Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier:          PKYxgx62lfXUAkyYDFaz5nA5TFR5MWPmy6/how77lOU=
Subject key identifier:   38:DA:D1:E2:86:E1:F0:CD:B0:2E:66:4C:04:4F:14:6C:EB:78:93:8A
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer:       /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial:       023D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number:          0239
Signing time:             Sun 27 Apr 2025 04:05:52 +0000
Manifest this update:     Sun 27 Apr 2025 04:05:52 +0000
Manifest next update:     Tue 29 Apr 2025 04:05:52 +0000
Files and hashes:         1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: HmdgXoirVrwqtRG8/8VaW14p2ecdnSBSDnHi1IPrr9s=)
                          2: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
                          3: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
                          4: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Validity
            Not Before: Apr 27 04:05:52 2025 GMT
            Not After : Apr 29 04:05:52 2025 GMT
        Subject: CN=680dad20-63bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:1f:c3:e6:17:45:c0:cc:69:bf:28:ed:24:
                    ad:d5:34:52:19:93:53:f0:77:92:4e:0e:cf:30:7c:
                    a4:3d:bc:9a:ff:51:45:01:26:e7:c1:f7:a9:af:99:
                    93:b5:ba:a8:b4:40:71:e0:d2:63:f1:0d:1e:c9:7d:
                    89:1b:12:b1:c2:ab:3d:3d:f5:d6:86:bc:00:8f:ee:
                    94:cc:53:8a:91:34:b2:51:24:4a:2b:6c:92:08:c3:
                    1d:f8:70:fe:c9:31:97:dd:e2:fa:60:17:58:7a:c5:
                    93:b7:9f:c8:01:f0:10:83:52:6e:59:91:63:98:db:
                    ab:2e:8f:28:4d:f0:f0:bd:8e:b3:ba:76:9b:9c:1e:
                    ba:83:f5:a0:5c:43:fa:f6:22:7e:cb:57:15:89:5c:
                    c4:62:92:4a:7d:e5:e0:41:e2:b5:5a:41:3e:0d:3b:
                    c1:d7:2b:66:cd:bd:39:8f:e5:72:df:fb:a1:97:1f:
                    28:66:52:71:07:25:26:e6:76:79:b1:e5:3a:90:70:
                    dd:79:19:d9:fa:27:ae:23:37:25:4e:78:08:c3:d4:
                    5f:f6:92:7b:52:22:1b:47:24:32:0e:a4:50:b1:ce:
                    cb:66:84:6f:b3:c4:e1:25:2a:8f:04:03:9d:0e:4b:
                    04:22:8f:2c:ce:18:0a:0f:c2:6b:cf:67:80:93:a2:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DA:D1:E2:86:E1:F0:CD:B0:2E:66:4C:04:4F:14:6C:EB:78:93:8A
            X509v3 Authority Key Identifier:
                keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4f:18:9e:48:04:20:68:0e:9e:02:d8:77:ca:bf:8a:7b:bb:
         4a:e7:25:f2:a7:a6:6c:67:fd:d2:95:24:b7:e6:5c:0b:aa:61:
         8e:cf:37:be:cb:0f:e4:13:df:ea:a1:af:85:79:47:bd:a8:b2:
         3f:94:7f:d9:82:ef:ce:4a:bf:4a:10:7c:92:53:ae:6d:75:42:
         b7:eb:55:8a:0e:ae:78:0f:f5:04:8d:7a:19:26:46:27:ff:bc:
         5d:a4:d3:3d:99:6d:05:a6:4f:40:bb:b0:6d:da:71:4f:a7:51:
         ea:ce:7e:aa:6f:78:dc:ed:ba:a5:22:08:62:c9:c9:eb:dd:ad:
         33:a2:59:f8:4f:e8:18:e4:d3:72:55:fa:3a:72:b7:b1:ed:99:
         f4:d1:0a:57:fc:76:2c:d3:b2:d6:5e:a1:5d:81:55:c9:83:0e:
         12:5b:df:4c:f2:1b:3c:29:d4:5d:96:f8:14:59:9d:e2:b7:d5:
         f5:e7:79:c9:c6:57:86:05:b4:05:9f:df:96:86:0e:3e:b4:bc:
         90:9d:8d:62:ce:2b:99:76:6e:b3:69:61:46:a0:a9:22:58:93:
         c4:17:f6:c3:14:17:0d:1d:51:ff:12:ce:e4:91:a9:19:91:93:
         f1:22:c4:33:ef:33:73:ee:2a:fc:b8:36:72:6c:e0:47:50:72:
         ba:f4:47:de
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTRERkRBRjExMC8GA1UEBRMoM0NFNzRBQzUyNUFCQzlCNTA1MTMxRTU2RDNBRjRC
QUEwQ0E4NkJDNzAeFw0yNTA0MjcwNDA1NTJaFw0yNTA0MjkwNDA1NTJaMBgxFjAU
BgNVBAMTDTY4MGRhZDIwLTYzYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7bR/D5hdFwMxpvyjtJK3VNFIZk1Pwd5JODs8wfKQ9vJr/UUUBJufB96mv
mZO1uqi0QHHg0mPxDR7JfYkbErHCqz099daGvACP7pTMU4qRNLJRJEorbJIIwx34
cP7JMZfd4vpgF1h6xZO3n8gB8BCDUm5ZkWOY26sujyhN8PC9jrO6dpucHrqD9aBc
Q/r2In7LVxWJXMRikkp95eBB4rVaQT4NO8HXK2bNvTmP5XLf+6GXHyhmUnEHJSbm
dnmx5TqQcN15Gdn6J64jNyVOeAjD1F/2kntSIhtHJDIOpFCxzstmhG+zxOElKo8E
A50OSwQijyzOGAoPwmvPZ4CTou3LAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUONrR
4obh8M2wLmZMBE8UbOt4k4owHwYDVR0jBBgwFoAUPOdKxSWrybUFEx5W069Lqgyo
a8cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0REZELzkxODdDNUQ0Nzc2NzExRUU5OURGRDk3MjRBRDlFNkZDL1BPZEt4
U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BPZEt4U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTRERkQvOTE4N0M1RDQ3NzY3MTFFRTk5REZEOTcyNEFE
OUU2RkMvUE9kS3hTV3J5YlVGRXg1VzA2OUxxZ3lvYThjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbTxieSAQgaA6eAth3yr+Ke7tK5yXy
p6ZsZ/3SlSS35lwLqmGOzze+yw/kE9/qoa+FeUe9qLI/lH/Zgu/OSr9KEHySU65t
dUK361WKDq54D/UEjXoZJkYn/7xdpNM9mW0Fpk9Au7Bt2nFPp1Hqzn6qb3jc7bql
Ighiycnr3a0zoln4T+gY5NNyVfo6crex7Zn00QpX/HYs07LWXqFdgVXJgw4SW99M
8hs8KdRdlvgUWZ3it9X153nJxleGBbQFn9+Whg4+tLyQnY1iziuZdm6zaWFGoKki
WJPEF/bDFBcNHVH/Es7kkakZkZPxIsQz7zNz7ir8uDZybOBHUHK69Efe
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:06 2025 by rpki-client