Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
File:                     D0ElrSzSvYs64WLz4yLl9YEEdVw.mft (raw, json)
Hash identifier:          wlp2FpBp1Qjcb0wrBpVqeyMmHFJrUUniCtvOazbTuzY=
Subject key identifier:   B4:6E:60:68:68:9A:C3:AA:8B:A1:0D:59:BD:BA:04:13:C5:19:5F:C4
Authority key identifier: 0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
Certificate issuer:       /CN=F369E1AEAF/serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
Certificate serial:       022B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
Manifest number:          022A
Signing time:             Tue 17 Jun 2025 04:14:45 +0000
Manifest this update:     Tue 17 Jun 2025 04:14:44 +0000
Manifest next update:     Thu 19 Jun 2025 04:14:44 +0000
Files and hashes:         1: D0ElrSzSvYs64WLz4yLl9YEEdVw.crl (hash: mbGgdU6s2cY6LQcgfiRy4eyWZlxVmm5yX+Lsf/IahUA=)
                          2: B88C4802A56711EEB452196CD25BE465.roa (hash: R1yx3FLGyYPBCG60fqHnVclW0apMrFLNua6cWgJ7jiI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 19 Jun 2025 00:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E1AEAF, serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
        Validity
            Not Before: Jun 17 04:14:44 2025 GMT
            Not After : Jun 19 04:14:44 2025 GMT
        Subject: CN=6850ebb5-be48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:50:43:40:fe:4b:da:f8:c3:45:c5:87:18:
                    c9:0f:12:5e:be:2c:f9:58:49:ae:5c:b2:f4:08:39:
                    c9:c9:8f:41:cd:52:4e:7e:65:2e:19:bd:b5:ba:98:
                    3f:ee:87:33:b1:27:47:eb:8c:62:b9:d4:18:89:0d:
                    6a:a2:3c:db:60:1a:b8:ad:4c:5e:8b:fe:fc:71:22:
                    93:b5:a5:80:0c:1c:07:f9:c2:80:ca:8e:36:11:d2:
                    a8:a6:25:37:69:c5:58:c5:be:9d:e4:ef:86:82:a0:
                    75:23:6e:9d:f8:6a:c6:d8:8b:fc:93:31:cf:b9:bb:
                    6e:bc:93:5f:61:3f:76:fe:07:1d:d7:5a:8e:80:c8:
                    65:5a:ed:8c:c9:9e:b8:3c:52:4b:c4:f3:7a:2d:31:
                    ba:e8:19:3d:0d:dc:45:7f:4d:37:d7:c7:dd:3b:e6:
                    b4:8b:33:8f:4c:ce:d9:f4:6a:06:df:46:ae:3c:79:
                    66:87:41:f0:d6:d7:43:87:91:6e:7a:58:16:ba:ef:
                    4d:56:a0:27:e5:3b:8b:b3:48:7f:e5:39:75:68:bd:
                    9f:47:d7:de:32:c3:c3:03:cc:f7:32:19:f1:95:af:
                    ca:f8:0e:30:7b:2f:a9:2d:9f:7b:49:fe:11:58:90:
                    3b:eb:46:52:02:31:1e:52:46:11:16:c7:a0:f7:cf:
                    c8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6E:60:68:68:9A:C3:AA:8B:A1:0D:59:BD:BA:04:13:C5:19:5F:C4
            X509v3 Authority Key Identifier:
                keyid:0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:29:a4:45:ec:b4:ff:ae:dc:d2:81:d1:12:fc:94:43:86:69:
         7c:d6:a8:f5:01:0d:42:87:85:40:36:54:b5:9c:08:ae:fa:72:
         ba:76:ee:be:ee:a5:db:5d:ed:2f:3d:a4:bf:08:a4:b4:0c:7a:
         0f:0e:65:fa:6c:b7:0a:d8:ff:27:ce:26:05:88:b3:5e:b4:48:
         51:1f:7a:8e:8f:91:9c:c8:d1:1c:a4:38:9d:6c:8a:34:b4:3d:
         6f:b5:27:a8:db:a2:20:22:3d:b0:96:f8:b5:48:e0:b5:c8:27:
         5f:f1:6f:35:db:97:b9:b9:e5:1e:b3:5e:09:38:75:ce:08:de:
         1d:40:d4:47:3e:7a:f3:a7:fe:0d:5e:b6:f0:af:b3:a2:49:90:
         7e:9f:90:05:a1:10:11:aa:9d:21:c7:11:69:f2:68:10:07:68:
         9d:ca:19:00:1c:f1:8a:c2:a4:4c:ba:fa:9b:3c:34:1e:3d:a3:
         59:e4:ed:63:c2:fc:60:c5:e6:ff:55:85:80:96:1a:e5:d5:18:
         b8:f2:ae:20:8e:24:9d:d3:a5:7e:73:30:46:ed:ab:46:47:72:
         2e:6b:43:f0:16:9a:c5:35:4b:36:4e:58:39:43:06:01:bc:d7:
         2e:4b:8b:bd:63:e2:75:5c:3b:b2:cf:47:03:86:0a:ef:64:d3:
         25:95:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:58:39 2025 by rpki-client