Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
File:                     G-LsVuSB2cQGqMGrnFIvumhbdwk.mft (raw, json)
Hash identifier:          0CreK77haqs6AT5LZUGGBFXIIrY8IGtzaqmAmQhabeE=
Subject key identifier:   86:6B:CB:04:63:17:5A:FE:D0:59:4E:D1:0D:73:C6:EB:D4:F8:A0:E1
Authority key identifier: 1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09
Certificate issuer:       /CN=F36C8DB2AF/serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
Certificate serial:       09BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
Manifest number:          09B9
Signing time:             Mon 16 Jun 2025 01:19:50 +0000
Manifest this update:     Mon 16 Jun 2025 01:19:49 +0000
Manifest next update:     Wed 18 Jun 2025 01:19:49 +0000
Files and hashes:         1: G-LsVuSB2cQGqMGrnFIvumhbdwk.crl (hash: OLwBX2CK089cVTqXFohdhSN4OSMSIb3eeI/PjmFCbzM=)
                          2: 3A5D54C8064011EF8CD97956017001B1.roa (hash: 9/mp/JPe+mMfGz2E8/eg18PGdN/V1h9ltv/VJ2aQXwQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8DB2AF, serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
        Validity
            Not Before: Jun 16 01:19:49 2025 GMT
            Not After : Jun 18 01:19:49 2025 GMT
        Subject: CN=684f7136-0e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dc:e5:e6:76:b0:6b:55:fc:4f:f7:87:e6:a2:
                    37:a4:f2:52:9e:07:5c:c4:c4:42:58:53:2e:cf:c1:
                    84:16:1e:aa:e5:9d:b6:19:de:93:39:2c:e8:9f:6c:
                    c1:f6:4a:4f:63:b5:07:df:01:02:8d:9b:95:77:f8:
                    06:de:c4:88:df:f1:70:4b:b1:98:b1:c0:51:44:78:
                    c0:33:d5:c7:5d:d2:6e:42:f2:cc:c1:5b:3c:de:46:
                    9d:e0:ad:db:18:af:14:31:b5:d5:82:b8:84:c8:20:
                    df:1a:73:a8:b3:b5:9b:39:70:5f:32:5f:2c:8c:7f:
                    e8:8e:5d:65:be:9b:5a:67:e1:fe:95:7b:49:63:87:
                    79:12:53:37:0f:a9:16:51:90:6f:67:09:e2:24:24:
                    61:06:b0:61:8b:fe:20:6c:ca:16:d2:55:41:23:5a:
                    e3:6d:1e:a8:f2:6b:66:f2:c1:1a:2d:40:e6:a9:f0:
                    95:a9:10:2a:00:d2:e9:a5:a2:40:50:90:22:9d:68:
                    ae:86:d0:cc:b4:82:31:b8:ea:b6:32:73:58:c5:43:
                    65:4a:cb:60:41:69:62:c4:2c:a4:6e:db:e5:83:0a:
                    b2:d6:a3:19:82:0e:cc:9e:c0:c2:c8:3d:bd:5b:1a:
                    c7:04:3e:a4:16:80:c3:c7:ab:f3:fe:16:1a:66:81:
                    9d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6B:CB:04:63:17:5A:FE:D0:59:4E:D1:0D:73:C6:EB:D4:F8:A0:E1
            X509v3 Authority Key Identifier:
                keyid:1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5c:36:0c:f7:c0:72:11:bf:fc:46:8e:f5:fa:c5:30:28:c2:
         b4:f1:85:1c:ce:04:b0:bc:b2:05:e2:e2:fa:d2:a5:b9:b8:f8:
         2f:5b:f9:1e:0a:2d:8f:18:30:ce:f2:85:14:02:ac:2a:ae:78:
         89:01:cd:d3:57:8a:49:eb:a8:b1:c3:5a:6d:15:73:81:3c:dd:
         f7:5e:c2:de:96:59:44:c0:49:c5:5a:26:c6:ae:7d:a1:93:fc:
         46:6c:4f:39:d6:71:e5:15:10:22:b0:8f:2d:9c:1c:ca:c4:d1:
         58:d9:9c:28:a8:e9:cc:9c:87:af:44:b0:7d:a9:8a:62:58:fb:
         53:75:25:99:33:f9:13:3f:f8:00:90:89:04:9f:0c:d9:41:a8:
         65:8d:6f:08:8a:a2:f4:e4:39:ec:a7:82:6a:fa:80:2b:7c:ed:
         41:a2:b7:64:18:90:24:dd:42:3d:0a:05:ca:e0:d0:9f:18:40:
         7d:62:4d:29:ba:b6:f7:93:82:d4:eb:c6:17:c9:f8:79:c7:6d:
         8d:b4:d5:fd:3d:25:98:a9:a4:5b:e2:c6:3c:d4:97:32:f8:26:
         ef:67:36:80:d6:80:3c:f5:20:6f:4d:49:fb:a9:f6:f3:c2:73:
         b9:28:2d:44:19:3d:f0:bf:9b:89:ff:7f:11:54:5b:97:c7:40:
         ba:9f:95:4c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzhEQjJBRjExMC8GA1UEBRMoMUJFMkVDNTZFNDgxRDlDNDA2QThDMUFCOUM1MjJG
QkE2ODVCNzcwOTAeFw0yNTA2MTYwMTE5NDlaFw0yNTA2MTgwMTE5NDlaMBgxFjAU
BgNVBAMTDTY4NGY3MTM2LTBlNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQ3OXmdrBrVfxP94fmojek8lKeB1zExEJYUy7PwYQWHqrlnbYZ3pM5LOif
bMH2Sk9jtQffAQKNm5V3+AbexIjf8XBLsZixwFFEeMAz1cdd0m5C8szBWzzeRp3g
rdsYrxQxtdWCuITIIN8ac6iztZs5cF8yXyyMf+iOXWW+m1pn4f6Ve0ljh3kSUzcP
qRZRkG9nCeIkJGEGsGGL/iBsyhbSVUEjWuNtHqjya2bywRotQOap8JWpECoA0uml
okBQkCKdaK6G0My0gjG46rYyc1jFQ2VKy2BBaWLELKRu2+WDCrLWoxmCDsyewMLI
Pb1bGscEPqQWgMPHq/P+FhpmgZ3dAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhmvL
BGMXWv7QWU7RDXPG69T4oOEwHwYDVR0jBBgwFoAUG+LsVuSB2cQGqMGrnFIvumhb
dwkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM4REIyL0ZFRkFCMTg4REM0MTExRThBRjRFQUY1NUY4QUVBMjI4L0ctTHNW
dVNCMmNRR3FNR3JuRkl2dW1oYmR3ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ctTHNWdVNCMmNRR3FNR3JuRkl2dW1oYmR3ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzhEQjIvRkVGQUIxODhEQzQxMTFFOEFGNEVBRjU1RjhB
RUEyMjgvRy1Mc1Z1U0IyY1FHcU1Hcm5GSXZ1bWhiZHdrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUXDYM98ByEb/8Ro71+sUwKMK08YUc
zgSwvLIF4uL60qW5uPgvW/keCi2PGDDO8oUUAqwqrniJAc3TV4pJ66ixw1ptFXOB
PN33XsLelllEwEnFWibGrn2hk/xGbE851nHlFRAisI8tnBzKxNFY2ZwoqOnMnIev
RLB9qYpiWPtTdSWZM/kTP/gAkIkEnwzZQahljW8IiqL05Dnsp4Jq+oArfO1Bordk
GJAk3UI9CgXK4NCfGEB9Yk0purb3k4LU68YXyfh5x22NtNX9PSWYqaRb4sY81Jcy
+CbvZzaA1oA89SBvTUn7qfbzwnO5KC1EGT3wv5uJ/38RVFuXx0C6n5VM
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:57:25 2025 by rpki-client