Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
File:                     HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json)
Hash identifier:          gOLwA+34+gigqnP/1f1fsqCBRAEZ/MEkFiVD4RrPNPI=
Subject key identifier:   17:D5:FD:AB:62:3E:30:64:DB:37:1B:1D:E7:4B:33:6A:FE:D7:EC:F2
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       05AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
Manifest number:          0581
Signing time:             Mon 28 Apr 2025 02:40:50 +0000
Manifest this update:     Mon 28 Apr 2025 02:40:50 +0000
Manifest next update:     Wed 30 Apr 2025 02:40:49 +0000
Files and hashes:         1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: 4/2BZJXqp8ObrSMZZy90q4bi1TVX1/MpDmt/HGJuqVk=)
                          2: 5AE1E9FA5D0511EEA42B02634AD9E6FC.roa (hash: 3moVOufBVE7Zt7f6LMhE/5sbyyTldC6Uw+BUVnVWoSE=)
                          3: 225E1C1A5D0111EE84F476554AD9E6FC.roa (hash: kq88ZlOyKB7THOoMNssLdpQ02h8ia/xXQ+2iVZ7J2UI=)
                          4: FC84574C5D0111EE96141C584AD9E6FC.roa (hash: Okx4V28Q0K9Gmg48hST+KVra0vLaTLDWdpeiFN5Ci10=)
                          5: 2483AF905D0211EE83B992584AD9E6FC.roa (hash: Aw4/RA9K4Ykb7IK+5WQ/phdBFNqQbpFmRoAfqfKXPLQ=)
                          6: 827F90845D0011EE980A5D534AD9E6FC.roa (hash: RO0CGeTcKaXK/FdlxdtP2CmOyKygLBbmktPBpckxE3M=)
                          7: 8D6B78EC5CFF11EEA03853504AD9E6FC.roa (hash: N2EcD3kdSdMQj5/9reT3f9eObU8HLxcgDqJJWyRBPgs=)
                          8: 34FC0F905D0511EEAE7EAB624AD9E6FC.roa (hash: H+j2sl93787CFACKHJZ2i3yTPZDLHhpCUcbZ7JZsa4E=)
                          9: 945E2B185D0411EE8D3892604AD9E6FC.roa (hash: d/gNhDflzi72cFF6y87HPjWcr0aiAFNsEodN1oAWqEA=)
                          10: 7A109FF65D0511EE940659634AD9E6FC.roa (hash: zi9Vy+xYI0UvmjrfPQMC6MnvjqOO85SwSNuBtpF4/Rk=)
                          11: 71527C825D0411EEA28107604AD9E6FC.roa (hash: JEspqxm7k/yKfLqkh60Wxdp048Uar1Vepr+KMQVGZx8=)
                          12: F4951C205D0011EEBF24C1544AD9E6FC.roa (hash: Qa3/TWdVQMu4WhszkgkkRxdL8yXPHeDP2Dy1srVYNqs=)
                          13: D60E89E25B9511EEB957D7424AD9E6FC.roa (hash: 47xOimpLF4HNPtm11zcgdbwCx3vBNH6MpzBlka2soAs=)
                          14: D1A66F1C5D0411EE852A3B614AD9E6FC.roa (hash: JtCoYRvfXPN+u72zGe8p+AwiJEVYMDfmwPActUPWfIo=)
                          15: 6BDE095E5D0111EE982F44564AD9E6FC.roa (hash: yqnrY1cW8cd1ADXeJYR3eg/nFZwSDlUlVmw4K61V46g=)
                          16: 48AE64E45D0411EEABE47A5F4AD9E6FC.roa (hash: NlN5GuQ4P+VJ7e0Fy7dfihYVptHxpkRN+RO9eJe+tjA=)
                          17: DDC0C1E25D0111EE990BC5574AD9E6FC.roa (hash: ZtzdpLg+cES3lAKHJfAJmzHsS72i6usJEHQFaVsAHMk=)
                          18: 2E8C988C5D0011EE94A453524AD9E6FC.roa (hash: qkEdOg3v1Hi74syjrowa1fyOVmAU+CiB0FWAsNCKqiU=)
                          19: 7D0B92E25DFF11EEA083CC7C4AD9E6FC.roa (hash: yPevgGeVIgPXFmD7thEhkTJ0C74tfVN031am+qRV4Ns=)
                          20: A6FEFAC45B9511EEA0401B424AD9E6FC.roa (hash: 5H3IsQPRKzsjCmSF4Mj3KJBl8YX+v0lawLYLk9Bsn9o=)
                          21: 5CB6A91E5D0011EE80E803534AD9E6FC.roa (hash: YPxRfQMFs/bFGF0nwNini75XzzE5w/R2cSJRMlDRuBU=)
                          22: B98C6F385D0111EEB1A76D574AD9E6FC.roa (hash: F5VVopW+r+g4qZ9la9iHazBSUZj+5NHY9YJ/sA99AGQ=)
                          23: B258B1565D0411EE96F5E0604AD9E6FC.roa (hash: lENYn+z/UP3uj+chQuw1XzzU8SwP6HpovDS9mQhQc6g=)
                          24: D88D45EE5CFF11EE934D39514AD9E6FC.roa (hash: dR1Cc5I2bmjrB40L2cZOkh5VtSV+QNlrEFIs81jyw1s=)
                          25: D3AB273E5D0011EEA6BC70544AD9E6FC.roa (hash: vXMhunG/CaNVINNkKavvi+q/C0vdB+tjS5zdK5VFvsU=)
                          26: D6E05488587811EEAA1EAD554AD9E6FC.roa (hash: +Em+RCNdT3MXCYbNKE1mpMoF3R+uo65tsdVwoFOPvNs=)
                          27: B08855CE5D0011EE8E4EFC534AD9E6FC.roa (hash: 9IMQ9XS6DyCwFAf8UM6rX8b43JjHQw0z5g9RM9dxd2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454 (0x5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Apr 28 02:40:50 2025 GMT
            Not After : Apr 30 02:40:49 2025 GMT
        Subject: CN=680eeab2-0f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:b9:8f:fc:0f:e1:66:1e:02:0a:d7:0b:02:
                    41:6e:ec:c5:f0:c9:4a:2e:90:1a:ef:ce:6a:91:47:
                    e8:4c:f1:36:40:f2:a0:78:af:8f:8c:24:ec:55:71:
                    d9:b3:39:6c:34:69:da:37:ff:25:10:ca:a5:4b:71:
                    24:da:06:32:a0:d0:60:00:6b:5c:9a:08:81:15:df:
                    f5:df:56:24:23:e1:60:b2:7e:49:5e:5a:30:37:2f:
                    02:d6:64:d5:c2:35:8b:a3:93:ce:83:9b:6b:71:15:
                    68:60:17:fa:da:41:a5:3b:d1:51:18:47:6a:e2:4a:
                    80:7c:60:7a:37:02:22:45:36:7e:58:8b:6e:57:57:
                    fb:5d:44:71:c3:c3:9a:23:0b:29:73:f4:37:28:56:
                    a6:bf:f5:35:0a:e4:0c:e2:cd:28:9b:1b:e9:2e:82:
                    9b:44:7c:0c:03:35:7c:7a:47:12:b1:6f:48:a9:c1:
                    c9:48:97:c9:bb:e0:0d:1f:bb:7f:b0:9a:f0:99:8b:
                    80:07:8e:5a:9d:99:1a:9c:3f:50:f9:2c:cb:cb:14:
                    2c:05:03:a0:07:db:1f:cb:39:eb:f8:d1:eb:57:54:
                    b0:79:89:c9:13:21:4c:44:35:eb:5c:a5:f8:22:18:
                    65:e1:ba:87:6c:92:70:12:da:e9:ea:b7:60:f8:8c:
                    88:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D5:FD:AB:62:3E:30:64:DB:37:1B:1D:E7:4B:33:6A:FE:D7:EC:F2
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:f7:a5:a0:7e:6e:6a:25:08:b5:ef:63:11:cb:53:ca:99:
         f8:55:11:6e:15:fd:38:14:4f:fe:14:b8:8e:3c:0c:95:41:fd:
         5d:de:04:4e:31:28:07:d8:32:85:a5:3a:82:bb:60:13:f9:ec:
         29:08:3d:9d:af:24:a4:59:64:e0:f0:54:34:6a:27:b7:89:e6:
         9c:c3:b7:d5:7e:b4:9c:83:1c:19:3b:7f:33:94:98:9d:ee:07:
         f7:18:79:cd:fc:a4:11:1c:b1:cf:05:66:be:0f:18:be:b3:78:
         d3:80:7f:29:1f:4c:0a:d7:20:94:c9:9e:42:40:0b:2a:da:3a:
         60:cf:77:2c:e1:63:7a:66:b5:4c:b0:22:d3:72:84:1e:74:e5:
         21:69:ce:06:4c:2c:d0:3c:4b:c4:62:79:29:bc:68:d4:ff:88:
         01:58:8e:c1:bf:d7:c3:d1:fa:2e:2a:6a:4c:8d:92:7f:84:0f:
         52:3f:91:e0:d8:78:04:39:91:6a:06:30:e3:c7:b6:7d:87:9e:
         40:0f:ea:00:5f:4e:d0:c6:ae:c8:5d:83:e3:4c:33:b8:19:c9:
         ce:a0:ae:08:86:d8:50:ee:80:44:2d:8f:ef:ac:bf:c7:45:8d:
         68:e6:45:3f:f4:9b:ad:3d:b2:a4:3a:e1:65:00:ad:0d:31:ef:
         ba:a7:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:52:15 2025 by rpki-client