Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
File:                     U3W2ePNrjZxrXcMoG29etnFqEQk.mft (raw, json)
Hash identifier:          R0e57K9ajdrxJ97DwhyLLxD+zbAUebLLcR+bn7CqSLc=
Subject key identifier:   E8:E2:7F:64:34:69:B7:94:A0:1F:84:D3:AA:56:00:57:9E:9E:03:5A
Authority key identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09
Certificate issuer:       /CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
Certificate serial:       023E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
Manifest number:          023A
Signing time:             Wed 30 Apr 2025 04:06:47 +0000
Manifest this update:     Wed 30 Apr 2025 04:06:46 +0000
Manifest next update:     Fri 02 May 2025 04:06:46 +0000
Files and hashes:         1: U3W2ePNrjZxrXcMoG29etnFqEQk.crl (hash: qjby3+fw5GZo9JciA0FnzBsdpr4FvVL6UxShy5Nl2GY=)
                          2: 902EBEC6960311EEBE7A780ED25BE465.roa (hash: RI1NH59VXYSwoVvD3QSrzuux5c6I6SJhdTOnik9vzQs=)
                          3: 6684D06A960311EEBA07EA0DD25BE465.roa (hash: 43CBfTPYLSaOl2NwiPQTIsa3VBBdU7WdHBgYb3+EOHI=)
                          4: 790E531095AD11EE9C283379D25BE465.roa (hash: Qj3JkuwJNN7j0VesRDUQ2bCZfvpe+I/vZ/mOS/O0MGI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 04:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAF, serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
        Validity
            Not Before: Apr 30 04:06:46 2025 GMT
            Not After : May  2 04:06:46 2025 GMT
        Subject: CN=6811a1d7-d286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:34:59:31:86:bb:99:34:88:cc:16:03:d8:29:
                    e2:e9:4a:7c:20:80:21:bf:6f:bc:48:1a:25:2c:32:
                    20:59:e7:a5:d7:62:d3:9f:e6:41:4b:55:63:34:ad:
                    0e:c3:a1:3b:36:74:e4:1d:33:7f:89:08:88:22:d4:
                    de:5c:05:21:7b:f0:c9:4b:b0:40:11:ae:d2:61:08:
                    c4:9e:92:a7:df:65:ef:33:23:9b:a9:a2:f7:6d:8a:
                    5f:09:c8:fe:56:39:d1:09:3d:69:7c:4e:f7:84:50:
                    74:c2:c7:8c:66:6f:ef:79:6c:a6:f6:1e:aa:59:77:
                    78:b7:be:10:84:17:a3:0e:6e:92:66:f7:40:a6:94:
                    b8:2c:92:ba:cd:03:2c:f9:a1:6f:7d:98:d1:68:e8:
                    a9:f2:1d:27:d0:b1:d3:09:d0:bb:2a:cb:1c:05:e6:
                    7e:df:0e:c7:cd:27:cd:e1:dd:2d:ed:c3:d6:25:1d:
                    99:28:98:33:3d:64:04:2a:65:54:f0:6f:9f:5d:34:
                    4a:d2:6a:cb:23:8e:fb:75:c1:28:ab:24:ce:29:5e:
                    e9:7d:5b:d9:bd:dd:77:4b:4a:95:b6:4e:ca:b6:fa:
                    f9:5a:d6:19:84:f6:51:d2:c2:6c:53:d9:38:94:07:
                    a2:be:a3:2b:d5:19:32:0c:ee:f4:27:7a:e2:d6:fd:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E2:7F:64:34:69:B7:94:A0:1F:84:D3:AA:56:00:57:9E:9E:03:5A
            X509v3 Authority Key Identifier:
                keyid:53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f8:31:bc:ce:66:71:9b:76:2f:13:75:7d:ad:0e:63:c2:b6:
         5b:0e:bb:1b:5e:4d:74:9c:e3:50:97:35:3b:cd:f7:9c:c4:5d:
         77:ca:dd:b5:37:ca:ef:3e:72:bc:ed:50:aa:fc:7a:d6:f7:22:
         af:53:13:5f:40:9a:d6:5d:70:3a:9f:b2:1f:f3:06:51:e9:f4:
         17:74:ab:98:ad:b2:f3:32:42:42:a9:b4:03:7f:13:12:fc:5d:
         c3:f2:b0:79:f1:c0:a2:3e:ad:07:8c:46:1e:31:43:b6:96:a7:
         e9:4b:d2:8f:3e:41:5d:9a:0b:b1:76:23:2f:45:87:df:47:9a:
         6e:14:1b:92:c5:c9:d6:f4:bb:d7:73:06:36:cd:4d:7b:1b:a1:
         54:07:11:e1:86:6b:4f:d1:05:c9:e4:44:51:a2:be:bf:71:6d:
         93:02:c2:c4:f3:49:fa:be:b0:d4:e8:30:c6:25:be:16:08:57:
         e5:d3:f6:b2:24:ec:29:3b:b4:73:bb:e2:c0:59:64:97:11:ac:
         4f:62:75:0a:3b:76:ab:45:06:f5:0c:f4:35:32:5b:68:b6:7c:
         c0:c1:c6:14:f1:2c:4a:9a:f1:55:06:ef:8d:0b:f4:9c:32:b2:
         ea:be:2a:7b:c3:90:dc:6f:e4:bb:5a:a6:26:48:3d:a4:c0:a4:
         62:14:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:32:07 2025 by rpki-client