Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
File:                     0uDwPq7oAqkBwlcRKP55pj80aSw.mft (raw, json)
Hash identifier:          380eE5K0313G4gxjsDokfz17BJOA4Zq9wfOZtN9ULoY=
Subject key identifier:   91:F4:27:07:56:B2:98:B5:71:FF:26:66:0B:8F:B9:90:35:42:B0:DE
Authority key identifier: D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C
Certificate issuer:       /CN=F36858D5AF/serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
Certificate serial:       02E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
Manifest number:          02E0
Signing time:             Mon 04 Aug 2025 03:59:19 +0000
Manifest this update:     Mon 04 Aug 2025 03:59:18 +0000
Manifest next update:     Wed 06 Aug 2025 03:59:18 +0000
Files and hashes:         1: 0uDwPq7oAqkBwlcRKP55pj80aSw.crl (hash: e1DnwwOUq6pcKxu0GIzWFkd1a3eFf7TIApYT+zznpDM=)
                          2: 6C083968730911EEB676D5174AD9E6FC.roa (hash: GPazHsxOeA8iw549I//PnsuiDjidxxug1DVogvWrQ6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36858D5AF, serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
        Validity
            Not Before: Aug  4 03:59:18 2025 GMT
            Not After : Aug  6 03:59:18 2025 GMT
        Subject: CN=68903017-752d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:eb:8b:5a:06:75:bc:da:72:74:91:68:bd:
                    6c:54:45:be:ca:de:6d:ed:f8:d9:f1:1a:1b:5d:87:
                    02:4c:eb:63:0f:12:0f:11:5e:1a:7d:1c:cc:d3:79:
                    d1:cf:67:d7:63:ee:c6:ff:ca:48:2f:55:d2:c7:ee:
                    4a:a1:09:80:58:3d:63:96:7c:f4:f2:38:dd:07:04:
                    40:fd:d5:3b:70:71:c6:7a:39:a9:6e:2d:e1:54:15:
                    13:e3:2c:f4:f6:e1:38:ac:65:96:3b:ec:f3:93:50:
                    9f:99:8b:0c:97:b8:70:70:97:b3:51:13:0d:16:ca:
                    42:f8:43:c6:8d:d0:58:be:99:81:39:e9:48:c3:55:
                    6c:86:1f:13:64:11:77:a7:9d:a6:ab:5a:8d:27:9a:
                    1b:fb:b7:c6:e6:59:99:2f:da:6b:23:93:e9:7d:4e:
                    cb:ca:4f:54:2a:71:88:1a:7d:fd:2d:ef:f0:79:86:
                    00:03:5a:08:be:89:f0:9a:6f:a9:c4:e1:d6:57:e7:
                    6e:c3:e0:a5:a6:f8:80:82:02:39:e4:62:66:ae:6f:
                    81:74:ce:ba:7b:99:81:1e:be:a2:56:21:e5:cf:00:
                    99:26:16:b7:3d:2b:33:f4:ed:a9:98:82:b2:d5:d7:
                    3e:c4:7d:49:5b:54:8f:ac:d2:1a:6a:c0:50:90:78:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:27:07:56:B2:98:B5:71:FF:26:66:0B:8F:B9:90:35:42:B0:DE
            X509v3 Authority Key Identifier:
                keyid:D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:32:76:b8:7b:b4:10:b1:55:b5:c9:24:71:27:40:b7:d7:82:
         7b:ab:bc:73:dc:fa:eb:cb:a2:d9:06:dd:fb:e0:bf:95:66:f8:
         07:ce:87:29:84:ca:3e:f4:2a:7b:52:40:5a:d0:30:90:dd:d3:
         ea:90:bd:f3:be:1d:56:09:d6:5e:9e:a4:06:5e:0a:62:03:a9:
         cb:9b:7c:a8:4d:24:5a:34:da:62:2d:bc:b8:e1:f8:39:a5:e2:
         c3:4b:49:14:aa:1c:ef:47:70:f8:25:8b:25:85:ee:27:f1:ae:
         98:ba:d3:9c:f0:f3:73:4b:4d:25:72:ab:c6:db:c0:41:d4:3d:
         16:37:6c:f0:de:56:8c:58:46:0e:84:99:42:dd:a2:7c:a1:95:
         f9:95:43:f5:93:e2:31:6a:63:65:e8:e6:fe:1a:7e:af:0a:d1:
         1a:da:8b:94:95:82:be:23:55:9f:a3:58:d6:1f:e9:fb:72:b4:
         74:24:d0:07:45:07:e0:2c:61:d8:b1:82:1c:38:a0:00:ef:e1:
         00:cf:b8:20:e6:05:ac:ba:2e:9c:22:33:91:f0:3b:4b:37:d8:
         5e:a0:1d:55:d2:a5:e6:63:91:8c:4f:d0:18:81:42:86:5f:a4:
         a6:c0:16:d2:de:4e:24:7f:25:44:39:8f:31:df:cc:91:7b:83:
         50:37:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:18 2025 by rpki-client