Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
File:                     4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft (raw, json)
Hash identifier:          2ckZxETGaAORFg5bJhqGPAix8Bht5nTfx7KSWvAYpCo=
Subject key identifier:   32:4E:54:75:D5:6A:DA:9F:55:CE:5C:28:19:B4:41:9C:0E:8C:45:60
Authority key identifier: E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
Certificate issuer:       /CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Certificate serial:       0248
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
Manifest number:          023C
Signing time:             Fri 20 Jun 2025 04:15:55 +0000
Manifest this update:     Fri 20 Jun 2025 04:15:54 +0000
Manifest next update:     Sun 22 Jun 2025 04:15:54 +0000
Files and hashes:         1: 4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl (hash: FVVRwGrqPPKzmk2MQjQudjt3bg8GJweWAmah214T+j8=)
                          2: 593B925C596E11EFAD90467E762E951A.roa (hash: Z5CYZ2IOfV8aBkJsq9QO/61cXj1PNQGbmsacp+Lx38Y=)
                          3: 90A7FF96596E11EFB7B89980762E951A.roa (hash: Jct/DE7jbdzag1sJ78KOFrSil6rAnNvZrf+Ryhzlfqk=)
                          4: C60C59567D8711EF97D7ACB4762E951A.roa (hash: qjux6GhSq9uX5DCNJbFQuyrkaPLVantCfSfpdQCqZvM=)
                          5: 24A9CB30596E11EFA89A0E7E762E951A.roa (hash: eSokWiFbXZKHYJAeMCSCb+kdTU9P/gdQpCGsPx3aeF0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 22 Jun 2025 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3A58AF, serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
        Validity
            Not Before: Jun 20 04:15:54 2025 GMT
            Not After : Jun 22 04:15:54 2025 GMT
        Subject: CN=6854e07b-04d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:e4:86:fc:44:a7:51:cf:b2:14:0f:eb:8a:
                    dc:53:34:39:77:35:2e:ff:2b:1f:65:35:ab:41:9b:
                    ca:0a:90:e7:fa:b6:91:51:29:cf:c1:86:cd:2c:46:
                    4a:05:f3:1e:4a:b8:0f:7f:c4:55:7a:3a:07:1d:a9:
                    9c:e6:61:bb:eb:20:86:ff:8f:b3:b2:09:38:6d:c7:
                    94:e3:c4:07:d6:f9:cb:7a:f6:07:d6:96:48:2e:42:
                    58:6a:79:43:95:9f:ea:1a:ee:d9:10:c4:df:e9:e5:
                    0c:ad:ec:63:a8:dc:9d:8d:e1:7c:f3:55:af:a8:48:
                    16:33:7c:5d:55:bd:c1:1e:01:6e:89:11:b2:b1:b4:
                    ee:8a:13:33:5c:66:1d:61:38:25:7d:ce:26:60:c5:
                    da:67:5a:0a:04:36:53:b5:14:c2:f1:0c:7c:89:f8:
                    d5:be:19:93:90:3b:a5:21:cf:9d:32:42:24:4a:3e:
                    4d:1a:31:93:20:dd:58:5c:85:3a:da:ab:c5:ad:77:
                    e3:6b:70:f2:d1:86:6a:ad:a2:fe:c2:15:8b:24:2a:
                    0e:19:1c:d8:67:3a:5c:69:f1:a3:51:62:c7:17:29:
                    07:90:91:63:49:58:64:a8:7a:ad:b8:bc:28:28:83:
                    75:bd:3b:f9:f7:3b:6c:fa:61:6d:2b:9c:77:f0:84:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4E:54:75:D5:6A:DA:9F:55:CE:5C:28:19:B4:41:9C:0E:8C:45:60
            X509v3 Authority Key Identifier:
                keyid:E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:69:91:4d:ed:06:fb:28:74:7e:e6:fc:d8:07:9e:d7:7f:
         00:d5:ed:f0:cf:fd:b0:a4:c6:2c:ed:95:40:1c:f7:eb:43:2a:
         62:4d:c7:31:dc:0d:26:e3:ad:9c:5e:60:ba:4f:02:7f:67:a3:
         34:bb:b0:56:6c:52:0d:16:d8:9a:d0:b8:f8:7c:35:01:d2:19:
         f8:c9:59:1e:88:e0:94:cd:99:c8:09:4f:24:a4:96:df:78:5d:
         c4:3d:74:f3:d5:40:60:89:6c:57:74:7e:12:ee:4c:d3:d0:9e:
         71:33:9d:c1:85:ea:1f:62:f0:54:de:d9:3b:39:16:eb:7e:98:
         ff:22:9d:be:55:bb:ba:8e:25:c0:f8:bb:20:05:0e:db:bf:66:
         9b:27:06:fa:28:51:47:88:da:bc:58:21:f4:2c:99:2f:d0:41:
         ec:99:0c:74:7b:fb:62:4f:65:29:e3:ab:a7:0a:62:51:e1:8e:
         33:e9:54:51:90:6f:37:d1:3d:35:fb:0b:72:fc:83:82:98:02:
         35:97:0b:f7:63:ba:23:8a:a6:ba:88:f4:cb:8a:9a:d1:c8:b8:
         a4:d6:73:05:c0:94:2e:5b:b1:c0:ac:62:07:9e:70:15:7b:64:
         c7:79:63:d1:ca:e0:91:0b:ce:cf:af:15:51:29:5a:7c:23:05:
         61:fd:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:40:27 2025 by rpki-client