Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
File:                     vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft (raw, json)
Hash identifier:          c7xRJcdaQ4Y/wSLVBsZsE5MNpTih39ar64vKqAU6uK8=
Subject key identifier:   62:C9:28:81:72:48:42:84:4C:04:A7:0B:BE:38:F0:00:71:EB:E7:C0
Authority key identifier: BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05
Certificate issuer:       /CN=F36F1295AF/serialNumber=BDB1AF1F8B4EB6F3A42370F91E71C532C7F46005
Certificate serial:       02F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
Manifest number:          02EF
Signing time:             Tue 17 Jun 2025 03:49:39 +0000
Manifest this update:     Tue 17 Jun 2025 03:49:38 +0000
Manifest next update:     Thu 19 Jun 2025 03:49:38 +0000
Files and hashes:         1: vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl (hash: BtqrZ2olVnMqY27BExMycnJeS9uRHjI+k/zHy8ZCwmM=)
                          2: C66A8CFA0F6611EE86DEEA374AD9E6FC.roa (hash: CtMLiyHqHp/2c3885KFMX3Kp1Td1UoRIr2a2dfZo4lI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 19 Jun 2025 00:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F1295AF, serialNumber=BDB1AF1F8B4EB6F3A42370F91E71C532C7F46005
        Validity
            Not Before: Jun 17 03:49:38 2025 GMT
            Not After : Jun 19 03:49:38 2025 GMT
        Subject: CN=6850e5d3-d13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:38:0d:26:51:e2:5f:c6:55:52:2a:ac:0c:62:
                    f8:d6:4f:62:e8:3a:69:29:e2:6e:55:e0:da:13:df:
                    37:a8:2f:30:ff:d9:63:16:3c:41:7a:32:4f:21:8f:
                    2d:61:38:e0:74:67:0c:86:1a:16:91:5b:e0:96:14:
                    28:80:c2:6e:28:60:52:eb:a9:7c:d3:73:7a:4d:77:
                    ac:75:0b:ee:1d:6f:0c:1e:7f:bb:54:4c:c2:2c:26:
                    ac:83:5b:e9:e2:0f:0c:01:ba:89:e0:2f:f1:55:53:
                    32:67:57:a0:f2:f9:b7:ad:06:06:2e:da:af:7f:5f:
                    fe:5e:80:14:3e:0e:5a:68:e9:9d:58:13:22:2d:b1:
                    80:a8:80:ae:88:b2:ea:cb:aa:40:20:78:3f:27:27:
                    5e:ff:d8:b6:2c:15:29:69:9f:c0:95:55:f3:00:0d:
                    c9:39:5b:7a:e8:ba:27:8d:49:a5:e5:0f:7e:fd:d8:
                    04:3c:23:05:e4:aa:b3:20:0e:22:fc:bd:c3:3f:ef:
                    8c:b5:88:48:39:6d:14:d2:30:d8:fb:34:65:ba:88:
                    b7:fe:f2:a3:06:c0:6f:1f:a3:d4:d0:0a:3c:51:64:
                    fa:de:af:2e:a7:1b:b8:e0:3a:41:d4:27:fa:cf:bc:
                    cd:59:16:13:02:f8:c9:f2:6d:6c:cd:d8:83:0c:80:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C9:28:81:72:48:42:84:4C:04:A7:0B:BE:38:F0:00:71:EB:E7:C0
            X509v3 Authority Key Identifier:
                keyid:BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a3:31:0e:70:69:a0:a1:ad:09:50:b1:ab:7d:aa:d1:07:4c:
         a9:1f:8b:47:5d:06:78:f8:0f:ac:a1:8f:58:37:51:5a:b0:63:
         59:b9:b5:68:a2:ae:3f:07:51:a1:1b:ed:07:6a:df:a1:f2:1a:
         b9:4a:f8:46:4b:eb:70:23:7d:47:f7:08:99:f4:63:4b:1e:9f:
         28:83:80:a5:dd:94:6b:f9:52:fb:ac:d8:80:df:9b:9f:55:5e:
         02:c0:c9:ff:d7:26:6f:f6:1e:31:de:44:17:58:4e:c9:9f:1d:
         73:6e:e6:d9:bb:f4:37:79:10:7a:18:a1:1a:54:7c:d9:0c:49:
         6c:1d:12:3b:ba:6f:d4:40:84:86:5a:b8:e2:bc:fe:76:67:f8:
         cb:d3:9c:d5:a5:d3:bb:12:b1:ae:bf:a4:f3:21:2f:de:79:0d:
         2e:06:46:7b:e5:70:86:48:3e:61:52:b4:88:31:6d:d2:b3:85:
         b9:93:2d:d8:cf:52:04:7b:e5:e3:85:83:29:82:34:e3:94:8a:
         ce:9b:e7:96:ee:07:67:e7:2d:e7:00:83:f0:8a:25:40:9a:7b:
         43:95:18:8f:a5:97:99:18:ea:c6:d4:89:30:18:19:9d:b7:0c:
         e4:38:29:b2:fb:b9:e8:0c:97:7b:92:ff:1b:0f:bb:7f:62:5a:
         23:eb:5e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:40:28 2025 by rpki-client