Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
File:                     JrOnWLLY0r61xvaBylvZJYx593c.mft (raw, json)
Hash identifier:          B9tWqK9iKNtnCsjuQXdQNfckJx1/fG2WcdLXGJiyT+Q=
Subject key identifier:   EC:8A:E1:BE:45:87:40:6D:5F:AF:B1:8E:63:D3:3E:9C:2A:0A:1A:D0
Authority key identifier: 26:B3:A7:58:B2:D8:D2:BE:B5:C6:F6:81:CA:5B:D9:25:8C:79:F7:77
Certificate issuer:       /CN=F36D8ADDAF/serialNumber=26B3A758B2D8D2BEB5C6F681CA5BD9258C79F777
Certificate serial:       0664
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
Manifest number:          0661
Signing time:             Mon 16 Jun 2025 02:10:31 +0000
Manifest this update:     Mon 16 Jun 2025 02:10:30 +0000
Manifest next update:     Wed 18 Jun 2025 02:10:30 +0000
Files and hashes:         1: JrOnWLLY0r61xvaBylvZJYx593c.crl (hash: QCCjtPKsxWaL1vxhBLwTtW/CSsOxu+F+j75k9B6UvsA=)
                          2: 8725BB28177111EF81A9096D017001B1.roa (hash: 88veSwgimt5nxNF8bDTfkfTQkyjEIh0wtn0t0fyF6v4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1636 (0x664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8ADDAF, serialNumber=26B3A758B2D8D2BEB5C6F681CA5BD9258C79F777
        Validity
            Not Before: Jun 16 02:10:30 2025 GMT
            Not After : Jun 18 02:10:30 2025 GMT
        Subject: CN=684f7d16-d97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:4d:f3:a7:01:5a:6b:f4:86:98:81:51:9c:
                    74:80:62:83:01:3d:4f:33:32:d8:70:9f:d9:07:a1:
                    97:0c:73:3b:b3:08:77:b3:16:ac:c1:e7:8b:12:f0:
                    3d:0e:7c:7b:04:04:ff:87:c3:c8:4c:28:3e:c4:9c:
                    a7:6b:1e:7d:9b:c2:e9:c2:49:3e:5e:22:6d:d4:24:
                    20:2b:59:a0:92:da:f3:d3:ba:ea:fa:d2:45:fa:97:
                    b2:bf:74:47:f1:a2:1b:5e:58:13:d1:dd:57:34:88:
                    ff:58:76:c5:95:5f:c6:4a:c0:71:f2:73:f9:f4:46:
                    4d:f8:dc:96:7f:ae:1f:46:66:ca:31:b3:2e:2f:5c:
                    59:f1:73:5e:ee:d5:aa:ed:5a:0f:2b:64:85:0f:64:
                    d4:13:31:b7:8a:ac:b4:66:e7:5c:53:dd:6c:b9:00:
                    a2:af:b4:fa:71:23:28:b4:e5:d7:c6:66:53:f3:62:
                    d7:9f:29:92:76:5d:52:eb:2b:b9:7e:fa:1c:f4:af:
                    7f:50:98:5e:54:0e:54:e8:20:12:40:2c:e4:b4:cf:
                    09:b0:41:3e:7f:7a:31:59:2f:53:52:18:c8:a5:95:
                    72:a8:a4:a7:ea:03:f6:e8:d3:2d:03:69:d9:eb:1d:
                    f6:2a:cf:55:b1:7a:e3:f7:c3:7b:8f:54:7d:06:d0:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8A:E1:BE:45:87:40:6D:5F:AF:B1:8E:63:D3:3E:9C:2A:0A:1A:D0
            X509v3 Authority Key Identifier:
                keyid:26:B3:A7:58:B2:D8:D2:BE:B5:C6:F6:81:CA:5B:D9:25:8C:79:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:23:86:ef:24:e2:8c:1a:5c:39:cf:be:95:35:88:76:8e:08:
         1d:97:0c:02:fb:dd:67:2e:fc:92:34:65:27:e4:c4:46:49:a2:
         b3:07:82:a5:a2:58:9d:35:70:f1:87:15:4b:6a:20:e6:14:b1:
         16:02:be:32:ac:f0:dd:d0:2c:2f:4f:22:c6:1f:c3:b5:08:f9:
         11:81:bc:e2:e1:5b:17:a1:32:d0:84:83:ed:98:6c:89:2c:56:
         f2:64:b7:74:bf:a5:fb:9c:f0:b6:3c:0e:58:33:5f:d8:ff:13:
         4a:5d:e3:50:4b:36:67:7d:a3:07:e0:80:09:82:dc:7c:c9:b2:
         e6:55:90:b9:44:c1:68:39:7b:52:25:e8:9a:3c:f3:97:d0:18:
         f4:39:43:d3:dd:77:12:2b:32:43:6a:66:0c:7a:01:d9:3e:c3:
         73:7c:81:b2:b9:c9:98:39:66:3d:86:64:54:12:0c:a0:44:cc:
         3a:ec:50:58:93:98:cf:73:be:a8:e6:01:df:cf:f9:10:8d:95:
         25:10:80:79:cc:d5:92:ac:20:0b:83:ed:1b:67:36:13:0d:db:
         42:59:11:c9:ef:4f:a6:09:b2:75:34:3c:20:da:a3:21:60:6f:
         9f:83:35:a8:77:c7:57:7a:78:a9:e0:c5:55:e8:fa:b7:74:5a:
         3e:88:cb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:26:14 2025 by rpki-client