Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
File:                     nZEfOSNannHK5JlXppouUkKg3TU.mft (raw, json)
Hash identifier:          Xbk+MmUlfBtpdlcTbaiM84kU322gblEyEpjn3kj8Gtc=
Subject key identifier:   98:A8:68:37:F6:FE:C6:03:6A:11:41:FC:94:EE:B7:4D:AE:59:59:50
Authority key identifier: 9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
Certificate issuer:       /CN=F36B4CC8AF/serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
Certificate serial:       0209
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
Manifest number:          0207
Signing time:             Thu 01 May 2025 04:13:46 +0000
Manifest this update:     Thu 01 May 2025 04:13:45 +0000
Manifest next update:     Sat 03 May 2025 04:13:45 +0000
Files and hashes:         1: nZEfOSNannHK5JlXppouUkKg3TU.crl (hash: 1MOpB/ZawM2+Y/YhEcUq/FlY68iLEL2WpA/rzWPO+R0=)
                          2: 6B19BD749DA711EE8B40AC5ED25BE465.roa (hash: NgzSPsDLZHTS8GcIuQL4M+RUtb2W4HialOJ/KKr08S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 04:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4CC8AF, serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
        Validity
            Not Before: May  1 04:13:45 2025 GMT
            Not After : May  3 04:13:45 2025 GMT
        Subject: CN=6812f4fa-b845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:89:f2:df:fb:0a:1e:da:98:c1:71:41:af:
                    32:3c:b7:1d:b9:08:b9:c3:0b:ae:a4:5d:8c:dc:a1:
                    08:6d:39:c9:3e:f0:21:ab:a6:f7:76:08:1e:8f:e6:
                    c6:7e:5b:d6:99:02:a0:08:ce:10:a7:bc:24:bb:ad:
                    61:96:78:a0:7c:12:f8:cb:d1:54:31:ea:0a:03:bd:
                    da:30:12:ef:4b:c3:50:da:fb:db:6f:02:6c:a1:ba:
                    be:e3:c2:f9:96:a1:77:c6:46:ac:1b:29:58:95:d2:
                    18:f4:24:8f:27:48:fc:47:fa:e2:76:9d:21:40:ef:
                    55:d6:5d:09:d2:46:41:04:da:ff:7a:22:d2:61:d2:
                    63:0a:b8:61:0b:92:a4:b3:24:9c:09:eb:cb:9d:32:
                    2f:db:b3:12:38:1b:a5:a9:bb:4e:3c:01:ed:c4:2c:
                    38:1d:98:4e:93:05:76:6e:3c:ca:dd:aa:9e:a9:56:
                    06:43:74:0d:0d:03:1e:83:79:ff:69:87:6a:01:f9:
                    76:75:00:98:d9:ba:10:25:36:c6:aa:4f:78:c7:1f:
                    85:43:df:c5:17:5f:84:91:d8:72:83:8e:07:d1:a7:
                    25:9d:37:6d:de:36:68:99:dc:75:4a:d0:d1:26:50:
                    5b:ce:b9:6b:8c:80:22:e8:b7:78:e2:2a:a6:bf:a4:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A8:68:37:F6:FE:C6:03:6A:11:41:FC:94:EE:B7:4D:AE:59:59:50
            X509v3 Authority Key Identifier:
                keyid:9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:21:b5:66:c6:3e:14:eb:95:9d:19:f0:88:94:9e:37:ca:52:
         89:b1:fc:1a:26:ff:5c:5d:5f:e8:09:00:7f:45:4a:88:62:34:
         42:83:44:6d:bc:af:5e:f1:9d:7e:91:97:9c:59:e8:2e:ed:2c:
         c5:1c:7b:71:2e:81:05:75:ff:d4:a5:b6:91:5a:c5:73:f5:27:
         71:8a:61:6d:fe:eb:52:2e:3e:cb:96:88:a2:5f:77:7e:e2:da:
         f0:87:70:7c:4c:31:77:7c:4b:29:93:a0:52:b4:13:a6:2c:3e:
         8f:69:97:ed:01:12:b4:6e:2a:9c:30:c8:a9:7e:7f:72:e7:1e:
         68:64:c1:82:f3:bb:64:e5:28:4e:d7:44:2f:32:39:4e:98:6f:
         d3:2d:11:99:7f:1e:14:5a:70:8a:67:85:5d:ab:67:be:a8:62:
         d4:69:60:e2:98:70:91:d0:8a:6c:6e:7f:34:e5:26:18:25:88:
         e9:ae:a2:e7:8f:a6:d6:f0:3e:ee:b6:10:6d:fd:7f:45:f9:5e:
         17:28:a2:d6:dc:99:c0:f2:a0:75:91:34:e9:2d:53:8a:fe:31:
         c8:d5:41:f6:7f:e6:fe:f0:2e:05:f1:75:4a:b2:64:ee:2f:5e:
         48:db:a6:f1:47:72:40:be:59:52:03:c3:72:54:87:a9:7b:c2:
         1e:b5:0c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:35:20 2025 by rpki-client