Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
File:                     pfjRvVkiC4dTo3nUoz0jv0IysTY.mft (raw, json)
Hash identifier:          s49E+JrJlJ4juUL7F7UZR1maJrfnvdjFuvcOknNn4Vw=
Subject key identifier:   04:56:7D:7F:9A:81:A8:00:70:AE:11:DE:59:46:F0:06:36:A0:CF:0E
Authority key identifier: A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
Certificate issuer:       /CN=F362B5D1AF/serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
Certificate serial:       05CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
Manifest number:          05C9
Signing time:             Mon 28 Apr 2025 02:21:42 +0000
Manifest this update:     Mon 28 Apr 2025 02:21:41 +0000
Manifest next update:     Wed 30 Apr 2025 02:21:41 +0000
Files and hashes:         1: pfjRvVkiC4dTo3nUoz0jv0IysTY.crl (hash: j6yToyZEyypr/bxDUV1Z7j7y3DpkXDYz4eMHR62TkKQ=)
                          2: AE758D00D4CD11EB8D9EBF2EF8AEA228.roa (hash: AOBdcxlDhMloECpYuyvumc0EXau1j2QFtzwgu7UYQFA=)
                          3: 59B094CCD4CD11EBB5CE312EF8AEA228.roa (hash: WZXnDXOTSBrcGjPAB+W4tlPrl63sGMKab4xVa7Dl5+c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B5D1AF, serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
        Validity
            Not Before: Apr 28 02:21:41 2025 GMT
            Not After : Apr 30 02:21:41 2025 GMT
        Subject: CN=680ee636-f1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:e1:52:8a:4c:be:be:87:43:09:80:1a:c0:
                    61:96:e5:07:ec:9c:ec:3a:a6:84:6a:c0:3c:15:c0:
                    a5:bf:d3:f6:24:e7:27:4c:74:6a:f3:ff:d7:77:97:
                    ec:a4:36:e9:09:53:d0:ea:ed:f8:d1:7c:bc:b1:2e:
                    ec:ec:fd:df:d6:58:a1:98:c5:1d:96:60:76:68:b9:
                    3e:55:a7:fe:13:5a:ee:24:d1:69:ca:8c:92:20:d8:
                    7d:a8:f3:0f:05:0f:8e:aa:5a:91:8f:59:fa:c4:b5:
                    65:c3:a3:83:dd:0b:cf:63:75:b1:1c:72:df:b2:8c:
                    50:e7:56:13:58:11:f4:f3:15:b1:37:84:95:02:a5:
                    6f:1a:93:f1:d7:35:22:19:ea:14:5d:a9:05:25:aa:
                    03:cd:dd:54:3a:75:c5:f2:85:fd:9a:f7:df:f7:4b:
                    81:ff:9e:f6:57:0f:81:b2:24:ed:1a:81:c4:ee:19:
                    e1:2c:1a:0a:9c:54:e1:35:05:1f:00:c4:37:a4:8d:
                    e7:3e:30:77:23:b8:d6:54:db:4c:7a:01:24:35:93:
                    37:e1:dd:3a:a2:20:fc:57:ef:a8:0c:30:a5:34:e6:
                    df:60:df:59:28:7c:50:90:61:56:a3:77:86:b3:86:
                    4e:3f:20:bb:13:73:42:16:c1:9a:81:9c:1c:5d:ae:
                    37:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:56:7D:7F:9A:81:A8:00:70:AE:11:DE:59:46:F0:06:36:A0:CF:0E
            X509v3 Authority Key Identifier:
                keyid:A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:83:69:8d:d5:21:0e:cb:5b:f7:2a:51:13:87:cf:9e:34:80:
         c6:d4:4d:52:30:c2:d4:fd:e7:12:ba:2c:db:9c:64:83:64:df:
         0c:02:bd:14:a9:79:71:94:eb:0c:1d:ec:0e:59:83:43:d1:b8:
         01:ce:dd:c1:48:9c:ae:1e:9d:e0:20:20:70:4d:06:67:ac:64:
         b0:c3:e9:76:b0:5e:5b:cb:08:d7:4b:d9:c3:82:55:02:f0:fe:
         6c:6d:6b:54:82:af:61:78:1b:ae:76:9a:65:9b:3b:9c:93:43:
         1a:53:7a:ad:7c:56:af:1e:f1:dd:61:62:60:2c:60:35:2d:f9:
         ee:43:b8:b3:4e:38:64:bf:c2:0a:12:22:01:38:26:c5:8e:05:
         87:2c:23:9a:68:90:86:c9:a1:10:07:22:cf:1e:26:92:88:64:
         cc:23:8b:cf:07:18:d5:b0:d4:66:cc:a6:61:f0:c6:08:39:b9:
         89:7f:88:91:3d:03:fb:38:c5:c3:18:42:5a:0c:b2:bb:75:52:
         42:62:18:b7:93:e2:be:5c:c9:2a:9c:2a:6a:ab:ab:ee:b3:bc:
         ad:83:92:36:45:1e:39:a1:b9:f4:e2:9c:d1:0d:44:5b:2b:c0:
         8e:90:75:d2:32:f1:cb:8f:28:2a:a4:52:f3:a2:51:4d:d5:cc:
         9d:f1:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:48:15 2025 by rpki-client