Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
File:                     pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft (raw, json)
Hash identifier:          4L5sVsno4twHVpQ2x1U+OADYLsscihz1WeJSNE5OUbw=
Subject key identifier:   AE:32:4C:13:85:E1:72:D6:B5:92:6C:D0:13:18:4A:79:C2:83:4A:11
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Certificate issuer:       /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial:       0121
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
Manifest number:          011E
Signing time:             Sun 15 Jun 2025 04:56:56 +0000
Manifest this update:     Sun 15 Jun 2025 04:56:55 +0000
Manifest next update:     Tue 17 Jun 2025 04:56:55 +0000
Files and hashes:         1: pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl (hash: yLsaCDVPUUdqy+JOBdxohusvJdLe93hvXuHjMUJeVSA=)
                          2: 3D6B042477A311EF8B65448C762E951A.roa (hash: TQ2pYgQMjddwwjuMRvhC7oG/YTmFbZhFUDTK4ehlRyY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6CA3AF, serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
        Validity
            Not Before: Jun 15 04:56:55 2025 GMT
            Not After : Jun 17 04:56:55 2025 GMT
        Subject: CN=684e5298-7090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:83:b6:e3:70:25:09:c8:7a:ea:95:1e:56:
                    84:f0:c8:5c:39:8b:0a:0b:64:f8:88:5e:22:a4:a8:
                    7a:00:2f:be:31:e6:02:0e:da:c1:65:d5:17:36:35:
                    b2:f6:e0:12:e4:f6:06:71:14:2c:37:c6:53:02:79:
                    ee:52:9f:4f:7f:5b:93:6f:51:f9:42:93:0e:83:1a:
                    ce:d0:98:b1:f7:40:55:17:cf:e8:e4:b4:ff:2b:00:
                    7f:16:8b:c7:82:7a:a7:3a:5c:55:50:b2:16:51:8a:
                    61:53:39:ca:31:62:6b:0c:45:5b:02:fd:76:7e:07:
                    2f:e8:07:6d:bc:39:99:f8:72:04:3b:ff:b2:4b:35:
                    aa:c3:54:82:11:8d:6a:78:30:e4:3c:56:c0:57:7f:
                    7d:00:d2:f0:ca:08:78:82:f4:33:9b:b6:ac:a4:41:
                    78:b0:0c:5d:96:f1:5f:a9:b7:14:d0:31:75:88:cb:
                    5d:66:b3:dd:1b:5d:c6:44:05:71:26:38:90:a6:b1:
                    c6:b7:5a:65:e2:39:fc:90:3a:3f:0a:b5:ac:2b:67:
                    45:76:bf:8b:3e:92:73:86:e3:37:f2:a5:dc:dc:84:
                    db:27:fa:b9:4c:be:0c:99:99:9a:ab:3d:9c:f1:c4:
                    d3:20:04:48:e1:67:3b:2d:dd:b6:71:f7:5c:1e:f4:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:32:4C:13:85:E1:72:D6:B5:92:6C:D0:13:18:4A:79:C2:83:4A:11
            X509v3 Authority Key Identifier:
                keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:f9:a7:89:6d:50:b2:7b:f1:fd:3f:d6:11:fb:f7:6b:a1:
         8e:c0:07:df:81:0a:53:28:5c:6a:6c:0c:e3:71:94:66:92:3b:
         5f:57:d0:0a:52:d6:49:07:98:27:ed:27:8a:a6:59:ae:a7:d2:
         75:2f:a1:74:e7:e7:71:c0:5b:45:24:cc:39:8f:18:f4:5a:e5:
         bc:a7:ea:2a:5a:2d:76:8c:90:01:3f:1c:83:8e:a4:68:b7:04:
         d5:59:b8:59:e3:90:bc:40:47:a0:31:5c:87:80:de:35:cd:4e:
         4f:96:a5:e2:f1:07:ae:f1:f8:9d:be:4b:7e:12:43:90:22:39:
         27:47:ec:8d:ea:d7:a4:fd:0b:4c:37:69:5d:3e:9d:81:01:d6:
         0b:db:b3:10:df:47:c0:ef:6d:f6:fd:e1:ea:4a:58:62:a5:b5:
         89:05:c0:e1:a3:17:94:74:c1:6e:d3:f4:78:5f:f2:49:5c:74:
         73:3b:ff:d3:ef:f7:c3:7a:b7:e5:ee:ae:15:dd:08:41:76:53:
         fe:c0:4d:dd:56:60:df:8b:70:73:87:a3:07:d3:13:62:39:c2:
         b3:ee:27:63:e2:e3:1e:81:51:79:3b:cd:a2:9e:77:bb:ae:b8:
         e3:bb:db:d2:85:19:4e:53:c0:0e:6b:3a:a0:d7:5b:86:53:b2:
         33:c2:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:25:55 2025 by rpki-client