Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File:                     l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier:          ew3l7nx5tZ0x3SgiBt0l1B64TkNbQ0fYCNbvwnhunGY=
Subject key identifier:   ED:97:14:AD:67:A2:6C:C5:FC:5D:86:EA:A6:0B:F4:60:63:0A:02:0D
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer:       /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial:       02E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number:          02E7
Signing time:             Sun 27 Apr 2025 03:41:55 +0000
Manifest this update:     Sun 27 Apr 2025 03:41:54 +0000
Manifest next update:     Tue 29 Apr 2025 03:41:54 +0000
Files and hashes:         1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: aYCTtMPYE+v1Aube+ggz3i33523tIgfBwUh/H2B/exk=)
                          2: 60A3BEAAEE7311EDBF3DAE174AD9E6FC.roa (hash: QNrfzd3ARf2QVpOaSCByjJBaaDBdSWDu5u6B8Hs+BLk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 744 (0x2e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AF, serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
        Validity
            Not Before: Apr 27 03:41:54 2025 GMT
            Not After : Apr 29 03:41:54 2025 GMT
        Subject: CN=680da783-e61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:47:87:56:22:6c:8e:01:06:5e:38:d6:13:
                    72:a1:b2:cb:b6:33:7c:12:73:7f:7a:0f:9f:9b:1c:
                    ba:ea:55:2a:a2:20:b3:be:13:85:19:55:2c:8d:6f:
                    66:69:76:1d:74:d1:31:65:90:a6:bd:74:80:99:f9:
                    ee:93:e6:de:75:0e:f3:1c:30:97:44:e3:f3:80:23:
                    f9:28:3d:8d:4d:13:a1:87:11:ba:8a:65:ad:34:ba:
                    0e:96:ba:80:f9:92:dc:2e:69:63:8a:78:fb:ca:7e:
                    10:9c:e5:da:cc:7a:8a:60:ef:fb:2d:d8:88:4e:ad:
                    3c:5f:06:51:2a:d5:81:fe:a4:72:98:82:25:28:27:
                    e4:bd:af:ef:32:80:d5:ff:09:51:85:ac:ac:be:02:
                    01:fe:c2:95:8d:57:71:ba:fa:38:e4:e4:aa:39:32:
                    f7:cd:4f:09:1f:a2:42:4b:63:ef:02:3b:ea:1b:0e:
                    32:c4:c8:c8:3f:39:e4:90:4b:05:d0:b7:dd:af:bc:
                    3c:f3:0d:fc:39:f9:10:3f:3d:7e:72:ee:23:8b:86:
                    bd:70:5f:b7:97:9f:1c:14:6a:fd:25:05:d5:0c:71:
                    36:21:ca:41:11:da:17:cd:3f:7b:73:2d:a6:42:20:
                    1c:51:27:45:06:f0:41:68:5c:42:21:a8:7e:c7:ac:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:97:14:AD:67:A2:6C:C5:FC:5D:86:EA:A6:0B:F4:60:63:0A:02:0D
            X509v3 Authority Key Identifier:
                keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:93:37:4d:0b:0c:28:e9:60:26:de:67:50:a5:3c:11:eb:de:
         24:43:f7:b8:8f:01:f0:f3:68:dd:f2:d4:6b:3a:fd:ff:97:28:
         30:c8:89:2b:75:42:95:e8:c1:dc:b2:5d:02:f2:21:b8:b7:d8:
         c4:a0:18:c3:5b:6e:aa:10:b8:59:e3:a0:3b:af:59:0f:63:7a:
         aa:30:7d:f9:3c:78:a1:6f:7c:70:91:a8:74:c5:b2:5a:61:9f:
         e2:ad:3d:27:cb:6d:06:b2:fd:cf:08:4d:08:e0:9e:1b:3f:87:
         17:60:f3:ce:21:7b:60:ac:73:5a:90:da:27:8e:76:e9:c3:a2:
         eb:73:95:e7:97:df:dc:e1:e9:69:e0:9e:30:a1:65:c1:2f:10:
         49:92:13:43:03:4c:f6:45:79:7d:52:c5:df:2f:f5:c2:aa:1d:
         3b:c7:c4:b0:18:6b:e4:82:6f:ab:b6:39:6d:bf:eb:59:c8:76:
         36:58:cd:95:cc:3c:b2:b6:5b:8a:36:0d:20:b8:89:e3:85:05:
         86:5d:8d:ed:b1:5d:17:1b:09:36:f5:66:db:06:58:eb:f6:9a:
         1e:d7:8a:80:fb:e3:4c:21:f3:20:89:a5:46:f2:c1:0a:f4:be:
         3a:5d:4d:39:e8:00:14:ff:06:48:bb:52:c3:e1:04:68:bb:e8:
         ee:87:d7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:55:09 2025 by rpki-client