Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
File:                     eSy8N9dE2IS2DsRH6irH5M2yLX0.mft (raw, json)
Hash identifier:          V2dv+iT4uToTR0CVLuaNFlH4QGsVG4aNUqK79iLxLFw=
Subject key identifier:   DB:D9:30:AF:28:04:8C:E7:35:24:80:E5:50:16:E7:66:E5:F0:B9:AC
Authority key identifier: 79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D
Certificate issuer:       /CN=F36BBC36AF/serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
Certificate serial:       04E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
Manifest number:          04DD
Signing time:             Sun 15 Jun 2025 02:50:40 +0000
Manifest this update:     Sun 15 Jun 2025 02:50:39 +0000
Manifest next update:     Tue 17 Jun 2025 02:50:39 +0000
Files and hashes:         1: eSy8N9dE2IS2DsRH6irH5M2yLX0.crl (hash: LVU7RHjLtE/Y/NtyS5hSPn6H+Ggtj5uqLsQ7T5j7Vpk=)
                          2: 5EB5E646D39211ED825065A9F1222468.roa (hash: ZAIRQP9yJ1tOCU5JQaOiSQZlgWyUtcOGOqQGSm6r4Qc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 02:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1248 (0x4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBC36AF, serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
        Validity
            Not Before: Jun 15 02:50:39 2025 GMT
            Not After : Jun 17 02:50:39 2025 GMT
        Subject: CN=684e3500-4af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:5e:e6:bd:04:01:c7:4d:08:b6:78:a8:21:
                    ee:8e:1a:1b:94:af:0c:bb:29:51:09:3d:dd:b1:65:
                    c6:d3:21:30:6e:38:64:24:82:de:67:25:c6:70:04:
                    12:d5:b1:05:51:22:a8:61:44:41:22:73:40:83:25:
                    d3:f2:dc:d1:3d:54:c5:e3:bd:43:0f:3b:3a:5e:97:
                    dc:d2:9f:ac:2f:c9:7c:09:6a:32:7f:8d:a8:41:e1:
                    9b:34:ee:07:3e:88:c0:67:98:7c:b5:a3:28:90:e1:
                    12:1f:1d:3f:9d:fc:6a:f2:c9:b5:6f:08:d0:11:43:
                    b5:33:b3:ef:e7:ee:67:60:f3:a8:47:77:f5:38:03:
                    81:61:16:24:3e:7a:fe:98:29:4b:a8:cb:f9:45:60:
                    c1:20:73:5e:de:ff:0a:95:82:63:0a:b6:91:08:55:
                    9b:da:61:8f:78:44:96:17:9b:7a:3b:68:03:d9:04:
                    fa:10:88:18:03:93:ea:90:f7:ae:bb:2d:c3:9c:e7:
                    52:7f:e4:6f:d0:9f:4f:bb:0d:7c:bb:80:62:30:78:
                    b5:42:fb:cc:9d:80:a3:0e:87:2b:cc:26:bf:1d:51:
                    ea:3d:5f:f7:8f:ff:f7:00:84:e6:0b:dc:6c:57:1a:
                    36:1f:d9:16:fe:87:b2:0e:54:d8:ff:4e:23:fe:79:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:30:AF:28:04:8C:E7:35:24:80:E5:50:16:E7:66:E5:F0:B9:AC
            X509v3 Authority Key Identifier:
                keyid:79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1d:6d:5b:09:80:6b:31:e3:71:e4:e3:ca:a8:65:66:db:34:
         30:e6:ac:55:ba:bf:25:9c:4b:53:90:17:fb:f8:00:6c:1c:23:
         78:da:73:2a:54:15:64:65:4d:23:33:d7:be:1a:d6:a0:68:53:
         5c:52:8e:67:d4:b3:69:6b:aa:59:30:30:19:93:ce:91:0d:c6:
         ad:b8:93:95:99:93:ee:a8:dc:09:bf:5b:c1:d8:32:c2:38:fd:
         5b:dc:c8:3a:8b:96:3d:49:1b:ef:c7:1d:ad:aa:80:39:cc:ec:
         fd:e6:e6:1c:ff:04:4b:3c:9c:58:57:5d:dd:ea:bf:87:a9:40:
         18:73:06:b6:b5:4a:49:74:07:5d:73:33:ad:6f:c5:b6:a7:c0:
         72:33:33:74:30:24:a9:e0:26:65:bb:a9:74:51:2e:32:78:b3:
         d7:8e:d2:13:2a:3a:03:a4:f6:c4:2e:f9:8b:36:6d:54:5f:95:
         7b:9c:a8:cc:25:f0:fe:7a:0a:45:8b:d3:eb:ee:60:85:dd:1f:
         b7:cf:88:f1:05:4c:fc:87:c9:07:03:bd:8d:22:d2:d2:a6:cd:
         3b:e1:1f:17:7a:66:1e:72:8a:27:26:4c:71:8f:b5:e2:4e:5e:
         36:ce:61:51:32:6c:fc:65:2b:44:47:0f:4d:4b:87:a3:d4:a0:
         92:78:74:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:23:36 2025 by rpki-client