Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
File:                     XriN9L-QidcEmh--gAXmIequhis.mft (raw, json)
Hash identifier:          ozWVwLHJMFf3fAPdIUjCaspVk+/rbV4b7k4fT7vdLL8=
Subject key identifier:   27:07:26:FC:FB:E7:79:AA:6E:C2:A6:61:72:73:95:0C:42:E1:60:F6
Authority key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Certificate issuer:       /CN=F36A2303AF/serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
Certificate serial:       0807
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
Manifest number:          07F0
Signing time:             Wed 18 Jun 2025 08:47:50 +0000
Manifest this update:     Wed 18 Jun 2025 08:47:49 +0000
Manifest next update:     Fri 20 Jun 2025 08:47:49 +0000
Files and hashes:         1: XriN9L-QidcEmh--gAXmIequhis.crl (hash: FCz8HBcbJXw/N7ogpv58HieumRfoP7xtMmMm0H468q8=)
                          2: 6E72E470BB7711EA81C17268F8AEA228.roa (hash: COX4w/jxxz6FilKDwda77AXXF6hQ4KkSqj9A8makL9E=)
                          3: 4240206CB6A811EAB1BB832FF8AEA228.roa (hash: iCq6/gFL3W7WK6Z6bjLnYmu6Mw0Dp25G63lqs3EndEM=)
                          4: C63C8128B69711EA97FF0A1FF8AEA228.roa (hash: bIk7dIWbWl/XKAWXBSykBpufOHSJfKEIhHA3UnMJ3FA=)
                          5: ACEC39FEAF0111EABB62A281F8AEA228.roa (hash: Rvipb3RZAvyR06O0oS0eT7H0auR1Anu2PCQQtZz6wt4=)
                          6: 1E44EE7CB6A811EAA1B84B2FF8AEA228.roa (hash: zEtnwOQxp1tgJgoUqxYeV/ZfUYlwTe3GM5ZvpJND5Xo=)
                          7: CB0FA5F6F2BB11EC8A4DDD82F1222468.roa (hash: lxEMymTJPboRJ7EWX4tzQoZnRdc9Q6NShyvK1e1Jd3w=)
                          8: 9ABA216AF2BB11EC81733F82F1222468.roa (hash: 6FiCP8b3kWEY92TY9AhpbuVK5DAe1gKHF9Zfm6ybL6Q=)
                          9: 65660562B69811EAAC26BF1FF8AEA228.roa (hash: VIH+Uyp2iRMbrGnCMTVkoGZ68i3KOd6ztZgLPY+SoCA=)
                          10: 84EB4824B6A811EA9608C52FF8AEA228.roa (hash: sbZkg63w3bwQ28mfw2+1rFKNpRezwNvC/sHtAA39z5o=)
                          11: 0C030AA8C75311EF963E0590762E951A.roa (hash: bNMA6PZ1v1d52Zo3rBQ17thuGGh+4io0kA8gWh05KQo=)
                          12: 61A57F42B6A811EA8F77A82FF8AEA228.roa (hash: Vv24BsCUqeaHub4gOsUG210bOUJYooPQGDyZsC9Xk6w=)
                          13: 9FEAD93C759E11EF89A6AD67762E951A.roa (hash: ivnmKqYJqB476OpSS3/VFXK0kDuTC5Zwz92WOyZCMeU=)
                          14: 19804272F4B911EDB9B23E4B4AD9E6FC.roa (hash: TWFrU0yfEzXK68AK6K9dPpBTBdlS/QVZnYBhV0AEQDo=)
                          15: 577AF7EE169A11EFAF5B8016017001B1.roa (hash: ebHFPBVFI6FEnS8auwZ3hkJ3n12esrKQ6jhZHxu6AUo=)
                          16: 2F5F631AB69711EABAA2731EF8AEA228.roa (hash: IqUUMgldL8ngf2evOYR523Esg7wYavO99U4lFQ/hYmM=)
                          17: 8A31DAE8B69711EA8CBAE61EF8AEA228.roa (hash: YU+Via1Ja0ARgovK6C4u9sVVn0Ra7GJCUZol0QFjLLQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Jun 2025 05:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2303AF, serialNumber=5EB88DF4BF9089D7049A1FBE8005E621EAAE862B
        Validity
            Not Before: Jun 18 08:47:49 2025 GMT
            Not After : Jun 20 08:47:49 2025 GMT
        Subject: CN=68527d36-5f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2a:79:ff:41:63:ed:9a:83:aa:8d:ee:8e:77:
                    a4:9d:5d:53:27:8b:61:39:2e:66:81:94:c9:81:25:
                    ab:31:57:19:74:20:0c:3f:95:b2:12:71:0d:e8:02:
                    ab:28:fd:e0:32:27:f5:4d:7e:45:d8:55:63:5a:c6:
                    18:0f:eb:10:c1:44:6e:c9:81:63:fe:a9:95:f0:6c:
                    88:ae:27:2c:0c:a2:a9:e8:f7:67:08:39:1b:b1:2b:
                    2e:b5:12:a7:91:b2:6d:2c:0c:43:06:da:36:f3:11:
                    d4:9a:ef:4f:50:d1:c8:3d:d4:b8:eb:0e:ae:77:cc:
                    4d:42:b5:b9:fe:3d:24:8c:8f:54:ed:e0:a6:f5:99:
                    0d:6c:cc:c7:37:23:dc:d7:e1:e9:08:91:e9:a3:7e:
                    56:21:73:e4:6c:76:51:8d:1f:17:32:d5:c0:d0:d9:
                    e8:37:51:a5:f8:03:b6:c4:aa:c5:a8:39:65:b6:f5:
                    98:ff:2e:67:09:fe:ec:25:16:d8:d9:d7:c8:3d:dd:
                    ef:8a:ed:eb:9e:75:24:7c:9b:06:b6:4d:40:b2:7f:
                    6e:62:4c:94:96:31:b4:f8:11:7d:84:b0:dc:13:59:
                    40:c4:7c:ae:63:65:67:31:da:88:24:c2:a6:65:0d:
                    98:2e:e4:f8:c1:5c:02:7d:45:ae:4f:93:9b:48:67:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:07:26:FC:FB:E7:79:AA:6E:C2:A6:61:72:73:95:0C:42:E1:60:F6
            X509v3 Authority Key Identifier:
                keyid:5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:47:b4:8c:81:dd:0e:85:e9:ca:ae:be:33:10:0f:71:21:9d:
         b1:3f:3a:62:cc:bb:68:bd:2f:72:3e:eb:22:90:19:db:6c:f1:
         ae:fa:1d:63:2e:c0:de:9e:c3:bc:bb:54:4b:e2:ad:cd:16:1e:
         65:01:7b:65:74:4f:aa:71:eb:e9:3a:89:4b:86:f2:6e:db:33:
         ae:bb:22:7b:5d:3d:7c:d6:95:e7:6a:ce:f6:64:1b:db:5d:af:
         74:0f:51:86:d0:1b:c0:83:17:86:d0:fe:bd:77:95:7b:91:dc:
         0d:49:28:ec:44:f8:cc:ad:4c:66:26:99:d1:de:5f:d2:b2:9e:
         60:1f:36:e7:ff:90:f2:1e:3f:81:08:86:58:16:05:89:ba:dc:
         75:21:bb:9a:bf:e9:c9:de:e5:19:43:18:27:30:51:e1:bd:d3:
         f1:7a:d6:83:da:5c:d1:b1:da:72:9c:0f:61:c0:38:43:a0:7a:
         b8:b3:2a:a8:d4:59:19:75:97:e9:5a:bf:5b:e0:85:ce:ca:e5:
         05:01:0e:2d:33:bb:b3:d7:af:6c:6c:be:f4:2c:0d:82:fa:e7:
         7d:6b:45:21:98:33:f4:75:1c:f1:ed:04:39:c5:80:e8:23:9b:
         ce:01:97:e7:d2:4c:7a:8f:b3:42:24:20:03:06:57:d2:68:bb:
         cf:d0:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:19:23 2025 by rpki-client