Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
File:                     uHhAHkl1TlCh8pefEijlQVr3hcs.mft (raw, json)
Hash identifier:          Jqk0GeoZqJqBKG4oJgU51cxhLzEKyl60jzS+RZ3L5Cc=
Subject key identifier:   91:41:B9:2C:F4:C6:12:6A:83:CE:6A:B6:20:34:33:50:72:F2:10:63
Authority key identifier: B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
Certificate issuer:       /CN=F36D06FDAF/serialNumber=B878401E49754E50A1F2979F1228E5415AF785CB
Certificate serial:       67
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
Manifest number:          65
Signing time:             Tue 29 Apr 2025 05:10:05 +0000
Manifest this update:     Tue 29 Apr 2025 05:10:04 +0000
Manifest next update:     Thu 01 May 2025 05:10:04 +0000
Files and hashes:         1: uHhAHkl1TlCh8pefEijlQVr3hcs.crl (hash: JpnTGHDM1731uCzOwro3xAugxRwe6W+FYaJSQn3Pll8=)
                          2: D378C19EDB2C11EF97120DAA762E951A.roa (hash: XvBxie++FSr21ud0Lfttnl+zogzSereMyWWkFD2zdWI=)
                          3: 7E8F4432DB2C11EFB85EEEA5762E951A.roa (hash: 0iUpszT2w0fm3mXYVrua9cWk6MIv4HV5O6NkTkk5EUY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 May 2025 05:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D06FDAF, serialNumber=B878401E49754E50A1F2979F1228E5415AF785CB
        Validity
            Not Before: Apr 29 05:10:04 2025 GMT
            Not After : May  1 05:10:04 2025 GMT
        Subject: CN=68105f2d-4229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:d4:c9:1d:59:e2:12:10:c3:43:08:ad:1f:
                    a6:7e:c7:2b:3f:b5:08:ce:e0:bb:32:0f:3a:d9:56:
                    58:2d:2d:48:7d:79:5f:52:36:23:0a:f1:0b:da:f4:
                    4c:36:e8:e1:80:ec:c2:60:5c:cf:c0:d4:39:fe:2c:
                    6c:fa:31:80:da:ce:59:db:8f:27:49:83:d8:dc:8e:
                    f7:22:d9:4a:06:95:7e:84:55:bb:45:b3:b2:ba:ae:
                    cc:9b:f8:04:da:b5:eb:8c:29:ee:d9:64:67:3e:76:
                    9d:e7:bc:13:e8:6f:d2:f6:f5:f9:e6:65:b4:67:62:
                    15:be:55:79:36:c2:0e:28:b7:b9:f2:36:13:94:24:
                    14:8a:23:6d:db:cf:30:42:a5:b6:1b:7e:74:a6:02:
                    e3:9f:6e:7d:71:d9:88:cb:4e:45:b7:06:cd:80:c5:
                    56:8f:7f:06:79:d0:a3:ee:99:d3:19:dd:5f:1c:51:
                    e4:52:75:31:35:ff:dc:56:b6:aa:ba:a5:76:1f:65:
                    1c:a7:b9:97:3a:4f:33:3e:1f:7a:f6:99:f1:81:20:
                    82:f4:a2:d6:c7:88:20:46:fc:47:50:c4:ae:a4:cb:
                    aa:ae:68:71:e6:43:a0:ea:07:43:fe:91:bf:75:cf:
                    9b:38:63:9d:8f:b5:d7:5f:fa:35:cf:d6:2d:82:e5:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:41:B9:2C:F4:C6:12:6A:83:CE:6A:B6:20:34:33:50:72:F2:10:63
            X509v3 Authority Key Identifier:
                keyid:B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:dd:d2:84:ff:b5:41:e5:0c:48:e0:d5:fd:f3:78:10:2f:29:
         29:b7:5a:70:16:54:4d:38:0d:f4:52:9c:0b:26:6a:92:5d:bb:
         55:64:ee:12:d4:b0:31:7b:ca:cc:f0:3b:eb:23:f7:21:33:b5:
         9e:96:04:ab:41:e3:2b:f0:28:5d:36:b9:98:82:f9:1f:b5:3f:
         c0:7e:39:73:2f:72:dd:73:cf:23:4c:5f:27:41:eb:18:9d:b1:
         71:0d:9f:df:30:9b:54:ff:f9:e1:90:14:c7:2a:44:4c:ee:22:
         55:56:58:97:e2:99:31:23:06:28:ec:de:34:bd:ea:ad:06:a0:
         1e:59:a1:92:db:7f:f4:67:d4:2d:4c:7c:38:77:52:e8:65:31:
         54:2c:e7:c4:6b:32:c3:a9:b2:d2:cf:78:43:63:6f:39:81:d5:
         e7:ba:22:93:a9:44:7d:12:66:47:b2:74:f1:04:3f:0f:46:de:
         a6:d7:f2:60:5b:b0:1c:38:db:37:c6:d9:a8:ba:bc:f5:1e:c4:
         3a:d6:1d:b9:ec:41:66:f0:d6:3a:fe:88:28:c4:79:f7:10:3d:
         df:58:28:b5:fe:05:c8:d0:d6:f9:eb:92:ba:4d:99:3e:8a:15:
         87:0b:5f:1b:f8:ee:87:4f:ef:e9:ca:4b:34:e8:72:17:5e:3a:
         ca:27:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:24:38 2025 by rpki-client