Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
File:                     74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft (raw, json)
Hash identifier:          QMi1MVWDcrGo8soPiv6c5qpP/Wom9V1nNUjoSwacx30=
Subject key identifier:   89:1C:E6:BB:E1:4B:F1:F4:65:2A:CB:5A:16:0A:67:89:4B:B0:53:43
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Certificate issuer:       /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial:       0558
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
Manifest number:          0548
Signing time:             Sat 26 Apr 2025 02:38:48 +0000
Manifest this update:     Sat 26 Apr 2025 02:38:48 +0000
Manifest next update:     Mon 28 Apr 2025 02:38:48 +0000
Files and hashes:         1: 74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl (hash: WRLiN95j0YuD5uw9bsc37Cj/UGLcdevNyACb5qWw964=)
                          2: 945E7DD6C09411EEB7EE3CB6775412E6.roa (hash: tYOnT9BqjQytDTUPG0XkVhwFzA0iw870t7nSn78qeKY=)
                          3: FCC2B53CC09311EE973207B5775412E6.roa (hash: nXq9HLYp0GlNmQIEUdb1IZ99wB3H3x5IMG8Jb1p7VY4=)
                          4: 8569FFFEC09311EE82CC19B4775412E6.roa (hash: qk3Riga7xUPf3FLu17cWPMbk3RmFvo1KiRk9xRM0fy8=)
                          5: 53A66100C09411EEA90F91B5775412E6.roa (hash: +3UIXUyKPa3bDPDxQDj5kfU3yXkutIrwCuUhyp487Lg=)
                          6: D675B9C4C09311EE81BFE4B4775412E6.roa (hash: yeVSsCWEbMjwZK7TCJavELf3uC42giGMll3LnNn7b1U=)
                          7: 3029805EC09411EE8A964BB5775412E6.roa (hash: 1o3m2JRCddBtFM+D9ve2QUFy2WmECuUP1FMBaEt3CSw=)
                          8: A7408026C09311EE8AB05AB4775412E6.roa (hash: kQaIIUytQg6HwRLvbfsqiwa0mQhtFpbPcLNYzRGCaPQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
                          rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 02:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636185AF, serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
        Validity
            Not Before: Apr 26 02:38:48 2025 GMT
            Not After : Apr 28 02:38:48 2025 GMT
        Subject: CN=680c4738-64fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:78:4b:2a:50:05:76:ba:44:05:fc:74:59:
                    96:0d:ed:6b:91:b6:3b:90:1b:67:00:c5:c0:99:49:
                    a9:d2:a7:72:d0:32:ed:5f:2b:b4:80:e4:e8:4e:9c:
                    f7:8c:62:19:5e:f5:4d:17:bc:f0:c8:8c:7f:1c:fd:
                    bf:7d:40:3f:52:77:32:58:bd:b6:71:a5:c9:73:36:
                    31:81:78:e3:9e:26:7f:84:43:fe:23:58:6e:80:6e:
                    00:b5:89:be:03:05:99:85:e5:c1:d8:0b:31:17:e8:
                    50:11:15:6c:b1:90:05:c7:31:c0:07:16:8e:10:8c:
                    aa:2f:2d:1f:4b:cd:9d:38:58:13:03:30:43:2e:f9:
                    32:24:7a:db:69:40:c0:b0:4e:06:f5:39:f9:98:ab:
                    51:1d:b4:ae:0e:ca:1c:32:bc:14:7b:2d:42:95:62:
                    62:39:89:e8:d3:c1:32:95:ce:89:af:b3:99:0e:b4:
                    d3:70:d9:9d:b0:85:93:ff:cd:43:48:f4:0a:8f:8b:
                    4e:7c:75:1d:24:4e:3e:01:87:32:48:fc:c4:b7:78:
                    4d:67:ce:b8:ff:b0:7f:3a:ff:c9:1c:d7:9a:81:da:
                    48:d8:84:80:2e:65:e3:33:85:aa:81:38:b6:d7:0b:
                    98:c1:e7:f5:95:59:c0:a6:84:87:a2:42:e9:0d:4d:
                    d8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1C:E6:BB:E1:4B:F1:F4:65:2A:CB:5A:16:0A:67:89:4B:B0:53:43
            X509v3 Authority Key Identifier:
                keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4a:de:ed:3d:26:9a:9e:0c:bd:d9:25:00:7f:87:da:b8:7e:
         bb:d0:de:2c:12:c9:63:93:d7:42:2c:4f:db:d9:18:62:71:71:
         ba:ff:ac:90:2c:a8:26:48:46:7e:e1:f9:40:f9:5c:82:c0:3f:
         a5:de:ee:4a:1f:0a:86:ec:3f:70:34:17:6d:56:fc:35:c4:51:
         c8:b4:df:09:1e:00:3d:90:84:81:59:8a:7e:50:fd:20:27:ac:
         79:64:d5:b2:3c:2b:1e:e2:9d:6c:a8:72:9e:d8:0c:96:8c:22:
         3f:74:d7:aa:ab:96:de:5c:2b:ca:d1:f8:f4:58:b5:a4:84:9c:
         27:27:c5:e5:44:71:19:ce:77:7a:54:52:39:0a:b7:c3:6f:55:
         b1:7d:cc:64:5e:50:72:0d:10:60:0f:3c:6f:13:c6:c7:78:ff:
         a9:1a:0e:54:77:dc:a0:b7:3a:47:b8:91:31:d1:9c:a7:00:d6:
         c9:75:41:27:ec:d7:27:8a:b3:8f:e0:65:36:91:8c:7f:6f:7f:
         83:46:d6:f3:99:16:f5:cd:7c:2f:7e:d7:72:62:6c:29:5d:7d:
         63:33:82:51:c3:58:9f:d2:26:af:b7:e9:c2:d5:b3:9e:83:01:
         4a:79:8d:79:8e:8b:12:c4:7c:78:c0:a1:1a:9d:94:40:2e:2b:
         ec:4b:1b:da
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzYxODVBRjExMC8GA1UEBRMoRUY4Nzk4OTg5RTRCOEZCMzU5NDY1NzRGN0JDN0Yw
OEUyQ0Y3RkU0QjAeFw0yNTA0MjYwMjM4NDhaFw0yNTA0MjgwMjM4NDhaMBgxFjAU
BgNVBAMTDTY4MGM0NzM4LTY0ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4TnhLKlAFdrpEBfx0WZYN7WuRtjuQG2cAxcCZSanSp3LQMu1fK7SA5OhO
nPeMYhle9U0XvPDIjH8c/b99QD9SdzJYvbZxpclzNjGBeOOeJn+EQ/4jWG6AbgC1
ib4DBZmF5cHYCzEX6FARFWyxkAXHMcAHFo4QjKovLR9LzZ04WBMDMEMu+TIkettp
QMCwTgb1OfmYq1EdtK4OyhwyvBR7LUKVYmI5iejTwTKVzomvs5kOtNNw2Z2whZP/
zUNI9AqPi058dR0kTj4BhzJI/MS3eE1nzrj/sH86/8kc15qB2kjYhIAuZeMzhaqB
OLbXC5jB5/WVWcCmhIeiQukNTdgpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiRzm
u+FL8fRlKstaFgpniUuwU0MwHwYDVR0jBBgwFoAU74eYmJ5Lj7NZRldPe8fwjiz3
/kswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM2MTg1LzZFRkQ3OEI2MjcwOTExRUNBRjgwREM3QkQ4QTAxNENFLzc0ZVlt
SjVMajdOWlJsZFBlOGZ3aml6M19rcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzc0ZVltSjVMajdOWlJsZFBlOGZ3aml6M19rcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzYxODUvNkVGRDc4QjYyNzA5MTFFQ0FGODBEQzdCRDhB
MDE0Q0UvNzRlWW1KNUxqN05aUmxkUGU4ZndqaXozX2tzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkSt7tPSaangy92SUAf4fauH670N4s
Esljk9dCLE/b2RhicXG6/6yQLKgmSEZ+4flA+VyCwD+l3u5KHwqG7D9wNBdtVvw1
xFHItN8JHgA9kISBWYp+UP0gJ6x5ZNWyPCse4p1sqHKe2AyWjCI/dNeqq5beXCvK
0fj0WLWkhJwnJ8XlRHEZznd6VFI5CrfDb1WxfcxkXlByDRBgDzxvE8bHeP+pGg5U
d9ygtzpHuJEx0ZynANbJdUEn7NcnirOP4GU2kYx/b3+DRtbzmRb1zXwvftdyYmwp
XX1jM4JRw1if0iavt+nC1bOegwFKeY15josSxHx4wKEanZRALivsSxva
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:08:19 2025 by rpki-client