Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
File:                     vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft (raw, json)
Hash identifier:          0ioJDusadfykbWQmXZYR+4b4obsYPLLVGasoNHWMaRQ=
Subject key identifier:   67:B3:41:93:A6:22:2C:22:EC:BA:82:92:CF:ED:AA:C4:00:3B:57:B3
Authority key identifier: BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
Certificate issuer:       /CN=F36E8561AF/serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
Certificate serial:       0551
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
Manifest number:          054C
Signing time:             Sun 27 Apr 2025 02:34:08 +0000
Manifest this update:     Sun 27 Apr 2025 02:34:07 +0000
Manifest next update:     Tue 29 Apr 2025 02:34:07 +0000
Files and hashes:         1: vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl (hash: WVoIH82hBq46EtGZjcvfDfQC/iVMckDcw3bgqTB9eT4=)
                          2: BE19C1921C5111ECA490CA25D8A014CE.roa (hash: tWWOqO4qQU37EDVgvBM++aqmJ8EV7jx4ZYoh4rsEZZ8=)
                          3: 17DD2FE81C4311EC9AD16510D8A014CE.roa (hash: pzJU/wsgmIEa7wR3b5CYfZlPx5zYmjEYDsnSkrevNeg=)
                          4: 774335701C5911ECA2FC6A31D8A014CE.roa (hash: fM8gLdQ3ljof1zc4qD9FBZ5j/xT2JhI15oeTk8jbYas=)
                          5: 71ACB1521C4C11ECB274F91DD8A014CE.roa (hash: EFUsQQjRMTzZd+qctTKgGOKkOIuOEUwZkFKmnmZz65w=)
                          6: 9F7828164F7511EDBD7D5EAFF1222468.roa (hash: FVbjxXeVZc3wFnCBMzdYMN18KdOVyYLWnIvOmScvMcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8561AF, serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
        Validity
            Not Before: Apr 27 02:34:07 2025 GMT
            Not After : Apr 29 02:34:07 2025 GMT
        Subject: CN=680d97a0-2868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9b:d2:c2:e6:f9:4d:d7:19:8a:f4:94:3f:6d:
                    8b:fd:d0:6d:0c:c9:dd:6a:7b:a2:dc:34:68:0b:79:
                    d7:ff:40:49:03:34:81:55:3f:07:2b:85:9f:a4:b9:
                    a0:4d:b0:ab:82:76:26:e0:b7:3b:c4:33:00:e0:6b:
                    37:a7:54:83:6c:ef:5f:e6:00:31:2a:b3:d8:12:01:
                    0e:d1:76:1c:fd:7c:2c:a0:78:1e:9a:0b:6d:a6:20:
                    97:35:7c:7d:84:a3:d6:37:37:08:13:ab:7d:5c:71:
                    8d:ad:1c:67:ff:5a:f1:dd:d3:87:a5:f1:d6:00:a0:
                    3c:54:05:ac:0c:4b:0f:c2:1d:ea:74:19:52:27:cb:
                    f1:b7:32:2b:c5:a5:ab:97:a2:70:06:03:ce:c5:19:
                    20:ef:3a:46:d0:7f:4f:76:92:74:12:61:35:a8:83:
                    42:be:31:e5:f7:97:6d:45:5b:5d:1f:96:76:2f:7c:
                    ef:ad:b5:dd:b0:2c:ad:62:fd:ee:cd:00:a2:68:ee:
                    63:5a:0c:5a:81:8e:8b:98:71:d5:96:dc:6a:92:68:
                    e5:70:ad:88:34:f4:6b:61:4e:c8:5f:29:bc:54:49:
                    74:eb:ed:04:59:97:5e:04:32:b2:a7:9e:72:3d:1e:
                    1c:3f:f4:59:d5:2a:13:c9:39:47:18:98:ca:35:de:
                    8f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:41:93:A6:22:2C:22:EC:BA:82:92:CF:ED:AA:C4:00:3B:57:B3
            X509v3 Authority Key Identifier:
                keyid:BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:35:9c:72:bf:9d:1d:54:6c:cc:89:0d:fd:8a:8f:90:9b:
         9d:c6:b4:fc:e2:b9:3a:83:10:8d:e1:f2:27:6a:27:d6:22:a5:
         52:92:81:cc:80:f1:f8:f4:4c:b6:b9:ab:78:8d:89:df:40:52:
         3e:46:ca:da:54:5e:62:f5:39:98:36:7a:35:cf:5c:6b:e0:d2:
         b8:b5:39:d7:07:36:9c:e1:20:c1:f2:68:e7:86:13:8d:dc:96:
         81:16:40:9d:c8:b4:bc:16:92:c4:59:05:20:fb:e7:5f:cb:40:
         57:b1:25:ab:25:09:7f:3a:fe:90:34:1d:e6:e9:92:bc:b4:fd:
         7d:ce:97:12:6c:78:65:b5:96:c1:af:d3:1c:44:6f:b0:f0:39:
         07:2b:29:6d:0a:c5:79:29:bf:b3:ed:fd:44:16:51:04:ee:22:
         80:eb:20:33:fd:db:74:31:cb:68:a6:f1:de:75:fe:c9:57:1a:
         3d:c7:16:a3:f8:8e:35:d8:f9:1e:be:b3:23:ba:56:a1:d5:89:
         5f:33:18:46:d6:32:f0:ca:09:0d:de:a9:75:d7:db:48:a1:52:
         02:30:16:e1:81:42:65:0d:8b:66:1c:fa:c6:9d:61:7d:62:1d:
         83:1f:1b:1d:62:4f:67:d5:16:eb:1e:99:2d:b3:e8:c1:b2:eb:
         f9:3a:8d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:25 2025 by rpki-client