Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
File:                     HIATGRbyhVyxdDXLrvJmjeFVlsE.mft (raw, json)
Hash identifier:          k8ySL3n8R1eFPf302tLxU42bbPTJgnML6h5TCMpVzok=
Subject key identifier:   16:44:E0:BB:EC:06:B9:FF:B5:A1:D5:AB:D9:BA:FB:45:D9:20:FE:9F
Authority key identifier: 1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1
Certificate issuer:       /CN=F36CB8DFAF/serialNumber=1C80131916F2855CB17435CBAEF2668DE15596C1
Certificate serial:       021C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
Manifest number:          021B
Signing time:             Sun 27 Apr 2025 04:10:59 +0000
Manifest this update:     Sun 27 Apr 2025 04:10:58 +0000
Manifest next update:     Tue 29 Apr 2025 04:10:58 +0000
Files and hashes:         1: HIATGRbyhVyxdDXLrvJmjeFVlsE.crl (hash: p6dUfMMLqu+TddwaZ4wLKUmgCMUOYZLcGsV/QQmruEQ=)
                          2: 27E171828AA611EEAADC55514AD9E6FC.roa (hash: 09dXVAcpXBeumVd3ejmIXPVt6jsUIfxATFT48+wvgGE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CB8DFAF, serialNumber=1C80131916F2855CB17435CBAEF2668DE15596C1
        Validity
            Not Before: Apr 27 04:10:58 2025 GMT
            Not After : Apr 29 04:10:58 2025 GMT
        Subject: CN=680dae53-6833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:0d:9b:23:16:42:61:ac:52:cf:ca:e8:8b:
                    e7:31:d1:00:42:24:4f:a6:e3:68:00:26:56:11:fa:
                    93:24:3b:43:fe:50:f1:60:b7:a4:c2:c0:0a:20:c1:
                    f5:14:64:fb:0b:db:70:29:80:b0:10:dc:c7:60:80:
                    59:50:5e:9b:c1:25:f3:c3:1f:89:84:4e:e0:7f:ac:
                    10:58:f7:e2:ff:d8:b8:ac:aa:1d:99:ec:ee:da:41:
                    08:3d:bf:29:6e:07:ca:87:0a:14:08:55:cb:77:24:
                    0c:75:a2:40:f2:97:74:9d:e8:5e:c2:cd:68:71:33:
                    4b:3c:38:83:07:8a:52:c3:a3:3c:d2:a6:7f:ff:3c:
                    ae:aa:da:7f:5f:a5:32:ba:1b:a2:69:ac:1c:ca:5c:
                    8e:e5:76:0f:8b:fd:b3:0a:50:44:ad:0b:da:eb:bc:
                    bc:23:84:c4:02:c5:40:09:bd:34:a8:fa:11:8a:17:
                    6a:d2:cb:5b:d8:80:05:53:b8:14:90:a4:51:cb:7a:
                    c4:bc:e4:8f:0a:ce:b5:a2:02:52:db:d2:30:9b:45:
                    b1:af:db:f9:b4:d7:d7:89:34:62:e4:35:1e:f5:c1:
                    15:ad:a2:96:af:d3:92:a0:4e:f5:4b:3e:2c:76:77:
                    ec:3d:4a:3b:12:31:82:bd:01:f1:5e:58:6d:de:ae:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:44:E0:BB:EC:06:B9:FF:B5:A1:D5:AB:D9:BA:FB:45:D9:20:FE:9F
            X509v3 Authority Key Identifier:
                keyid:1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:95:15:cc:aa:c0:4b:f8:ba:2e:6c:4a:6b:f3:f6:70:4d:fe:
         99:fd:e0:f0:09:1f:ff:fc:e5:2a:25:40:36:1b:03:d2:e9:d3:
         62:34:d8:d2:45:f0:5a:5a:1b:4d:9c:97:ba:92:dc:d0:bb:8b:
         fb:8e:90:4d:a2:93:a1:5c:b5:a0:10:d6:ee:82:19:56:a0:eb:
         36:94:aa:ab:6a:e9:d2:30:0f:34:38:ac:cb:60:dd:80:2a:68:
         3d:04:fe:5d:b6:91:25:a1:a4:16:fa:96:4c:c1:91:34:80:b7:
         8c:85:7f:1a:9e:72:2f:f7:9d:ae:33:94:b4:de:46:53:c4:8e:
         da:34:39:b6:ed:7e:5e:58:cb:43:b8:a4:f7:48:af:e0:ed:8f:
         b4:5e:2f:b4:a3:dd:63:9f:e1:b5:00:ab:1e:82:6a:8d:a8:36:
         0f:ea:49:9b:27:c8:a0:57:d8:b0:9d:f7:61:bf:c6:bc:f7:45:
         e5:d3:ee:aa:aa:e3:2b:ee:22:f3:d6:71:f3:f3:c5:ea:68:e3:
         5f:33:ea:b5:db:86:b8:e3:a0:8f:9a:08:db:d8:e8:d7:8b:c7:
         2d:21:df:ca:72:c6:7a:8c:4e:6e:0c:00:a8:c5:74:23:25:3c:
         ca:8a:4b:90:e1:77:8d:5c:a3:8e:4d:db:cb:4d:8c:80:ea:8a:
         cd:18:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:21:49 2025 by rpki-client