Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
File:                     ypQWvryVa0rVjBysHB1Gn2gzUFI.mft (raw, json)
Hash identifier:          R/LNt3WnTNigbQxcNir75ljm+er9ix0p7hpBDWpXoGU=
Subject key identifier:   F6:4B:8C:1C:E2:59:C8:9F:AE:6E:F4:7A:44:AC:A9:FD:F5:2F:51:E0
Authority key identifier: CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
Certificate issuer:       /CN=F36914A7AF/serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Certificate serial:       0816
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
Manifest number:          0814
Signing time:             Wed 07 May 2025 01:42:24 +0000
Manifest this update:     Wed 07 May 2025 01:42:23 +0000
Manifest next update:     Fri 09 May 2025 01:42:23 +0000
Files and hashes:         1: ypQWvryVa0rVjBysHB1Gn2gzUFI.crl (hash: dmS512bgo9S6bVy8i18h0X7BnV72YWB1QI5476ZzGUI=)
                          2: 1AF2F83CFBFE11E992573048F8AEA228.roa (hash: oouCj0bsgLv2TuhXp8fmEvLXf8LLF9rpmnAY9E+k4nY=)
                          3: F6BF2196FC8111E9AC6A242CF8AEA228.roa (hash: Fd+NxiRRn35EHOCt2v/UUPEoB3ED4QaRhjwZJZVQOG4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 May 2025 01:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AF, serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
        Validity
            Not Before: May  7 01:42:23 2025 GMT
            Not After : May  9 01:42:23 2025 GMT
        Subject: CN=681aba80-0dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b7:36:9a:7c:be:cb:9c:cc:c1:a1:13:36:04:
                    5c:1f:5a:5f:71:c4:de:91:84:e6:6c:4a:97:35:35:
                    76:6a:1c:f2:24:8b:52:d1:a9:be:58:19:fd:5f:af:
                    ed:ca:8b:26:3b:88:57:9e:97:34:73:b3:e6:d4:54:
                    84:57:b7:d6:30:89:61:64:8c:15:56:94:b2:f7:7d:
                    8a:ec:79:4a:9c:a4:30:d0:ea:45:20:c2:04:39:16:
                    e1:e4:1e:ea:c7:69:8a:81:b4:6b:3c:81:4c:9d:a2:
                    bf:f1:f8:6b:c5:ff:69:8d:b5:d1:28:ba:4f:f7:ad:
                    66:28:1c:c0:19:7e:dc:38:f7:73:e1:91:87:d3:ce:
                    cd:2b:48:e4:6c:a9:aa:a7:a3:3a:b9:5a:0b:d2:cf:
                    23:bd:a8:e9:ed:55:57:8b:21:45:54:c6:b7:77:5c:
                    9c:8b:46:cf:36:92:f2:a2:51:10:c4:28:89:ea:14:
                    88:b7:d8:a5:ec:30:d2:66:f2:97:80:da:73:96:d2:
                    07:1b:03:fe:5e:cd:6c:6e:6e:a6:9d:63:a6:ae:8a:
                    3c:ab:90:fb:fe:8c:bd:27:b2:4f:24:56:b3:21:34:
                    fe:3d:15:de:8a:ca:39:cb:e4:10:d8:fe:8a:5e:91:
                    23:17:81:3d:67:6d:c2:92:50:d0:a6:31:e5:c4:72:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4B:8C:1C:E2:59:C8:9F:AE:6E:F4:7A:44:AC:A9:FD:F5:2F:51:E0
            X509v3 Authority Key Identifier:
                keyid:CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:49:a8:8f:80:d9:b4:d4:57:61:bc:ac:a2:cd:b4:6c:79:
         ec:b0:fa:81:59:d6:3f:49:13:16:47:51:5c:f8:b1:09:0d:40:
         32:71:e8:6c:12:73:60:0b:85:90:97:71:b6:5a:93:e2:54:6b:
         b9:ab:a3:45:a3:fb:16:38:02:02:dd:99:d5:c3:a6:a8:f5:c8:
         d1:19:00:00:ec:f4:eb:ab:75:50:6d:05:5f:dd:31:b5:d4:ad:
         8c:a0:2e:b6:77:84:ac:13:6e:fa:0f:0f:f0:3e:b8:29:66:61:
         b6:e9:a4:e8:f0:b9:99:17:86:7b:b3:9e:9c:bc:2a:66:cd:ce:
         49:e1:85:e1:4c:fa:10:73:91:dd:2f:c7:ab:e8:27:0d:8c:12:
         43:5b:9e:c7:49:83:5f:d9:6b:8d:de:d7:df:a7:05:38:19:39:
         2e:e0:ac:35:ca:bc:d5:d5:66:5f:ea:76:50:78:e1:9c:0f:17:
         04:80:b2:9a:c0:a6:00:5e:44:a1:73:41:71:01:0e:3f:2a:9c:
         00:17:75:b5:03:7d:98:ea:c5:9a:b3:7b:47:5e:84:69:8e:69:
         4d:22:45:d4:29:f4:41:48:de:d1:bc:31:16:4c:40:b0:8d:9b:
         6e:d2:62:fa:d2:74:7c:1c:d3:61:75:67:43:f2:ea:fd:93:b3:
         4f:5a:23:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:54:35 2025 by rpki-client