Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
File:                     S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft (raw, json)
Hash identifier:          3ZRwG2YHDLab7ZB02vD4PmxSmCriCzcsaXFTPKzKfTg=
Subject key identifier:   25:5A:D3:EA:F0:4C:9A:1F:6D:F9:10:4B:24:DA:F6:AD:5A:C2:2A:9D
Authority key identifier: 4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
Certificate issuer:       /CN=F369E115AF/serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
Certificate serial:       018B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
Manifest number:          0189
Signing time:             Wed 07 May 2025 04:32:34 +0000
Manifest this update:     Wed 07 May 2025 04:32:33 +0000
Manifest next update:     Fri 09 May 2025 04:32:33 +0000
Files and hashes:         1: S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl (hash: Xvm3LLJpXdSHLuQ7RgwybZWDmLU52Dscz9KkgHBCxug=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 May 2025 00:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E115AF, serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
        Validity
            Not Before: May  7 04:32:33 2025 GMT
            Not After : May  9 04:32:33 2025 GMT
        Subject: CN=681ae262-1024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:0c:4e:16:d1:ea:d8:8c:6a:3a:dc:df:6e:
                    29:61:a1:12:16:9c:d9:82:82:e0:af:38:ef:98:f8:
                    58:e3:0d:d3:ab:a6:fa:b5:28:6f:70:fb:29:e6:22:
                    e3:64:1d:2d:0b:e3:2f:f4:61:96:a2:fa:a4:b1:a5:
                    a6:f1:99:4e:a3:63:3e:9b:40:9c:77:7c:10:15:57:
                    f6:22:1e:09:56:68:eb:59:90:42:29:a5:91:d6:13:
                    c5:68:d5:00:67:e3:02:d2:b0:f2:c7:16:e9:0e:20:
                    0f:0e:72:59:ec:d8:f6:5f:b1:97:94:bf:13:b0:4a:
                    98:c2:20:d8:31:d3:6b:35:6a:2a:30:d2:3a:e3:d7:
                    96:d9:ba:a9:d1:87:e0:20:12:6a:e7:e2:7f:aa:dc:
                    20:94:12:73:eb:7d:11:78:58:05:77:1d:c4:46:b3:
                    51:74:6e:d9:83:44:8e:0c:c8:ce:78:24:22:34:41:
                    40:62:8a:ed:de:e5:b4:9d:5b:31:ef:91:72:e8:b4:
                    3f:e4:09:23:74:96:f9:93:de:21:6a:53:53:d7:41:
                    89:2f:cc:01:4d:5e:19:2d:11:fd:4f:05:f2:b2:06:
                    95:70:07:e1:28:0e:ac:a6:f6:3e:fe:cc:85:6b:3f:
                    b2:fe:08:e8:48:03:b3:f1:f8:df:dc:a2:0a:96:23:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5A:D3:EA:F0:4C:9A:1F:6D:F9:10:4B:24:DA:F6:AD:5A:C2:2A:9D
            X509v3 Authority Key Identifier:
                keyid:4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f1:d7:74:23:bc:df:cb:a3:78:24:a9:d1:25:25:4a:12:21:
         e3:ed:ef:53:fc:a2:b2:9f:a9:26:88:87:0e:83:7d:79:a6:a7:
         bb:23:48:12:9d:52:a2:ed:66:b9:ff:7a:85:55:21:19:14:cd:
         2a:3f:f2:02:0f:65:85:1d:ed:5c:9f:60:a6:b9:f2:23:4f:37:
         fc:a2:63:e0:fa:97:6e:d3:10:8b:df:c3:e7:13:cd:d7:63:d1:
         f6:69:0d:8a:ca:e6:db:33:66:ca:cd:71:37:5a:13:37:6f:f9:
         ec:a7:11:62:c8:5b:bd:c1:1b:c2:07:43:f0:a8:f4:bb:3a:ad:
         da:e8:48:0f:27:d9:b4:0f:c7:cc:58:e4:88:b8:84:d3:ff:4f:
         58:2f:fd:82:ee:1c:e7:1d:48:9d:89:27:d5:48:bf:a5:2a:e1:
         aa:80:bc:49:de:ee:4f:1b:5f:dc:cc:df:82:82:90:da:f2:8c:
         76:d0:18:46:9d:44:93:38:9a:1c:e4:9b:b4:f6:78:3e:8a:e3:
         6c:8c:97:10:5b:92:1a:bf:ce:d8:97:5a:69:e1:0b:0b:87:eb:
         82:a4:4d:cc:6b:56:af:78:8a:3b:a6:80:92:6c:cd:1a:e8:33:
         35:6f:99:75:4e:d8:49:97:04:a4:b5:95:f7:03:0b:a2:f2:8f:
         45:64:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:30:35 2025 by rpki-client