7b:82:12:92:70:71:38:4a:d0:
         96:7f:4b:5c:6b:02:30:c7:a1:54:0c:9a:7a:10:8e:79:44:c7:
         5b:c9:3b:9c:57:d1:66:d2:e7:26:05:dc:90:9b:e7:a3:e9:b4:
         a9:92:4b:f7:71:93:7a:a0:2e:f8:24:16:85:25:56:30:97:78:
         38:76:18:12:2c:0c:64:81:45:13:e6:c5:51:19:43:68:ee:e6:
         a0:8f:d8:0a:16:b9:32:e2:7a:46:e3:1d:dc:5e:19:72:6d:6a:
         c3:50:5e:43:60:d3:94:c5:02:29:4f:85:0d:65:6b:8c:c0:f1:
         14:f9:6c:8a:83:ff:ad:1f:74:41:2d:6b:3a:74:cc:2a:92:89:
         ef:5d:2d:b0:de:db:cb:f9:73:15:70:7a:4a:b4:3e:1c:e4:2f:
         51:bb:da:8f:57:c7:26:c7:3b:f0:9b:33:ec:fd:bd:d5:c2:24:
         fc:31:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:39:42 2025 by rpki-client