Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
File:                     gBdkcAW5GRQgyZGxrgeYtayhTQw.mft (raw, json)
Hash identifier:          SeNCLWlAAV7kjnDaOG/7i/RiV7h6Kvp5n9O/xLVhY9I=
Subject key identifier:   AA:54:1C:11:18:48:57:31:34:E2:E0:DC:70:87:BF:EA:4D:FF:CE:63
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Certificate issuer:       /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial:       062E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
Manifest number:          0622
Signing time:             Sun 27 Apr 2025 02:09:35 +0000
Manifest this update:     Sun 27 Apr 2025 02:09:34 +0000
Manifest next update:     Tue 29 Apr 2025 02:09:34 +0000
Files and hashes:         1: gBdkcAW5GRQgyZGxrgeYtayhTQw.crl (hash: qQxDaieHhUNTsfJGP8XRpjgHjDT3v3AhLkTfaRZqg1c=)
                          2: 49BADED6E0AF11EBA4AE8C60F8AEA228.roa (hash: bfzLeABKt8iJaNdlc12joZPlW2B3ok9kJhlWiLncwS0=)
                          3: 40E2C4A2E0D411EBB731DB11F8AEA228.roa (hash: iNVwS1o0KwvedAC6eQYfYJ+BAcXsoI+clsk0jnqfrIA=)
                          4: 10C8FFEEE29F11EBAA580947F8AEA228.roa (hash: 387HhPDysnyOhc8pmgAp8wGABIBNWQ6h4D9Qi4Iokv0=)
                          5: 7A4D6530E0D411EB863D3F12F8AEA228.roa (hash: P26YxJOy6uRICshHfktO8hTsp7ut8yCkshcNludKd0A=)
                          6: 254A1146DE4A11EB99E5AD21F8AEA228.roa (hash: +hq36BifBeCSUhyFbBupJ4tam0DEvG9eurBQqxlzAcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632CFEAF, serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
        Validity
            Not Before: Apr 27 02:09:34 2025 GMT
            Not After : Apr 29 02:09:34 2025 GMT
        Subject: CN=680d91df-c82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:aa:28:81:76:f2:fe:3d:d2:da:25:77:12:95:
                    a5:50:5e:17:5c:c0:da:10:14:9f:7d:1a:1d:09:2b:
                    a4:b0:dd:dd:29:f7:e0:92:1d:7a:61:b1:27:39:f7:
                    23:8b:fb:40:b6:6f:f4:02:c6:2d:bb:24:26:79:34:
                    18:4e:f0:57:21:53:a1:8e:a3:f9:7e:12:60:fb:42:
                    45:e9:ca:9c:71:03:26:c1:91:46:89:d3:2d:aa:34:
                    80:51:31:e1:97:6e:c1:19:bd:7d:43:3e:8d:b7:93:
                    06:aa:0d:5f:32:de:8e:2d:32:db:61:72:4a:59:73:
                    2b:ac:3e:ca:62:cb:74:2b:85:25:41:e6:df:3d:73:
                    a2:c6:33:de:fa:e2:a5:a0:3b:f8:46:ef:0e:6c:80:
                    9b:d1:ef:25:95:13:0b:ad:f2:ce:c8:42:43:f1:d3:
                    99:2a:57:09:33:f3:b6:8b:5c:9c:29:29:0e:ab:c7:
                    cb:b6:64:67:5a:e0:1b:7d:83:74:8f:30:87:1f:84:
                    c0:3a:76:77:47:e9:64:51:25:4a:e1:26:87:70:b4:
                    cf:ad:a9:d4:76:ce:ad:78:b7:0b:be:0e:75:78:c9:
                    85:1f:74:2d:6a:d0:fa:d9:f8:14:38:26:10:59:6e:
                    09:bc:06:6e:ba:5e:97:78:66:8b:97:3e:4b:de:88:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:54:1C:11:18:48:57:31:34:E2:E0:DC:70:87:BF:EA:4D:FF:CE:63
            X509v3 Authority Key Identifier:
                keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:83:7d:af:e9:75:3d:91:ee:6a:9f:e3:b3:b6:27:eb:d4:9b:
         3f:3a:34:0a:2c:33:a9:dc:47:df:42:c9:c4:25:6f:ae:84:fb:
         cf:f5:ba:74:fd:76:e7:05:b4:c7:4b:39:66:49:b2:86:ac:d5:
         ee:28:c8:01:16:a7:9f:a0:e6:42:e4:1d:1e:cf:69:84:ce:e4:
         7d:c3:68:e1:5c:f7:6a:f1:3c:10:56:07:01:37:24:ec:1f:b3:
         32:73:ec:32:9c:7d:1e:7b:71:e3:fd:7e:0b:30:5f:99:b5:5f:
         e2:cf:d9:29:7c:f7:52:5f:d6:c5:7c:69:d4:0c:e9:29:67:36:
         d3:ec:4b:2d:1b:dc:1a:59:f4:4f:13:3f:4c:3d:91:b7:d8:d2:
         0c:be:b3:5a:ed:66:35:91:d0:50:c4:73:47:07:f5:14:4c:44:
         44:05:8d:95:03:ac:ed:d8:d8:f0:0a:25:47:44:17:34:1a:61:
         bc:11:23:41:5d:d8:50:68:ad:0d:97:cf:5e:5b:ff:d5:a3:af:
         61:c7:68:1b:d1:55:c4:25:c1:11:66:5c:b5:93:3d:19:22:27:
         98:ee:58:f6:0d:5e:df:47:22:1d:1b:1d:e3:c0:96:1e:85:3c:
         75:9d:a2:aa:f3:d3:e6:c3:c5:93:d8:33:56:f7:00:19:45:1c:
         75:3d:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:34:04 2025 by rpki-client