Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
File:                     wzA4fNIYxMz6UivFNddwdVvPe28.mft (raw, json)
Hash identifier:          Hm4hiv4Wv5hkSMnj8Ih0DLJWAw6pHqd0M/412bwNAo0=
Subject key identifier:   17:04:86:5B:A6:C3:A5:CE:8D:BA:C4:A0:5F:49:E4:5B:8D:5C:02:59
Authority key identifier: C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F
Certificate issuer:       /CN=F36D591BAF/serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
Certificate serial:       01B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
Manifest number:          01B3
Signing time:             Sun 27 Apr 2025 04:23:38 +0000
Manifest this update:     Sun 27 Apr 2025 04:23:37 +0000
Manifest next update:     Tue 29 Apr 2025 04:23:37 +0000
Files and hashes:         1: wzA4fNIYxMz6UivFNddwdVvPe28.crl (hash: onfM6o72uZ3nVRPSWft8DDZNRebb5UGTKgkcbxmkuXs=)
                          2: D27A6A28D7C111EE8A342CA3775412E6.roa (hash: peA4+LIUnTnNHVNJXvAgPW0H2f9Uqrwu8nzHISX24Zo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D591BAF, serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
        Validity
            Not Before: Apr 27 04:23:37 2025 GMT
            Not After : Apr 29 04:23:37 2025 GMT
        Subject: CN=680db149-e9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:0d:38:2d:70:d2:2e:e3:49:82:7f:11:d5:
                    96:2f:b1:cb:e6:c0:ef:6c:ef:9e:b2:13:52:3a:b0:
                    fa:cc:9d:c5:ce:ff:19:78:f5:b2:b9:6f:c9:15:1c:
                    a8:0f:5b:65:a8:88:65:a7:9c:b3:c8:17:69:af:53:
                    da:b6:ab:70:b0:49:b8:b4:95:64:bc:af:85:64:73:
                    8a:9d:e0:dd:75:23:bb:7a:a8:d3:f1:5f:45:ce:e7:
                    e5:20:b1:a9:73:53:f1:d6:5d:80:53:47:53:0a:bb:
                    ce:1b:0e:69:2f:66:da:a3:0b:c0:4e:6b:98:ee:1d:
                    da:ef:9d:ce:ae:c4:44:10:5c:7b:3e:bd:d6:34:68:
                    1c:ef:bd:e2:43:aa:c8:f1:b8:78:6f:99:05:50:eb:
                    09:0e:bf:c0:e9:70:bf:13:a3:51:c9:86:2a:d0:2d:
                    b8:83:01:12:61:e8:df:63:51:24:3b:1c:a5:7d:ee:
                    58:b6:1a:9d:92:bc:46:a7:65:42:1e:9c:5a:98:7f:
                    53:4f:cf:3e:62:0a:33:4f:f7:db:48:d7:07:03:a1:
                    ef:c2:8e:19:ec:c7:8f:0b:3d:0b:09:88:74:b4:e2:
                    e4:ed:5e:f5:39:de:24:1c:1d:49:28:fe:27:12:f1:
                    88:d1:a7:e9:2d:65:69:7f:32:b0:4d:18:6a:18:ee:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:04:86:5B:A6:C3:A5:CE:8D:BA:C4:A0:5F:49:E4:5B:8D:5C:02:59
            X509v3 Authority Key Identifier:
                keyid:C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d6:92:61:fa:b3:ae:aa:9d:6a:59:3f:c5:04:f6:ac:59:14:
         e4:66:e7:c2:3e:f6:69:72:c8:c0:e1:79:2f:32:62:9a:cb:7c:
         81:84:8b:a2:f3:c8:a9:0e:3d:26:de:f2:4f:1b:18:ce:dc:b0:
         7e:f3:da:00:b7:ec:66:de:a2:7c:99:89:28:b8:2a:9d:1d:07:
         ec:83:9d:67:7b:75:e8:e4:9e:72:00:a4:e0:0a:e2:e8:cd:41:
         68:37:3e:69:93:b6:cc:57:fc:aa:77:3c:78:d9:f7:7c:ac:9c:
         8d:93:bb:32:ef:66:fe:78:1a:e1:d2:d6:e2:03:aa:a0:ba:49:
         de:19:90:75:8f:2d:8e:b9:04:2c:71:4c:1f:b0:7f:e4:df:a5:
         54:29:e7:54:16:e3:12:b6:c9:c9:a1:22:51:99:4d:bd:77:d0:
         c2:bf:b8:63:67:ca:c8:88:f0:e1:2c:5c:4e:37:3c:73:9d:1b:
         f0:81:5c:6d:01:ce:10:ab:2f:b4:ac:d5:a0:16:af:ca:9c:9a:
         cc:6b:ce:1f:02:a4:23:78:59:a9:78:da:eb:e1:18:8d:10:28:
         69:53:d6:36:ea:60:ca:f9:95:e7:34:2f:af:ff:eb:9d:21:88:
         c8:f2:c6:29:21:20:25:da:43:17:ce:cb:b9:0b:64:41:3f:c2:
         50:4a:df:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:15 2025 by rpki-client