Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
File:                     IGKsHBhX7ixX9xZrmADtH4952XE.mft (raw, json)
Hash identifier:          ChrsY9r7QGxDHsLk5kGOYWsw53kLhpCR43W0aTSaTvs=
Subject key identifier:   3E:97:57:BA:5E:81:D9:9B:C5:F7:25:80:C2:8C:CE:22:27:B9:93:61
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Certificate issuer:       /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial:       012D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
Manifest number:          012B
Signing time:             Wed 18 Jun 2025 11:53:45 +0000
Manifest this update:     Wed 18 Jun 2025 11:53:44 +0000
Manifest next update:     Fri 20 Jun 2025 11:53:44 +0000
Files and hashes:         1: IGKsHBhX7ixX9xZrmADtH4952XE.crl (hash: O3R9QUtNGYyMm4s4dYyY/MnSam8zNRt6qcEgCgrbUUc=)
                          2: 730CF53E6F7811EFB7469458762E951A.roa (hash: 4Xr+HaCJbqAah+5S3H7APXwnc3AnA1LsHigd1Wadgok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Jun 2025 11:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C3F1AF, serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
        Validity
            Not Before: Jun 18 11:53:44 2025 GMT
            Not After : Jun 20 11:53:44 2025 GMT
        Subject: CN=6852a8c9-1364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:08:a6:b4:c1:20:58:0e:bb:d5:f7:b8:d4:
                    56:7f:c0:74:ff:f0:0c:91:81:c7:54:e4:17:4b:6f:
                    2a:0d:04:a2:7d:88:a3:e3:2d:ff:b8:b9:e2:92:60:
                    0b:0f:2c:21:01:d7:7b:ef:cd:70:52:bb:24:74:a2:
                    72:77:4b:39:d8:d7:d4:4a:c7:89:ca:fa:69:b5:a9:
                    0c:4f:e2:b7:af:8e:a3:33:1d:98:d2:2f:5c:e7:34:
                    26:bc:92:96:91:7e:79:d3:c2:46:d3:1e:1e:b2:61:
                    d7:7d:07:e7:a6:dc:fb:ae:53:3d:8d:bf:d1:4f:4e:
                    d0:4f:53:29:24:b5:84:a4:23:aa:b9:ea:9e:37:47:
                    be:ca:0b:af:32:ce:ec:47:10:6a:21:bd:98:77:c5:
                    a7:13:8f:10:65:af:f0:60:7d:fb:41:1b:5e:51:d9:
                    3b:2d:67:f0:b7:6d:7d:01:a4:47:fa:36:f7:99:e8:
                    e4:f0:31:70:3b:0a:cf:a1:2a:58:5f:c6:ce:a9:c9:
                    fd:cc:bc:92:cc:61:cb:59:e9:29:dc:92:37:47:9c:
                    7b:18:1d:99:35:9c:db:17:ec:b3:95:1b:65:bb:23:
                    93:e7:d8:bd:6c:c4:45:3d:e4:9c:7a:2d:94:c2:32:
                    7e:b9:a9:08:39:32:9e:48:fa:06:9c:77:82:e7:cd:
                    d7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:97:57:BA:5E:81:D9:9B:C5:F7:25:80:C2:8C:CE:22:27:B9:93:61
            X509v3 Authority Key Identifier:
                keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4e:f5:6e:ab:08:5c:40:b1:08:35:a1:98:f6:f0:62:13:73:
         c6:da:02:10:29:b2:6d:41:f2:c3:4d:62:94:40:9a:0d:7b:6e:
         57:3c:ce:db:97:ff:b9:12:86:14:a0:8f:3e:2b:8c:51:63:f4:
         c6:23:ae:4d:6f:60:62:8d:b9:97:b9:31:c5:fb:a1:20:3c:b0:
         41:77:0c:ef:61:6a:3b:b8:09:a9:d8:a9:ea:6f:1a:bf:23:b2:
         53:04:a0:61:d4:23:f2:32:85:29:01:06:a9:78:23:03:15:f0:
         88:45:9b:02:b2:83:4d:d9:95:03:ac:aa:e4:16:16:db:6f:05:
         e5:e7:a7:3b:a0:b4:90:a9:66:1a:75:01:e1:ee:70:a7:d7:ce:
         1e:e6:d9:36:83:32:36:14:45:e8:cf:38:e7:c3:5d:8c:b6:3d:
         61:05:14:1e:55:fa:46:7d:93:26:ec:33:02:87:47:76:30:f2:
         3b:c0:4d:6a:44:bf:96:b3:c6:e6:12:52:c5:06:0a:2c:d7:3b:
         49:69:b4:ef:a1:b4:bf:7c:a2:ee:ec:64:5a:7f:24:b9:84:39:
         6f:65:90:21:f6:67:98:39:53:69:4b:7d:67:ae:84:30:11:71:
         72:f9:5d:53:0f:d8:dd:02:4f:8e:2f:f0:f2:14:3e:62:f5:36:
         dd:b0:88:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:20:06 2025 by rpki-client