Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
File:                     ksDdANVwLjkO0njypv3Heeq3uoo.mft (raw, json)
Hash identifier:          fuc5qArNDaywBT+hfZr3JqDN4k4lc+IA4nru1a0I1+Q=
Subject key identifier:   B7:34:8A:B3:74:8C:B0:A3:D1:BC:8B:67:72:D8:F6:F7:7C:5C:A3:0B
Authority key identifier: 92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
Certificate issuer:       /CN=F36DF2C0AF/serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Certificate serial:       013F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
Manifest number:          013E
Signing time:             Mon 16 Jun 2025 04:50:02 +0000
Manifest this update:     Mon 16 Jun 2025 04:50:01 +0000
Manifest next update:     Wed 18 Jun 2025 04:50:01 +0000
Files and hashes:         1: ksDdANVwLjkO0njypv3Heeq3uoo.crl (hash: xHeZw9PfvS8LrVBvq8ZMvogVb4iuUf7usPfs4CvHgec=)
                          2: 66FDD6885A0A11EFBC9CDBA8762E951A.roa (hash: aVnUgk3NY8yjcG/DFLWQpoxsTPLV3bCNwJvFvS9FExw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DF2C0AF, serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
        Validity
            Not Before: Jun 16 04:50:01 2025 GMT
            Not After : Jun 18 04:50:01 2025 GMT
        Subject: CN=684fa27a-918e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:4f:c0:b5:13:26:cb:a4:3d:2a:29:75:66:
                    f7:44:2a:d2:bd:0c:21:4b:63:43:42:43:20:29:e2:
                    cb:d3:93:54:f3:5a:ed:eb:11:f7:c0:59:4c:d0:f8:
                    9a:57:83:a0:ca:a4:d5:c1:82:46:22:ae:6a:b6:47:
                    2a:30:8f:de:f6:57:00:2b:2a:06:c3:87:ea:d7:ab:
                    84:50:3e:92:c1:18:96:f4:d9:38:e5:4d:a0:b4:76:
                    e3:7a:59:5f:2c:57:51:37:22:c2:73:1a:cc:76:e5:
                    d9:e8:a4:64:0c:a0:b5:fd:cd:7a:fd:77:e5:35:9d:
                    f8:d4:d1:38:ac:64:8a:4c:b7:71:21:48:66:38:92:
                    32:d3:90:86:e3:56:30:95:87:a1:a4:91:45:26:fb:
                    f9:ff:88:89:86:67:44:b6:bf:88:89:2c:22:2e:6d:
                    56:e7:04:0a:45:54:75:28:41:80:15:9b:38:d1:19:
                    c1:12:f0:b1:d9:fb:dc:05:1e:1f:0b:88:40:c4:d3:
                    9a:09:b5:5d:52:08:6e:24:0f:44:cb:1e:e1:1a:1d:
                    65:89:5d:8a:e6:33:f9:61:c0:1e:5a:c7:0d:ec:80:
                    e3:28:5c:d0:2c:16:db:7a:dc:66:b9:ab:7f:7e:7d:
                    df:1d:61:b2:96:59:1b:4b:84:d9:e7:46:ef:cc:d6:
                    53:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:34:8A:B3:74:8C:B0:A3:D1:BC:8B:67:72:D8:F6:F7:7C:5C:A3:0B
            X509v3 Authority Key Identifier:
                keyid:92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:4f:a1:be:fc:b3:c4:3d:76:b4:8a:47:7b:31:d7:21:00:
         bc:59:bd:d6:76:6f:78:83:7b:f0:6f:70:07:7c:68:43:29:fe:
         33:56:95:70:2d:56:f6:e8:94:e9:97:1e:3c:3b:5a:08:1b:9a:
         fe:db:bd:ba:16:a3:7f:2c:dc:1a:18:22:2a:f6:81:72:83:c8:
         de:7b:28:86:43:1b:03:b9:98:4d:b5:c0:3c:dd:82:ba:b9:3d:
         e1:6c:d5:b5:86:09:b5:25:11:1b:cc:23:6a:0f:97:1a:d3:c6:
         76:19:73:64:b7:ca:ce:21:2c:4e:03:38:c9:c4:9d:12:87:71:
         42:1b:7a:e5:6a:c5:e2:61:1e:49:ac:ea:79:6f:10:85:3c:26:
         44:3d:ff:25:16:61:c5:a6:f8:17:bd:61:9f:d1:4d:7a:34:cc:
         df:a0:c4:ef:5f:c4:1b:81:5c:23:0b:86:7d:e0:9d:51:48:0c:
         5e:e8:dc:a6:bb:07:72:ad:57:77:89:0f:fd:bc:88:cb:3f:e8:
         1f:eb:ae:c9:c9:c6:2d:ef:f0:df:cd:a8:65:4d:b9:6a:b5:0f:
         65:97:85:4a:a4:eb:b9:3d:58:97:cb:a3:fc:b5:c5:9e:b0:27:
         b7:e2:94:6d:fb:a8:e8:35:0e:6c:38:a3:8b:3e:ba:ae:a3:02:
         dd:15:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:18:25 2025 by rpki-client