Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
File:                     SbTWGQldlDKvZGCFPhR7710cSLA.mft (raw, json)
Hash identifier:          de4C7sXAR8NgEpKHVd4eAYuwFdecwR/T+H6hNaEHgWo=
Subject key identifier:   CE:39:1E:8E:9E:B2:21:46:95:B4:56:98:E4:C0:FD:4C:A3:F1:89:80
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
Manifest number:          39
Signing time:             Mon 16 Jun 2025 05:21:17 +0000
Manifest this update:     Mon 16 Jun 2025 05:21:16 +0000
Manifest next update:     Wed 18 Jun 2025 05:21:16 +0000
Files and hashes:         1: SbTWGQldlDKvZGCFPhR7710cSLA.crl (hash: +lnWe/9UKmOWVwPEdz3lNtJJDT4MGU7g1MgN/YELmNM=)
                          2: 5CCD6440299D11F0AD38AFE3DAE4EC9C.roa (hash: v4mhR83sjeZ2vAC+mHBy4f+8KOxUX5jeOYSaA7j55RU=)
                          3: A16D1040299E11F0A0371BECDAE4EC9C.roa (hash: ZIN6qTu+myOk/8/Xm5JH6ilbBdHCnz+M7KKnKepnBtM=)
                          4: 61D2FD9229B111F0B5081FE6DAE4EC9C.roa (hash: Brop1ncWpX/uNNO0gkigSNxXGhoMQh9wWM/lUreXu7I=)
                          5: 1B78052229B111F0A88218E6DAE4EC9C.roa (hash: lTtW4+RgQEGUJjKPbZNiHvs7ergbcAvfTNYM91hQFPM=)
                          6: 4C7A7612299A11F0B84321CFDAE4EC9C.roa (hash: Nlw1hIVnnrnHZycVHji07xpZ7hIoViBxXu2uxKW1+Ms=)
                          7: E383333E299D11F0A8FCB4E5DAE4EC9C.roa (hash: WNjVtEQEJnEB14WwlXqxjZdHQ29UrTDBkSgpJfcS8fE=)
                          8: 8B97C97C29B211F0BE9210EFDAE4EC9C.roa (hash: YWliehZSLVKOUVOtFDH1Zw4P9bTGn6VPsgJOpr2PpdI=)
                          9: C5A5AC4229B211F0881C16EFDAE4EC9C.roa (hash: 2J30cLTQTWAiY7lgicRA7cWnsPM0f3v7LmXj0giF2nM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Jun 16 05:21:16 2025 GMT
            Not After : Jun 18 05:21:16 2025 GMT
        Subject: CN=684fa9cd-4f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:1e:69:3a:ee:ff:72:d6:a3:8e:00:1e:c8:
                    ae:39:7a:4c:28:60:a6:67:95:7d:c8:87:b4:17:54:
                    6a:01:69:63:66:b4:e4:d6:d9:41:37:3f:19:2e:7d:
                    47:80:45:42:20:97:52:17:98:55:88:ee:2c:f0:6c:
                    eb:fb:f2:51:6a:ae:4a:f0:70:35:de:19:ba:48:23:
                    b7:e9:ea:70:9a:91:55:30:42:ca:ed:a4:19:f7:1e:
                    d1:3d:1c:5a:57:76:f2:f5:15:03:e0:ad:8c:d8:e0:
                    51:92:a1:96:5f:39:a4:14:1d:ef:96:2f:91:27:66:
                    1f:ca:b0:8b:fa:a1:52:62:f9:1b:ca:9f:14:b4:e7:
                    70:60:26:58:74:9c:16:29:90:d9:eb:58:b8:04:2f:
                    10:34:80:59:87:a8:f4:1a:c9:f6:41:89:76:f5:ca:
                    d9:bf:eb:cc:b2:1b:28:00:02:d1:85:2f:0b:78:db:
                    36:43:2b:40:ec:85:d5:6b:55:21:b8:23:86:94:05:
                    4c:28:3a:b5:d6:e4:db:51:2b:f2:57:59:54:e4:00:
                    ae:e8:fb:6e:3b:9b:dd:b4:32:56:f1:83:ae:68:87:
                    cf:94:bb:f6:f1:51:c8:b9:1e:4b:ea:42:15:54:c0:
                    37:d5:10:3b:7f:e4:7b:fa:ea:f8:b6:f3:b7:5e:50:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:39:1E:8E:9E:B2:21:46:95:B4:56:98:E4:C0:FD:4C:A3:F1:89:80
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:dd:56:d5:1c:02:cc:fc:4a:05:fb:70:3a:23:1a:af:46:
         cc:44:67:0d:fb:f1:32:17:8c:61:a9:2e:70:69:5f:63:ff:25:
         c4:8c:16:60:80:28:e0:80:2a:6e:03:5e:58:e7:40:29:85:22:
         d1:db:57:ec:54:4f:06:0b:64:15:70:f4:96:2b:08:cc:b9:d2:
         28:2a:1e:72:94:d9:31:82:25:c7:27:8f:ba:32:2a:20:f9:3f:
         95:59:99:e4:32:d3:0e:a1:90:24:d9:a3:b9:e7:8f:8b:79:22:
         ca:b1:06:2f:4d:48:8d:cc:3a:89:aa:62:4d:32:6d:05:a8:ee:
         01:a2:25:44:c2:9e:ea:68:5c:86:29:ba:fc:ce:08:5a:73:3f:
         cf:84:01:34:c3:f4:f7:39:a4:01:5a:e1:46:6b:37:ab:e2:7d:
         29:55:b0:50:0d:6b:57:35:0e:70:5a:c4:a3:2c:8b:c8:9f:fc:
         74:ea:45:0a:f2:bc:8d:61:17:5d:09:40:fb:db:9c:58:4a:4a:
         c9:7d:b1:62:bd:7c:4f:31:d9:30:19:e0:3a:6f:ea:a0:db:c6:
         9c:a3:78:e9:7c:9e:c6:85:5f:ee:38:b4:4b:e5:1a:36:7d:bc:
         68:7b:3a:bd:02:9c:70:6c:62:12:9e:fc:36:95:bb:e8:60:cd:
         d6:f5:cf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:00:24 2025 by rpki-client