Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.mft
File:                     j4wJefc86FLbmkuB95URxC-dGzM.mft (raw, json)
Hash identifier:          mOOCvlgly42z6fLoA7kIUQimUpY/QcmavMBPvXFAfn4=
Subject key identifier:   55:34:28:11:53:63:1B:4A:8D:F1:D9:D3:F8:07:16:6C:D3:1D:CA:B6
Authority key identifier: 8F:8C:09:79:F7:3C:E8:52:DB:9A:4B:81:F7:95:11:C4:2F:9D:1B:33
Certificate issuer:       /CN=F363AFA1AF/serialNumber=8F8C0979F73CE852DB9A4B81F79511C42F9D1B33
Certificate serial:       074A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j4wJefc86FLbmkuB95URxC-dGzM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.mft
Manifest number:          0745
Signing time:             Sun 27 Apr 2025 01:54:28 +0000
Manifest this update:     Sun 27 Apr 2025 01:54:27 +0000
Manifest next update:     Tue 29 Apr 2025 01:54:27 +0000
Files and hashes:         1: j4wJefc86FLbmkuB95URxC-dGzM.crl (hash: z16JFpQJ4M1L0Vb2g93LsY4D3KhqbOM8M/vK/BaWwF8=)
                          2: 8D2F2D3A950F11EA81C70365F8AEA228.roa (hash: E1m+mH12Mpyg/MvJKWPzJArtMLQOdegnE9nX0zGb32g=)
                          3: 5F67E3D8950F11EA910FD564F8AEA228.roa (hash: bjjrHbYjjqSz0f2JiVlDTz/pMXp7IwzgwakXgKQfPxE=)
                          4: E7D5B60A565C11EBA0010685F8AEA228.roa (hash: 9moA2uR4O6SXo/cDdVAmYzRLzT5s7TKI9d7SrqHCCDw=)
                          5: CBB18C42950F11EABC145265F8AEA228.roa (hash: NS3lQRZZ/q1We+IHBAB6S1hM35Toq9Ye+MJO4+ToHgM=)
                          6: 29A04204950F11EA9A188864F8AEA228.roa (hash: ATvTE1NmkvGY3ukA763zN8Nw+MkGODpI7C3fXm1SBUM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j4wJefc86FLbmkuB95URxC-dGzM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363AFA1AF, serialNumber=8F8C0979F73CE852DB9A4B81F79511C42F9D1B33
        Validity
            Not Before: Apr 27 01:54:27 2025 GMT
            Not After : Apr 29 01:54:27 2025 GMT
        Subject: CN=680d8e53-2c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:2a:d4:45:6c:5b:41:d9:51:75:78:88:45:
                    4a:33:9f:e9:ab:15:e7:ed:83:dc:7a:fd:00:ac:5f:
                    50:eb:79:d1:2a:5f:0c:4f:5a:d8:62:61:4f:ff:da:
                    99:4d:0c:b8:56:be:0a:26:a8:80:73:3f:dc:be:60:
                    fe:11:bb:d3:2d:20:0f:b1:06:13:5c:b9:82:e2:a0:
                    56:4b:89:5d:ef:af:54:c4:05:ba:9e:78:a7:bf:8a:
                    cc:95:b6:4b:06:d2:90:82:b0:67:4c:74:8b:51:64:
                    b1:79:cf:c8:c3:f7:7b:24:d9:ff:c7:fb:3a:c9:82:
                    d1:e5:64:40:bb:5d:bc:5d:b7:a8:45:19:0b:dc:be:
                    ec:24:80:87:d1:d6:f9:01:be:ea:3b:d3:e1:b2:5d:
                    a0:c3:de:65:60:99:82:85:24:8a:83:84:e1:35:e4:
                    6f:cb:2b:62:3b:6d:14:b0:55:c1:fb:ee:03:4f:88:
                    5f:43:99:4b:db:a6:04:b4:8d:ca:a4:e1:7c:34:64:
                    d7:cc:ef:d4:99:7b:89:66:0b:a4:1b:f1:a8:23:0b:
                    75:dd:b8:79:35:30:83:af:4d:42:92:79:8d:88:01:
                    94:bf:97:b2:7d:f6:7e:5e:7b:a1:17:f3:e7:e8:34:
                    d2:66:6b:f5:ca:59:ff:d6:98:f9:10:97:cb:b6:9c:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:34:28:11:53:63:1B:4A:8D:F1:D9:D3:F8:07:16:6C:D3:1D:CA:B6
            X509v3 Authority Key Identifier:
                keyid:8F:8C:09:79:F7:3C:E8:52:DB:9A:4B:81:F7:95:11:C4:2F:9D:1B:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j4wJefc86FLbmkuB95URxC-dGzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:eb:bf:6f:f3:71:63:e3:4f:06:0e:10:f9:d8:c1:f6:c6:02:
         6a:f4:e8:b7:49:d6:93:0d:d3:63:3c:24:61:70:08:a5:fc:dd:
         89:f0:f8:73:c1:49:3d:c2:12:14:7a:36:81:38:0f:f2:72:aa:
         ca:91:78:cc:b2:08:4b:05:53:73:89:38:b0:de:5f:70:2b:d4:
         5f:0d:a0:f9:97:2d:14:77:72:18:79:2e:66:6c:60:f7:49:35:
         41:27:a9:d9:0d:4f:df:1a:2f:6b:4b:55:b4:23:35:1b:d5:a5:
         76:86:df:d9:52:48:17:3b:df:f8:69:f9:82:38:48:71:8a:2e:
         03:c0:cb:96:5d:f3:b1:3c:a5:51:34:73:38:17:47:26:84:7e:
         34:73:7d:e9:cf:a9:38:f5:53:91:ea:2b:7f:7a:14:63:17:d5:
         97:75:84:18:3c:de:9d:69:72:35:e4:37:ec:0d:9b:9f:65:37:
         7c:dc:44:98:18:3f:9e:41:1d:2a:1e:59:82:2d:1c:15:88:9a:
         49:ad:c0:e0:d4:ee:d5:29:93:ce:7b:0a:c3:83:a0:ac:af:23:
         a6:64:6d:b7:57:22:63:c7:af:4b:f5:c0:83:57:5d:ac:35:67:
         c6:c5:3d:3d:2c:d4:2d:78:67:80:04:16:d4:53:c9:7c:b8:10:
         d5:51:74:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:53:27 2025 by rpki-client