Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
File:                     FecT_XtiDOPJk1SgfTe6g3Eym0c.mft (raw, json)
Hash identifier:          QH9ckDMsA8Ep4roHs0EbJRnLL5vM0gRkTgV7C/hOH3w=
Subject key identifier:   17:3A:42:32:E4:15:74:55:53:53:0A:32:BA:5A:12:D6:42:33:C6:F7
Authority key identifier: 15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47
Certificate issuer:       /CN=F369EC27AF/serialNumber=15E713FD7B620CE3C99354A07D37BA8371329B47
Certificate serial:       0332
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
Manifest number:          0331
Signing time:             Sun 15 Jun 2025 03:41:43 +0000
Manifest this update:     Sun 15 Jun 2025 03:41:42 +0000
Manifest next update:     Tue 17 Jun 2025 03:41:42 +0000
Files and hashes:         1: FecT_XtiDOPJk1SgfTe6g3Eym0c.crl (hash: 3Xwj0wuFt+KxHXIrcfZAATSs2z1a/mSIBp2X5C2YED8=)
                          2: 28E4C952DD1E11ED9DD29CD12F6D8C1D.roa (hash: 89V7HDkOzxSFZWW4ZtjKFLvYB7+OW1sQEP+YyD51Nf8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818 (0x332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369EC27AF, serialNumber=15E713FD7B620CE3C99354A07D37BA8371329B47
        Validity
            Not Before: Jun 15 03:41:42 2025 GMT
            Not After : Jun 17 03:41:42 2025 GMT
        Subject: CN=684e40f7-1b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:76:f6:06:1d:0a:54:18:08:7c:49:14:d5:
                    48:a2:c7:e2:93:a7:82:fd:68:df:48:d0:24:80:35:
                    71:ff:5d:f5:bb:e8:e6:3f:3c:a5:2b:42:11:63:d1:
                    98:f5:9e:fe:e6:71:de:09:9a:a4:f5:8d:00:a2:ed:
                    3a:82:bc:19:cf:ab:4f:e4:47:50:97:8a:5c:28:cf:
                    f4:90:79:03:52:8a:87:1c:e5:53:e4:44:d5:fa:ce:
                    ec:bd:e2:f0:85:60:ed:00:00:cd:1a:f8:e1:17:21:
                    88:f1:6e:dc:ba:65:96:94:22:2d:cf:ce:0c:92:38:
                    a8:b3:5f:00:af:be:8d:d4:7a:12:bf:23:13:9c:7b:
                    0c:39:b4:74:3b:ab:eb:f8:b0:81:11:5f:f3:b5:c7:
                    50:a3:d0:82:31:63:12:d4:d3:f9:81:20:1e:fc:12:
                    11:97:b5:b0:c7:6a:00:e1:75:d5:f9:59:e3:e3:c7:
                    56:7b:8e:12:ce:ab:ca:32:4e:e8:ca:9d:29:28:9b:
                    d0:7e:1b:2d:07:e4:57:85:c0:06:b9:a4:ee:10:00:
                    db:18:16:c8:82:db:b0:8e:a5:08:74:27:01:b2:be:
                    f7:51:1d:17:43:45:15:9a:0d:bb:29:a0:2f:0e:0d:
                    55:3e:a8:3d:0d:fa:90:e0:2d:b7:cb:7e:e3:be:11:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3A:42:32:E4:15:74:55:53:53:0A:32:BA:5A:12:D6:42:33:C6:F7
            X509v3 Authority Key Identifier:
                keyid:15:E7:13:FD:7B:62:0C:E3:C9:93:54:A0:7D:37:BA:83:71:32:9B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FecT_XtiDOPJk1SgfTe6g3Eym0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369EC27/F804A1AADD1C11ED9D7CEDCD2F6D8C1D/FecT_XtiDOPJk1SgfTe6g3Eym0c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0d:22:26:60:9d:f0:63:64:23:f5:80:d8:a0:b7:b5:48:1e:
         67:a3:f2:db:e1:bb:f2:aa:69:06:55:4c:cf:c1:32:bf:50:6a:
         33:ef:19:8f:eb:dd:05:82:85:ee:02:f9:0f:1f:ef:58:e2:14:
         97:92:b2:de:2b:1e:cf:93:4d:88:96:09:7a:db:11:9e:08:e9:
         f4:56:3f:97:8d:0e:46:96:29:9b:af:a2:aa:e6:27:84:26:e0:
         22:fd:92:44:1e:57:26:dd:41:04:83:ef:e6:45:60:82:04:c8:
         36:16:33:fc:46:86:76:29:76:81:88:b8:9d:70:31:b1:df:39:
         a0:93:76:57:ed:36:a0:24:cc:5a:cc:1b:c4:78:5d:e6:3d:8a:
         1c:ab:80:c0:02:b0:86:ad:ce:7c:18:9f:24:e1:4b:ab:a2:18:
         73:75:a7:a3:b8:a8:56:44:42:76:8d:a6:c9:5b:1a:5c:29:4d:
         01:94:af:24:f6:dd:d8:d3:e2:2c:ae:63:65:5d:16:e5:c8:f2:
         3e:cd:bd:f6:34:62:8b:e0:1b:56:1a:2f:74:6e:6f:3d:f2:56:
         d6:9b:4b:cc:e4:94:8f:ce:eb:b1:9c:58:08:f6:56:d7:2a:40:
         e1:03:1b:74:78:b9:d7:b8:48:c4:81:b0:ea:92:a7:06:7a:57:
         31:42:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:59:12 2025 by rpki-client