Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
File:                     TibbH7y8v-dYX84SgHnV75Hfj14.mft (raw, json)
Hash identifier:          De8pU4HiaJVeaLXdDOrx5cXcebpPt8z32m7Kqj5DNs4=
Subject key identifier:   27:80:94:8C:52:11:D8:F3:09:66:4E:B1:5D:0E:1B:11:B7:E9:28:FF
Authority key identifier: 4E:26:DB:1F:BC:BC:BF:E7:58:5F:CE:12:80:79:D5:EF:91:DF:8F:5E
Certificate issuer:       /CN=F36E33CDAF/serialNumber=4E26DB1FBCBCBFE7585FCE128079D5EF91DF8F5E
Certificate serial:       041A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TibbH7y8v-dYX84SgHnV75Hfj14.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
Manifest number:          0417
Signing time:             Wed 30 Apr 2025 03:04:33 +0000
Manifest this update:     Wed 30 Apr 2025 03:04:32 +0000
Manifest next update:     Fri 02 May 2025 03:04:32 +0000
Files and hashes:         1: TibbH7y8v-dYX84SgHnV75Hfj14.crl (hash: 8rHv59m/yBZ25yNWP+EBq1ZtPfJp1mImjKFn+K+RXF4=)
                          2: E6CDC9AA237E11EDB6A2EDF9F1222468.roa (hash: n+PuUD7Nff8t9oN2JZTn6zKXJJ6q9obodlo2ezFFRl0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TibbH7y8v-dYX84SgHnV75Hfj14.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 03:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E33CDAF, serialNumber=4E26DB1FBCBCBFE7585FCE128079D5EF91DF8F5E
        Validity
            Not Before: Apr 30 03:04:32 2025 GMT
            Not After : May  2 03:04:32 2025 GMT
        Subject: CN=68119341-1ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:76:a5:33:5f:ee:07:89:7e:e9:56:5c:b0:
                    25:67:19:ba:3e:dc:1e:d8:c8:0b:5c:b7:6f:35:3c:
                    cb:76:0c:27:35:1a:08:0e:b3:fd:c9:b8:e8:59:32:
                    e6:fc:15:c7:4f:3b:36:3b:e1:7a:48:b6:5c:6e:f4:
                    74:24:0f:a5:36:3f:7f:91:6e:06:0d:3d:ec:41:c6:
                    be:e9:dc:d9:ab:3f:5f:5c:48:42:16:1f:6a:de:44:
                    73:62:34:2c:ab:94:42:36:07:f4:f5:aa:56:02:75:
                    81:1e:da:b5:e5:42:58:f2:52:e0:46:40:f7:c0:ad:
                    a6:c0:56:4f:02:85:e6:b1:6a:be:f0:2a:ae:02:01:
                    34:e8:59:34:19:d8:f6:74:ef:32:3f:ea:75:93:aa:
                    42:c8:7b:5a:f4:d2:0e:90:86:81:ed:b7:6f:a2:b4:
                    ab:41:98:4a:ef:a7:14:89:b1:bf:04:a7:6f:46:58:
                    b7:51:5b:63:a6:f4:2b:ee:1f:85:07:ec:cb:fc:9d:
                    e2:34:1b:08:a3:a6:4b:38:e6:e1:ae:11:d8:0d:9c:
                    00:6e:a7:a2:ca:ba:e3:db:91:93:e3:a8:45:8b:2c:
                    d0:78:c4:12:53:71:4e:3a:27:9b:83:2e:99:0c:e2:
                    ea:29:ba:c2:3d:c8:ea:0e:b6:3f:f8:0c:63:c2:77:
                    d5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:80:94:8C:52:11:D8:F3:09:66:4E:B1:5D:0E:1B:11:B7:E9:28:FF
            X509v3 Authority Key Identifier:
                keyid:4E:26:DB:1F:BC:BC:BF:E7:58:5F:CE:12:80:79:D5:EF:91:DF:8F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TibbH7y8v-dYX84SgHnV75Hfj14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:20:5c:44:10:1e:6c:13:84:35:2c:d3:58:69:51:c3:e1:01:
         52:15:87:01:d9:44:a1:6d:82:f7:9b:7e:cf:24:04:03:51:1d:
         0c:ed:c3:8b:4e:48:36:b3:c8:38:9c:20:7c:04:42:2e:8c:32:
         f8:7a:bf:ff:92:a5:76:42:a1:53:80:34:61:88:c8:25:ea:13:
         bc:9a:57:54:39:fc:21:e3:82:74:18:b4:91:3e:48:91:be:1e:
         46:53:12:40:1e:05:41:dc:9e:52:27:8f:ef:af:ee:9b:89:55:
         e8:7f:3c:35:1e:e5:22:53:6e:75:64:88:b0:cb:46:30:7d:80:
         42:61:32:4b:3d:b4:fd:28:cf:eb:1f:03:ce:a0:05:3b:6c:c7:
         f8:b0:35:0e:0a:db:26:34:04:3f:9b:38:b1:42:bf:be:59:52:
         c8:4c:36:36:e7:58:b5:27:d2:c2:07:00:46:c4:0d:7d:2f:c9:
         96:19:30:2e:0c:33:59:56:03:8a:2b:c2:b7:6a:49:b7:41:db:
         9c:f2:7f:4a:50:10:56:ed:7b:fe:2b:48:3f:ce:3e:8b:f0:40:
         8f:29:19:36:57:44:b1:d9:f0:b0:34:8f:55:18:9a:35:58:63:
         90:7d:26:27:84:1e:81:5d:6c:07:11:dd:16:26:b5:4f:9e:0e:
         b2:3c:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:47:04 2025 by rpki-client