Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
File:                     3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft (raw, json)
Hash identifier:          fGBavjeVHQA/kvMJ5bdP7E7Hbb7YbrYnMc2ADF4X1Ug=
Subject key identifier:   D3:0C:DC:50:5D:96:B6:ED:03:96:62:BC:59:28:DF:20:C0:CB:83:A1
Authority key identifier: DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41
Certificate issuer:       /CN=F36167D3AF/serialNumber=DC6B9AA979B5F9B376CA3299A582A75E3816AB41
Certificate serial:       4D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
Manifest number:          4C
Signing time:             Sat 26 Apr 2025 05:14:06 +0000
Manifest this update:     Sat 26 Apr 2025 05:14:05 +0000
Manifest next update:     Mon 28 Apr 2025 05:14:05 +0000
Files and hashes:         1: 3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl (hash: wAe2Jk581anTz1TpwdVQMnFg/Okus1d2jZ/qTE93Elc=)
                          2: B916B790E93511EF85696B6B762E951A.roa (hash: ggevfaeeCUMvKWREnfa5ZTaHefEit81KWkRtGhD4nDA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 05:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36167D3AF, serialNumber=DC6B9AA979B5F9B376CA3299A582A75E3816AB41
        Validity
            Not Before: Apr 26 05:14:05 2025 GMT
            Not After : Apr 28 05:14:05 2025 GMT
        Subject: CN=680c6b9e-270c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:85:17:11:31:c5:36:0b:04:3b:c3:fc:8b:
                    2c:b4:e3:23:88:d8:a7:07:16:30:77:c1:f7:3c:c1:
                    7f:f6:d1:87:7c:8e:25:8c:1e:d2:94:13:23:02:8d:
                    d7:b2:39:f8:5e:a9:c0:42:68:b5:00:c5:4e:d9:99:
                    08:67:3e:3a:18:a3:c9:c6:c1:03:bc:20:99:26:90:
                    90:dd:20:2c:a8:a6:6a:fe:d2:3e:c5:d6:a8:ba:62:
                    ef:e8:f0:79:aa:e2:15:d8:e5:50:e7:58:a6:80:be:
                    15:31:0d:2b:57:8e:ff:96:72:80:32:22:22:67:45:
                    c6:ab:6f:7c:4f:69:9d:8c:25:b6:45:cf:34:05:cd:
                    a3:fe:99:bb:82:98:05:4a:c9:26:73:2a:99:6e:7e:
                    ba:1d:07:3b:9e:63:e9:98:67:db:bc:a0:a8:3b:f3:
                    e0:32:8f:0b:c5:ae:b6:ac:78:68:32:1c:ec:59:33:
                    d8:fe:6c:ac:5f:5e:81:4e:ab:68:d7:b8:d6:2e:49:
                    85:bb:9d:7d:24:25:e2:da:53:6a:0e:d4:07:d6:ff:
                    89:67:b5:f3:08:ef:d4:3e:78:1b:4c:eb:0f:54:47:
                    1a:58:0b:79:93:01:b1:71:0a:45:6d:79:dc:6c:e9:
                    0e:e8:da:e8:5d:9e:ed:07:eb:40:de:f8:ab:34:38:
                    ad:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0C:DC:50:5D:96:B6:ED:03:96:62:BC:59:28:DF:20:C0:CB:83:A1
            X509v3 Authority Key Identifier:
                keyid:DC:6B:9A:A9:79:B5:F9:B3:76:CA:32:99:A5:82:A7:5E:38:16:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3GuaqXm1-bN2yjKZpYKnXjgWq0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36167D3/138A951EE93311EFA3F6F559762E951A/3GuaqXm1-bN2yjKZpYKnXjgWq0E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:97:0b:a3:0f:85:57:0e:2f:8d:bf:58:15:7a:fa:35:09:
         09:0d:62:5b:e2:b2:77:33:3c:d5:bb:46:d4:82:b6:2f:c3:f2:
         fb:87:86:fa:d4:8e:dc:19:d1:62:e5:6b:1e:0c:b1:ad:28:63:
         cb:2f:54:f4:11:30:fa:c9:13:6f:c7:99:4a:79:3e:7b:8c:56:
         9b:e7:83:20:bd:16:7a:73:5d:61:f3:93:5b:a7:8a:d3:1d:82:
         2d:0f:3f:82:3d:53:c7:e5:90:ec:3d:45:72:1f:e2:1a:2e:fc:
         7e:53:ee:3a:69:67:bb:a3:c0:b8:4b:a1:53:be:5e:54:f6:57:
         06:13:77:aa:98:bf:82:cc:34:f4:13:c4:13:df:da:be:2e:66:
         dc:81:98:d9:2a:cc:cf:d3:5e:7e:40:d3:13:bb:b1:d5:76:26:
         43:48:90:7c:49:ef:3a:d6:75:3b:c1:f4:55:0d:05:40:66:c9:
         03:95:4c:da:06:44:ad:0b:b1:d0:77:c5:f8:cd:25:ee:14:0f:
         63:93:7f:be:d3:23:ee:cc:3e:e1:00:4a:0b:ea:aa:a5:36:6b:
         7b:44:68:b5:a4:1e:bb:86:db:fa:28:9f:6a:dc:f7:40:1b:36:
         06:af:74:66:17:e1:65:4a:2f:55:86:58:8a:22:2e:08:1b:49:
         8b:b7:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:53:28 2025 by rpki-client