Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
File:                     gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft (raw, json)
Hash identifier:          LGf7jDalSpFEyhwRAWQ3MdIP3dleFBkpTXYekbxjUEc=
Subject key identifier:   C9:B2:8E:3D:1D:1E:54:9D:19:D5:DE:6F:66:D6:E8:E7:61:41:D4:9D
Authority key identifier: 81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED
Certificate issuer:       /CN=F3652E81AF/serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
Certificate serial:       0521
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
Manifest number:          051D
Signing time:             Tue 29 Apr 2025 02:41:33 +0000
Manifest this update:     Tue 29 Apr 2025 02:41:32 +0000
Manifest next update:     Thu 01 May 2025 02:41:32 +0000
Files and hashes:         1: gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl (hash: aj95jTMAhxrY+xoeqbdL8IQTuTvRLqlr2Mfm33zNRd0=)
                          2: 34F917D2770411EDA96E30B4F1222468.roa (hash: NZij2AM4xI89XsMRYjuIH/jJ2N0YqmTdzA3GAsQAexw=)
                          3: A857E4B4770511ED921423B8F1222468.roa (hash: Bc7/VI9MM+4AbL2GJyWDhgCaOvjR0WYY04uCXHG4UF0=)
                          4: 4C4D3FC0770511EDBC4C07B7F1222468.roa (hash: xDn8Uz1B72aTUeAcFZ9D3J/QnhWoidTK2vjKvVgIRa8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 May 2025 02:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652E81AF, serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
        Validity
            Not Before: Apr 29 02:41:32 2025 GMT
            Not After : May  1 02:41:32 2025 GMT
        Subject: CN=68103c5c-a3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:15:34:52:f6:c7:c1:f9:2e:6e:c8:e5:92:
                    c7:48:1a:c2:54:9e:8c:39:ac:78:ef:67:de:4b:5d:
                    a7:d0:b4:b7:04:17:6f:fe:c4:84:7a:d1:86:e2:02:
                    76:93:e4:9a:13:cb:e8:cd:c0:2b:fa:c4:fe:45:a8:
                    48:ab:2d:42:63:50:d1:87:23:00:67:7c:30:4d:34:
                    bb:e7:dd:f7:3e:f8:b6:59:08:5a:56:0b:f6:f8:4b:
                    0a:db:2e:77:b1:35:12:71:3f:34:7f:66:6a:67:ca:
                    de:f1:ad:ae:88:6d:bf:8a:f8:94:a7:4b:3d:12:44:
                    0c:b6:81:de:5d:a5:bb:46:4f:2f:65:82:aa:ef:b2:
                    45:a7:9d:68:bf:c1:d8:33:73:ab:ba:36:6e:dd:1a:
                    51:5c:97:84:06:99:4e:67:0a:f3:2f:2d:70:a0:bd:
                    71:45:9d:71:c9:a3:8f:77:d7:a7:ef:78:1e:a6:fa:
                    6e:c4:e7:0e:c4:d8:da:14:3f:d3:b8:8e:22:46:1c:
                    49:e0:8a:91:e2:53:1b:b1:65:b6:ef:ee:e6:d6:60:
                    40:56:4d:df:44:81:90:c9:65:c0:e4:47:0d:21:3f:
                    c5:f1:20:13:2d:54:82:1a:39:0f:77:cd:bd:63:c5:
                    8f:c8:2c:d4:09:d7:21:4c:89:5a:6c:8a:ff:24:8b:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B2:8E:3D:1D:1E:54:9D:19:D5:DE:6F:66:D6:E8:E7:61:41:D4:9D
            X509v3 Authority Key Identifier:
                keyid:81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8f:62:e6:5a:fd:97:d1:92:12:33:87:3c:48:f2:62:01:28:
         1a:19:c0:65:61:04:79:f6:aa:2d:cb:7d:06:91:fe:a5:cc:0f:
         c1:09:bf:29:17:14:2e:ce:09:13:8b:19:29:7e:98:e5:5f:00:
         94:9f:2e:65:be:3f:d8:6a:3b:c2:3a:4a:e4:00:09:15:36:af:
         41:05:dd:0a:7d:56:9e:8f:70:49:d3:ea:e2:0d:09:8e:af:d7:
         1d:16:b9:e6:aa:1c:52:63:26:18:0d:cf:54:c7:3d:82:73:0f:
         7d:a1:f0:45:6a:5f:4c:c7:77:fd:f3:03:0b:78:b3:cc:38:d3:
         89:7b:b8:c7:12:24:ba:0b:78:8f:56:c8:f0:54:9c:46:20:e1:
         24:09:0b:c2:1a:d7:75:dd:62:fa:47:0d:a8:68:03:9d:3e:9e:
         fb:a2:2c:93:dc:f4:67:46:02:25:69:20:dc:e0:0c:db:9f:a3:
         43:5b:ba:a7:8d:5e:02:bd:4a:7c:b6:9c:56:3c:cf:c8:d8:93:
         da:fd:4b:9c:42:5a:9a:17:62:12:e5:e4:45:58:0c:91:eb:ab:
         00:a4:2f:b4:b0:f8:a7:ee:f4:52:47:db:da:00:86:31:a9:a8:
         a7:9d:bf:dc:b7:cd:25:16:1b:cf:0e:ff:8f:da:89:53:ac:9b:
         a4:84:38:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:10:08 2025 by rpki-client