Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
File:                     ePyy5tDIIPu5vVgQYfogSi1R9BI.mft (raw, json)
Hash identifier:          VBmtluq5MGNyP+y/Mn/dvO+nHl67q9oOIjBQsCyfiUE=
Subject key identifier:   2A:DC:8D:AA:D0:90:B5:9C:E6:BD:F0:F5:98:3D:7C:BE:DA:98:ED:DB
Authority key identifier: 78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12
Certificate issuer:       /CN=F36FABDEAF/serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
Certificate serial:       027F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
Manifest number:          027E
Signing time:             Wed 18 Jun 2025 05:44:51 +0000
Manifest this update:     Wed 18 Jun 2025 05:44:50 +0000
Manifest next update:     Fri 20 Jun 2025 05:44:50 +0000
Files and hashes:         1: ePyy5tDIIPu5vVgQYfogSi1R9BI.crl (hash: UlCmMjpCJm4HzFm8BTJiV7wSjqHku9GykQHqgfA9XKM=)
                          2: D64EDDEE6E5F11EEBF42781C4AD9E6FC.roa (hash: wwS9H3v6Oq2KT+bOS8yPt+2S5/l9UTYbItXO4BiUcNQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Jun 2025 05:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FABDEAF, serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
        Validity
            Not Before: Jun 18 05:44:50 2025 GMT
            Not After : Jun 20 05:44:50 2025 GMT
        Subject: CN=68525253-e03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:92:27:12:d0:2a:5d:04:0b:5b:e9:1e:56:88:
                    94:1a:97:66:dd:27:c2:bd:5b:1d:a0:95:50:db:3e:
                    38:28:77:d8:2a:1b:37:0b:77:39:64:9c:01:cc:d2:
                    f5:a7:51:5d:57:cf:84:6f:1c:75:d8:2f:51:1b:8e:
                    8a:af:fe:2c:46:b3:94:da:9e:4c:d4:44:27:0a:83:
                    33:91:97:b6:72:0e:32:ad:42:6a:ac:0f:ad:9d:03:
                    25:00:53:d2:5b:2c:25:ac:04:5d:9c:32:7c:dd:5d:
                    a2:d7:56:a0:85:2e:69:0a:58:8f:06:02:67:af:8f:
                    37:39:66:79:e1:59:52:c4:f8:74:bd:a4:da:13:3f:
                    d6:c2:62:bc:4f:f3:71:98:38:62:d2:18:3b:83:65:
                    85:7c:c7:4f:7a:9e:47:fe:0d:54:4f:86:56:da:d6:
                    ae:fe:63:99:6d:b0:bb:5e:97:69:af:9b:2b:10:7d:
                    d3:dc:72:dd:fc:ac:51:17:47:f2:0a:43:a2:6a:4c:
                    70:53:26:c5:d4:0c:9d:43:9a:ae:73:7f:a1:98:22:
                    01:04:52:ad:b9:35:3a:0e:af:23:d6:d9:f6:c9:3b:
                    09:fb:23:e6:8c:31:fd:9d:74:c3:9c:eb:af:26:37:
                    55:ab:a8:4d:11:b2:b8:d2:b0:5d:47:64:07:1d:88:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DC:8D:AA:D0:90:B5:9C:E6:BD:F0:F5:98:3D:7C:BE:DA:98:ED:DB
            X509v3 Authority Key Identifier:
                keyid:78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:6b:1b:6b:a4:bf:4c:0b:ce:ce:9c:d3:91:1f:b2:f2:3e:
         34:c1:af:b9:e3:10:e6:43:fa:3a:53:40:59:36:66:3a:a8:65:
         33:53:b4:1f:a8:43:fe:92:0a:15:3e:b2:9a:75:1b:46:93:43:
         6b:ef:8d:b3:1f:a0:6d:5e:22:1a:4d:eb:a7:78:4a:76:1b:79:
         bd:16:a5:ef:37:29:76:82:2b:20:c5:70:ff:c4:20:c1:bc:c2:
         db:be:b8:57:05:ed:fa:e4:fd:f1:65:48:6b:6e:c2:ac:2a:01:
         bb:c2:c5:68:49:b9:bd:bc:42:d7:df:79:9a:a1:bb:d3:2d:0b:
         b1:d9:13:96:b8:52:98:63:3a:ee:bd:cf:84:4e:03:a7:fe:a1:
         6d:d6:aa:b6:63:91:fd:62:5e:d3:07:64:42:41:1b:02:82:02:
         a1:72:70:46:0c:d6:06:33:1c:d6:13:ab:0f:da:da:0a:14:07:
         6e:bf:79:95:48:07:68:6c:20:bd:f0:ef:4b:ed:ea:45:ae:f5:
         f7:d4:3c:85:38:23:33:99:6e:c6:38:df:8b:e1:46:47:d8:e0:
         b0:1f:4b:4b:5f:4d:48:42:ec:c1:6e:3f:fc:34:ae:8f:6c:ba:
         ad:4c:7c:3a:3a:0e:66:cb:66:7b:fd:b6:0c:84:3c:03:66:46:
         ca:e7:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:20:06 2025 by rpki-client