Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
File:                     _CFqOFBDurE2eHrAmYJUYZDL3pI.mft (raw, json)
Hash identifier:          A3NA0HSrXkuJqM/f2CQ3Jq15NAizoLlfUMJdaBZYUAE=
Subject key identifier:   79:CF:0E:1B:92:51:F7:BD:02:5C:BF:B0:1A:1F:A4:59:0C:84:58:90
Authority key identifier: FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92
Certificate issuer:       /CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
Certificate serial:       0714
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
Manifest number:          0711
Signing time:             Fri 02 May 2025 01:58:13 +0000
Manifest this update:     Fri 02 May 2025 01:58:12 +0000
Manifest next update:     Sun 04 May 2025 01:58:12 +0000
Files and hashes:         1: _CFqOFBDurE2eHrAmYJUYZDL3pI.crl (hash: GpJ1kxVMSYik/sD7CvNHrRIi0MEPseGdYsxbnDyRGDo=)
                          2: 7D1D251CC04011EA957AEB21F8AEA228.roa (hash: t/ypp67l7oHU7gQc6/GfToKk0xAfDBleGGehP++nK88=)
                          3: 234A1CC0C04011EABDD07A21F8AEA228.roa (hash: qxLDaEM+dLvWNlnURJT6LsT7+vD5fBM4n0SH7Mu85No=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 May 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1812 (0x714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618989AF, serialNumber=FC216A385043BAB136787AC09982546190CBDE92
        Validity
            Not Before: May  2 01:58:12 2025 GMT
            Not After : May  4 01:58:12 2025 GMT
        Subject: CN=681426b5-cb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:6d:3c:3f:1f:59:2b:df:ec:ca:9e:c2:5f:
                    84:58:1c:82:1c:75:5a:33:8d:54:9f:9e:ea:f7:9e:
                    cc:19:19:7b:ef:af:db:de:6b:cc:6c:3e:9a:fe:62:
                    c8:0e:0e:61:a5:f6:5c:df:f5:07:c8:48:dc:d8:98:
                    d8:99:b1:5c:90:a8:7d:7d:fd:84:5f:7d:82:73:71:
                    78:ea:42:60:84:4d:13:d5:46:7a:30:b6:d0:35:1d:
                    12:5b:da:aa:d1:65:96:38:1e:a3:be:f7:81:09:0e:
                    84:1a:34:39:fc:0b:5d:17:34:40:f6:18:70:30:43:
                    4f:b8:73:71:62:d1:71:a6:1d:8e:f3:5d:db:bb:0f:
                    51:35:55:1e:0d:d5:4d:dd:d4:26:00:bd:af:35:35:
                    30:4e:6e:84:8d:cb:7e:6e:53:ef:36:7c:3f:19:b7:
                    18:ec:44:e1:bb:81:25:df:4a:dc:30:15:96:04:d6:
                    4d:1d:8e:40:1d:6e:b9:5a:de:66:f5:a0:8e:2c:ba:
                    18:32:48:2a:f5:8e:66:0e:d7:35:4e:e7:f8:46:71:
                    36:c2:e3:6b:04:fe:81:f0:d6:50:ed:4d:26:d4:4a:
                    95:d1:59:0a:05:4a:ba:2a:f0:6c:41:f0:8d:83:87:
                    47:59:31:ce:45:18:27:3b:af:2d:65:dd:b5:2d:4d:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CF:0E:1B:92:51:F7:BD:02:5C:BF:B0:1A:1F:A4:59:0C:84:58:90
            X509v3 Authority Key Identifier:
                keyid:FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6c:95:81:01:91:36:f9:18:36:c3:a1:1f:58:c8:81:a3:2a:
         6c:c0:5b:13:f9:cd:5c:f1:61:0d:a5:16:8a:5b:7a:99:54:f7:
         db:4a:1a:45:8d:55:51:e5:92:10:1b:41:e9:0c:5d:73:6a:49:
         b9:1a:df:24:da:bc:f3:c5:cc:04:ba:a8:8f:51:35:22:df:37:
         5e:92:44:6c:01:79:5f:d0:3f:38:37:3a:4c:cc:a5:8e:53:ee:
         50:5f:06:d9:60:f4:a7:c3:95:56:a4:a7:fa:c1:00:2a:23:ee:
         0e:c3:d0:4c:4a:33:70:23:4b:19:7c:71:85:f7:ba:82:2e:c8:
         71:ac:89:96:19:d3:3d:cc:20:a4:7c:a3:78:0a:8c:f0:cc:80:
         e9:ef:bf:8c:92:a8:81:3c:fa:2f:07:c3:f6:03:3a:b8:c5:71:
         39:2b:dd:08:ba:5c:02:fa:09:ca:fe:db:97:1e:bd:3b:e5:a7:
         fe:03:cd:bf:2b:cb:b1:f9:2d:8b:60:b0:b4:e6:c7:51:4b:85:
         60:f7:1a:bb:86:f0:48:5c:25:3e:a6:87:72:30:3b:a0:5f:4c:
         7e:fa:67:5d:25:a4:d0:2b:20:96:38:5f:57:34:8d:1f:95:d6:
         48:7d:59:c3:89:28:a1:18:24:91:78:32:bb:0f:a5:1a:bc:0a:
         03:97:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:57:03 2025 by rpki-client