Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
File:                     bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft (raw, json)
Hash identifier:          pvbwNbVUKA8aVMbDl5h93E7gwQYPhG3nMSUqziHDjCg=
Subject key identifier:   04:44:38:B8:BB:0D:29:55:37:B0:60:1A:C0:B2:DD:4A:30:7F:4B:04
Authority key identifier: 6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A
Certificate issuer:       /CN=F369B918AF/serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
Certificate serial:       0688
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
Manifest number:          0687
Signing time:             Mon 16 Jun 2025 02:07:37 +0000
Manifest this update:     Mon 16 Jun 2025 02:07:36 +0000
Manifest next update:     Wed 18 Jun 2025 02:07:36 +0000
Files and hashes:         1: bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl (hash: 15v3BWHOWuuuYihgvQqzcI8X7JjZZtzJ9CqXfYsK0Pk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B918AF, serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
        Validity
            Not Before: Jun 16 02:07:36 2025 GMT
            Not After : Jun 18 02:07:36 2025 GMT
        Subject: CN=684f7c69-0a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:c1:f1:79:b4:43:f4:45:40:ec:62:79:8b:
                    d5:73:12:70:37:e2:1a:54:ae:65:47:39:d2:89:14:
                    37:4d:00:f4:a5:a9:fa:64:3f:67:9d:7e:1d:0e:fa:
                    c7:99:f8:ad:c0:35:34:3c:84:cb:62:8e:04:a7:ac:
                    18:9b:a3:c5:0d:b3:f0:a0:b3:2f:c4:19:dc:bf:66:
                    ab:1e:f6:8f:8a:0b:5f:74:b7:c6:0b:a2:5b:f2:92:
                    85:56:77:75:73:36:e1:2d:64:92:c2:92:ba:64:ed:
                    3b:13:70:8b:29:54:b7:b9:da:73:33:a3:49:c7:7e:
                    57:f3:a6:30:e2:1e:c5:98:8f:bb:38:ff:95:95:08:
                    b1:9b:47:41:05:98:32:bc:7a:02:75:87:22:67:d8:
                    dd:93:47:5d:77:78:78:ea:68:d6:80:f1:63:fa:46:
                    9c:07:33:fc:d7:a7:02:ac:85:e2:71:d1:09:0d:0b:
                    b5:ca:37:28:91:e8:3e:d3:6e:c9:bb:09:92:de:d9:
                    52:46:34:f6:48:d2:7f:00:b5:cd:6b:0c:47:6a:46:
                    22:5c:49:e5:3c:f6:19:67:98:ae:f0:06:82:e5:8e:
                    d6:bf:17:1d:ca:65:c5:d1:7c:bc:fa:0d:67:cc:cc:
                    12:8e:4b:0f:da:fd:ef:e1:59:5e:1e:4c:c6:14:15:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:44:38:B8:BB:0D:29:55:37:B0:60:1A:C0:B2:DD:4A:30:7F:4B:04
            X509v3 Authority Key Identifier:
                keyid:6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7f:fa:07:95:70:11:b2:46:3f:52:c3:a7:55:99:0a:b1:e9:
         31:cd:da:fc:e4:1e:a3:69:7c:98:17:9e:b0:11:b6:97:14:5b:
         ca:21:33:58:c4:5a:cb:ff:c9:39:90:8b:1e:90:8a:ca:b9:76:
         a1:01:d6:df:e7:15:5d:45:02:a5:a7:c7:e8:70:38:a5:5b:3f:
         92:b3:1e:df:50:da:a4:5d:53:f7:cb:76:ba:98:56:13:0a:3c:
         14:fe:1a:29:34:12:f4:e7:2a:d6:cc:0a:ec:f7:7a:bc:c7:1e:
         f1:81:78:cb:21:27:d6:dc:8e:f5:7c:a1:39:73:73:5b:6d:94:
         cc:52:2b:be:12:bc:59:0a:13:2e:53:f2:4e:d6:47:b1:8e:1f:
         5f:6c:a7:90:f1:36:9f:7e:3e:cc:73:b2:54:12:6c:a6:1e:ee:
         44:bf:cb:8a:24:08:1c:87:ff:0f:5d:2e:a5:2d:03:65:a8:e9:
         55:bf:86:22:68:ef:5a:39:e2:d0:77:c2:8c:84:08:0f:6c:28:
         cc:8d:ba:b1:46:6c:1c:c1:83:4b:f5:79:08:ff:6f:aa:1a:e1:
         88:f1:f6:c6:35:ad:e5:26:fb:56:cf:94:eb:f9:f0:93:c9:bc:
         c5:41:3f:4d:15:7c:1b:83:ad:af:fa:9a:23:e2:1f:a2:1d:65:
         ca:56:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:30:02 2025 by rpki-client