Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
File:                     QoqJMY5QZ92cjs9n5355xf2jeSs.mft (raw, json)
Hash identifier:          +4mmZ2yhCPAabnPoyHJUV5nFt3Li5dWOx1Cz1ceiSg0=
Subject key identifier:   C8:EE:13:84:99:33:73:87:0D:22:09:EA:95:6A:7B:40:41:25:AD:24
Authority key identifier: 42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B
Certificate issuer:       /CN=F3643835AF/serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
Certificate serial:       084C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
Manifest number:          0846
Signing time:             Fri 02 May 2025 01:40:23 +0000
Manifest this update:     Fri 02 May 2025 01:40:22 +0000
Manifest next update:     Sun 04 May 2025 01:40:22 +0000
Files and hashes:         1: QoqJMY5QZ92cjs9n5355xf2jeSs.crl (hash: DuR7y/lnTAOP9lgjC7YJ/bxQS/dZIhQjh0MBTRS2Mj0=)
                          2: 96F143A4E4E711E9B8915410F8AEA228.roa (hash: zm3YN7AFZ7BWxdBhPzmjQdqjaH4X6z5W4MSW9J0ipCo=)
                          3: 06790CE8E4E811E9A6E7B210F8AEA228.roa (hash: 3FK+sU9EsywdjoaV3PADXyQzo9SoU1mDVNi/r4tmF6E=)
                          4: 5E4429F4E4E711E995912310F8AEA228.roa (hash: CSKEv24WJq2rSIqhdKHY7ezulnm1GEl0XlEPfSauyvI=)
                          5: 8F85BED4D55F11E9A0A39B43F8AEA228.roa (hash: 6Uo+JJP2STlyRtTl2viFHjgVYtIrz3te0pfJXrN3Em4=)
                          6: D6CFCEFAE4E711E98D4D8510F8AEA228.roa (hash: c7DaldmCVPjpuumPlhE9K/tUWBg94JNU91iBaGrs7WA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 May 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3643835AF, serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
        Validity
            Not Before: May  2 01:40:22 2025 GMT
            Not After : May  4 01:40:22 2025 GMT
        Subject: CN=68142287-3cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9f:ea:a4:e9:ef:c4:96:f2:b5:57:23:68:42:
                    41:3f:39:ef:c1:ef:07:3a:40:e3:62:bc:84:bc:0c:
                    03:e5:56:56:0e:83:9a:2d:ff:db:0b:c8:f7:1f:d0:
                    f8:30:de:f0:5a:73:b2:ae:ab:6e:bb:9c:05:16:22:
                    b8:50:9c:5d:99:52:d7:46:67:13:8e:4f:b1:26:52:
                    2b:1a:7e:73:de:20:9f:4e:44:8c:b5:cf:79:dd:ec:
                    1c:73:26:8a:ef:8c:29:ac:00:11:c1:b4:c5:db:9a:
                    2d:92:fb:5c:b1:2c:13:7d:65:d1:db:6f:77:13:fc:
                    f0:eb:72:fd:2b:e1:99:42:c3:c4:be:7f:27:76:cd:
                    92:d5:ad:5b:67:cb:26:46:1f:ae:21:ae:3d:30:f9:
                    1d:0d:96:db:ed:82:58:20:2c:2b:e7:d1:22:00:dd:
                    5f:65:ba:b9:5a:b9:4a:bf:b4:20:c5:c1:1a:76:3c:
                    81:f9:40:8f:09:f0:9a:24:06:a5:e3:17:3a:d8:b6:
                    6c:c5:f1:f3:ed:20:5e:92:63:5c:ab:cb:f1:ce:10:
                    ee:e6:b3:dc:24:af:d2:d2:d5:bc:9c:fa:68:af:62:
                    32:27:4b:eb:f1:75:29:b3:6b:ac:61:4e:42:a1:6f:
                    20:5c:2c:af:8e:3b:46:1f:03:10:fb:84:85:95:c2:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EE:13:84:99:33:73:87:0D:22:09:EA:95:6A:7B:40:41:25:AD:24
            X509v3 Authority Key Identifier:
                keyid:42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:cf:10:c9:ac:c7:b1:2d:b0:d7:83:1e:46:b4:b6:f3:92:
         bd:45:3e:b3:f4:9c:dc:fb:bc:84:28:1e:c4:3d:6c:77:43:ab:
         40:97:62:85:be:34:e6:2c:ea:67:e4:cd:10:78:c7:a1:90:4b:
         35:2b:d1:9a:ae:95:0a:96:bf:f6:d5:e6:3e:6a:78:43:78:dc:
         ab:88:8d:3e:cc:26:24:54:fe:d2:22:e5:80:af:88:d8:62:49:
         f8:d3:e5:03:cb:79:16:24:ac:c2:31:fe:56:1e:45:0b:ae:7f:
         ab:04:7f:23:11:61:b5:02:50:c3:54:bb:c8:1d:b1:bd:f2:24:
         50:87:84:34:2e:2d:90:91:63:4e:4d:b3:c3:a2:11:38:4d:97:
         34:32:9a:71:78:d9:97:ab:6e:4b:e4:71:80:b9:c8:94:1a:de:
         31:49:70:33:97:77:8e:ab:f7:a2:14:8c:37:29:1d:fa:3f:48:
         dd:73:03:cf:d9:87:d5:a5:fb:b4:82:15:07:25:7b:c8:77:20:
         93:49:98:c4:64:72:6a:d7:af:bf:cd:3b:3b:53:32:f4:53:59:
         6f:20:aa:91:fc:21:47:bc:11:5d:aa:23:ba:a8:c1:1c:d7:8f:
         04:81:ef:8c:9d:7f:39:11:72:26:c5:d9:35:a5:56:c0:93:eb:
         75:25:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:45:47 2025 by rpki-client