Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
File:                     n10GlKN56yP6tAip1LvVCOGqOSI.mft (raw, json)
Hash identifier:          OhKYG5kBes/P4mbifLfpL/afpQxqRVGfkyXCeP0qLhc=
Subject key identifier:   A2:FD:BB:56:9D:42:BC:A5:E8:E1:B5:6B:C1:9D:50:0A:ED:C9:43:8F
Authority key identifier: 9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22
Certificate issuer:       /CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
Certificate serial:       028C
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
Manifest number:          0288
Signing time:             Fri 20 Jun 2025 04:03:38 +0000
Manifest this update:     Fri 20 Jun 2025 04:03:37 +0000
Manifest next update:     Sun 22 Jun 2025 04:03:37 +0000
Files and hashes:         1: n10GlKN56yP6tAip1LvVCOGqOSI.crl (hash: eHiwZpkWLuhdcDkkq+obnJsxRAOwbigK+hztKlQP3Gc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                          rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 22 Jun 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DRI, serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
        Validity
            Not Before: Jun 20 04:03:37 2025 GMT
            Not After : Jun 22 04:03:37 2025 GMT
        Subject: CN=6854dd9a-a48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:dc:03:d8:58:14:42:58:97:23:d7:84:6e:
                    34:44:e1:93:67:29:6d:6c:ea:52:e4:57:64:58:ba:
                    88:ff:14:d0:ae:0d:db:ae:39:24:e9:64:15:99:81:
                    13:31:36:b4:57:14:8f:fa:ef:36:47:22:ea:e1:e2:
                    b4:54:01:4c:c2:73:4f:a1:5b:5d:75:48:62:8e:96:
                    68:09:9a:73:4e:f4:5e:be:c2:b9:f6:23:a6:1d:11:
                    8b:2f:06:00:29:46:35:c0:e1:af:cb:cb:0e:af:d5:
                    c3:82:1b:c2:e7:88:1d:83:de:f5:ce:b2:97:0d:02:
                    fa:e9:d4:fb:8a:85:2c:e0:92:63:05:c5:60:3d:10:
                    3c:f0:1e:6d:46:0d:1f:ab:b9:e4:bb:4c:57:8d:ba:
                    11:a5:da:67:c8:23:6e:92:4f:40:1d:88:3b:de:19:
                    ad:c6:f6:37:a5:ff:48:73:1e:6e:37:a5:92:78:b0:
                    b0:f3:a4:52:52:ce:fc:99:8b:78:7b:0c:1d:32:23:
                    ef:8d:24:20:1f:bd:e1:5e:a0:bf:b1:a3:00:91:1f:
                    e8:d1:20:60:fb:0b:f0:2b:c5:ac:59:16:4f:f0:ab:
                    9c:65:db:63:7c:dc:ca:0e:5a:3c:ec:d9:85:13:6f:
                    50:cf:32:34:5d:e1:92:6e:fc:bd:6c:72:b1:a8:aa:
                    f9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FD:BB:56:9D:42:BC:A5:E8:E1:B5:6B:C1:9D:50:0A:ED:C9:43:8F
            X509v3 Authority Key Identifier:
                keyid:9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:62:c1:e8:f5:a4:53:06:de:1c:4b:d5:55:94:34:10:a7:14:
         3e:82:90:68:b1:8c:71:94:1f:ea:52:21:8e:f5:36:5e:d4:dc:
         b5:8a:2b:77:51:cd:76:87:d3:f7:25:08:86:8d:77:35:34:39:
         dc:bf:88:30:72:dc:8d:c8:f5:15:ca:bc:8e:ba:8a:1c:4e:2e:
         24:e7:5b:6b:74:a6:71:4b:89:7f:5e:a4:ae:4e:f9:fb:19:cc:
         0d:46:ea:9a:bf:9c:b9:7f:7b:31:e6:32:d9:6c:07:62:b6:94:
         6e:85:62:03:ae:1a:cd:74:7d:3e:6a:4a:74:bc:0a:a7:32:7c:
         1c:86:53:7c:65:d3:06:2f:c3:e2:3e:01:7d:f0:97:08:0b:b3:
         2b:52:a9:a2:ff:a0:98:0a:ec:26:cb:ab:62:8f:b1:5b:52:94:
         36:5e:e2:fd:cd:28:cd:7f:b9:f1:8c:71:65:2c:b5:23:4c:f7:
         d9:ee:76:ce:38:a6:03:e5:65:fb:0a:d7:9f:0c:12:ea:a0:e5:
         45:8b:97:b3:7a:af:4c:b9:f0:9b:0e:04:3f:eb:31:55:dc:2e:
         94:61:be:a0:87:63:48:98:aa:22:36:2a:61:ab:df:15:b3:1c:
         3a:af:de:4e:e5:b3:ae:96:54:8f:e3:78:f1:fa:d9:40:8e:60:
         68:18:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 21:42:05 2025 by rpki-client