Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
File:                     Ho4GD8DqacvW-tSkvG7THSnI5Go.mft (raw, json)
Hash identifier:          87HyaDMAaKuBfWunMKy8O2vg+KLH3xbbIQ9Esg3lBL8=
Subject key identifier:   EA:92:1E:2F:C1:07:DD:18:4F:04:39:46:EC:D3:43:F9:4A:BF:46:9D
Authority key identifier: 1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A
Certificate issuer:       /CN=F363D435AF/serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
Certificate serial:       045F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
Manifest number:          045E
Signing time:             Sun 27 Apr 2025 02:53:52 +0000
Manifest this update:     Sun 27 Apr 2025 02:53:51 +0000
Manifest next update:     Tue 29 Apr 2025 02:53:51 +0000
Files and hashes:         1: Ho4GD8DqacvW-tSkvG7THSnI5Go.crl (hash: atDDRZvPWP6HGrZNE+TEL83bEua3Ill9GYS569hwsak=)
                          2: 5C02D460D03F11EC9A4EAA89F1222468.roa (hash: F/9p11nL0wbGpBdREAn2qkEHpPq+G048kxKZo17dwn4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119 (0x45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363D435AF, serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
        Validity
            Not Before: Apr 27 02:53:51 2025 GMT
            Not After : Apr 29 02:53:51 2025 GMT
        Subject: CN=680d9c40-874f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:a9:46:d0:8b:3a:1c:26:07:6a:e6:42:b5:
                    4e:41:6a:ed:15:87:34:9c:42:41:c2:74:a5:de:59:
                    e7:30:86:e1:b3:72:14:83:7a:db:31:d6:d9:6b:cf:
                    d9:48:9f:9b:ec:3e:e4:f2:e3:0d:25:df:4a:c1:a8:
                    0c:09:3d:2d:4d:4b:96:07:03:a3:81:d2:77:ec:81:
                    10:4e:c0:7b:7c:77:07:a9:8e:51:79:e2:f3:3c:99:
                    41:a4:88:86:0e:98:52:66:c7:4f:aa:d7:f2:b8:15:
                    45:6d:cf:81:cf:e9:1d:b5:6d:1e:8b:47:c3:e4:32:
                    e1:d1:d6:fa:4d:4e:75:f7:e4:f5:cf:72:e4:10:53:
                    98:d7:5c:b3:91:56:8b:fe:6b:b7:03:c9:a0:ce:f7:
                    1e:ef:c6:a8:62:5c:12:e6:62:fb:13:49:1b:ae:d2:
                    fe:69:68:88:ee:0d:96:df:87:7b:0e:8f:63:4c:0d:
                    c5:ed:a2:55:f9:32:34:89:dc:19:88:e4:b9:2a:3a:
                    ef:4f:ac:30:c3:0f:ce:5c:79:ec:c8:2c:4d:72:10:
                    5c:22:78:0a:49:a1:ca:9d:cd:85:da:fa:2a:2c:15:
                    87:5b:53:59:61:f8:fc:9f:b4:21:46:26:61:85:4e:
                    4a:7a:45:b6:01:0d:85:0a:33:64:0b:07:60:34:a4:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:92:1E:2F:C1:07:DD:18:4F:04:39:46:EC:D3:43:F9:4A:BF:46:9D
            X509v3 Authority Key Identifier:
                keyid:1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:2f:bb:ed:8f:8c:00:5e:65:b1:e4:c7:68:58:a9:58:c0:89:
         23:d6:c5:4f:b7:93:1d:f4:79:10:00:89:1a:f9:52:98:1e:28:
         36:6e:0b:19:23:08:18:47:a8:26:f5:a0:08:d8:bf:dc:76:5c:
         96:02:bd:44:01:6b:06:65:7a:80:c9:74:00:21:f8:aa:98:6a:
         ba:08:10:f9:51:67:29:fd:78:13:c1:cd:ca:a2:b6:0e:5a:26:
         57:e7:a3:95:d7:a1:6b:3b:3e:b8:d7:7e:64:00:64:ff:1e:78:
         be:7b:42:d0:8b:b0:5a:20:28:20:00:4d:3d:70:28:80:5b:f3:
         04:eb:d8:cf:64:b9:38:d6:5c:cf:90:48:21:18:36:15:a6:a7:
         bb:a4:69:9f:b1:86:68:5f:eb:60:a6:6c:ac:f7:61:c9:af:8d:
         eb:25:d8:ea:ea:9d:28:4e:8c:77:dd:0f:fa:83:46:36:8c:d0:
         8f:bb:1f:13:8b:a9:93:67:ff:cf:c4:5f:24:79:a7:64:8a:fb:
         df:43:1e:0a:d3:85:e6:68:67:74:5b:f7:ed:98:d0:c8:8f:85:
         4b:35:ce:92:ed:b1:29:8c:a6:13:ac:f7:ed:c3:65:d6:82:e3:
         5d:71:1a:a4:9a:92:02:fd:9b:c7:d9:0b:17:2e:96:5e:7d:cb:
         38:91:04:02
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0Q0MzVBRjExMC8GA1UEBRMoMUU4RTA2MEZDMEVBNjlDQkQ2RkFENEE0QkM2RUQz
MUQyOUM4RTQ2QTAeFw0yNTA0MjcwMjUzNTFaFw0yNTA0MjkwMjUzNTFaMBgxFjAU
BgNVBAMTDTY4MGQ5YzQwLTg3NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+B6lG0Is6HCYHauZCtU5Bau0VhzScQkHCdKXeWecwhuGzchSDetsx1tlr
z9lIn5vsPuTy4w0l30rBqAwJPS1NS5YHA6OB0nfsgRBOwHt8dwepjlF54vM8mUGk
iIYOmFJmx0+q1/K4FUVtz4HP6R21bR6LR8PkMuHR1vpNTnX35PXPcuQQU5jXXLOR
Vov+a7cDyaDO9x7vxqhiXBLmYvsTSRuu0v5paIjuDZbfh3sOj2NMDcXtolX5MjSJ
3BmI5LkqOu9PrDDDD85ceezILE1yEFwieApJocqdzYXa+iosFYdbU1lh+PyftCFG
JmGFTkp6RbYBDYUKM2QLB2A0pHt3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6pIe
L8EH3RhPBDlG7NND+Uq/Rp0wHwYDVR0jBBgwFoAUHo4GD8DqacvW+tSkvG7THSnI
5GowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNENDM1L0I1MzlGRURFRDAzRDExRUNBRjYyOTA4NEYxMjIyNDY4L0hvNEdE
OERxYWN2Vy10U2t2RzdUSFNuSTVHby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hvNEdEOERxYWN2Vy10U2t2RzdUSFNuSTVHby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0Q0MzUvQjUzOUZFREVEMDNEMTFFQ0FGNjI5MDg0RjEy
MjI0NjgvSG80R0Q4RHFhY3ZXLXRTa3ZHN1RIU25JNUdvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtL7vtj4wAXmWx5MdoWKlYwIkj1sVP
t5Md9HkQAIka+VKYHig2bgsZIwgYR6gm9aAI2L/cdlyWAr1EAWsGZXqAyXQAIfiq
mGq6CBD5UWcp/XgTwc3KorYOWiZX56OV16FrOz64135kAGT/Hni+e0LQi7BaICgg
AE09cCiAW/ME69jPZLk41lzPkEghGDYVpqe7pGmfsYZoX+tgpmys92HJr43rJdjq
6p0oTox33Q/6g0Y2jNCPux8Ti6mTZ//PxF8keadkivvfQx4K04XmaGd0W/ftmNDI
j4VLNc6S7bEpjKYTrPftw2XWguNdcRqkmpIC/ZvH2QsXLpZefcs4kQQC
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:30:07 2025 by rpki-client