Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
File:                     9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft (raw, json)
Hash identifier:          fqZRfCPNy/CmjpNO8nFhHmaKrwT6cvF9GqwkU0wDBqw=
Subject key identifier:   72:53:9F:40:CD:A5:84:A0:A4:67:57:EF:07:E6:71:8D:9F:CE:36:2A
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Certificate issuer:       /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial:       0236
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
Manifest number:          022B
Signing time:             Sat 26 Apr 2025 04:11:26 +0000
Manifest this update:     Sat 26 Apr 2025 04:11:25 +0000
Manifest next update:     Mon 28 Apr 2025 04:11:25 +0000
Files and hashes:         1: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl (hash: h1NLjcOBA+bZgpW8iY/14PX4ZaEBF+xia8eSieiNs98=)
                          2: 771608343F6511EFB9F4EABA762E951A.roa (hash: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=)
                          3: 5A705AB83F6511EFB113C3BA762E951A.roa (hash: 46y6LOxfLG2hpzs8KqldDqb+T4CZAqoGN7kv9ge6l2Q=)
                          4: C37677449B4211EE97C01A0BD25BE465.roa (hash: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=)
                          5: 9C2FB4D49B4211EE82B8CF0AD25BE465.roa (hash: RKm1ONyaKM8MZ2trCs9RLFoAoaY0CDYQpfQjdSvu7io=)
                          6: D91B9FD2905311EF97DBC8B6762E951A.roa (hash: //pQLXl186UK+YngQ4Oqc4YBM5xFv+Ww/aM3Yp8J0R4=)
                          7: ACB50F14905311EF9F4DCCB4762E951A.roa (hash: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=)
                          8: 5AA6ED769BE611EE88684334D25BE465.roa (hash: J9soXt+A2SzJz6ium1VPFEErWV44KnKWZA3DTIrB3Z8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 04:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656BB8AF, serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
        Validity
            Not Before: Apr 26 04:11:25 2025 GMT
            Not After : Apr 28 04:11:25 2025 GMT
        Subject: CN=680c5cee-3fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:d2:4a:ec:79:86:6c:d0:27:d3:57:3e:b5:
                    b6:85:cd:a0:49:b8:15:fb:60:9f:2b:c2:94:90:46:
                    eb:b9:86:4c:a0:17:26:6d:0a:dd:26:bb:f8:be:d5:
                    42:df:05:a3:7a:b4:86:7f:45:96:a1:52:bf:f4:ee:
                    ea:92:7e:86:0c:35:51:36:a9:ca:78:b6:b7:6e:64:
                    d8:74:7c:fe:db:db:b3:1d:79:58:aa:63:f4:48:da:
                    12:36:ba:af:32:3b:db:bf:5d:77:d9:75:c7:88:cb:
                    85:82:24:59:2f:43:85:c1:c1:c4:9b:8b:1b:a8:5e:
                    f9:81:1b:ae:cb:97:2f:dc:04:06:c4:db:fb:78:28:
                    bb:55:e4:ea:4e:da:52:dd:ce:15:6c:78:e5:77:5a:
                    25:61:58:22:de:81:40:e8:e6:43:10:98:57:1a:fa:
                    bc:08:59:ec:92:56:3a:4e:33:8c:8e:39:9e:d3:5d:
                    58:17:7f:55:e9:cc:c1:c1:94:67:67:75:14:59:85:
                    43:b7:e7:f4:44:ce:18:b2:b7:76:bc:0d:85:7a:0c:
                    38:9b:13:de:b2:9a:f9:bf:81:f8:b1:a8:ef:45:1d:
                    7d:2a:c7:24:d9:85:39:bc:1b:d3:94:54:78:62:4e:
                    b4:c7:8b:3a:a7:17:74:5d:2f:89:8d:d6:3b:f3:f2:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:53:9F:40:CD:A5:84:A0:A4:67:57:EF:07:E6:71:8D:9F:CE:36:2A
            X509v3 Authority Key Identifier:
                keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:c1:a3:50:34:92:59:0d:e7:72:8d:23:2a:38:fc:9e:61:
         c8:ba:95:de:c3:b1:2e:fc:f5:a1:09:f5:09:17:14:27:5a:6d:
         17:8a:cc:cf:d7:66:94:43:74:b3:0a:72:ab:d9:22:82:69:51:
         d8:46:b5:0f:8d:50:62:cb:33:82:c9:10:8e:d9:80:ff:4f:15:
         59:51:85:76:40:53:4f:ec:70:8c:2e:d6:ed:44:57:e2:8d:d7:
         35:91:da:4b:99:fe:51:83:65:42:2b:9d:e6:01:0d:7d:c7:c3:
         83:e3:98:8a:d3:57:9c:98:f3:77:ee:99:de:26:b4:a8:53:88:
         6d:50:67:89:be:f7:0d:a4:84:bc:b8:2b:f1:82:c6:58:82:e5:
         a0:83:f6:34:be:4d:37:90:dc:5b:0a:8b:b7:5f:02:64:be:a5:
         71:80:c3:c3:9f:e1:36:27:b7:94:3b:a3:a4:71:3f:86:70:36:
         ce:50:0b:ab:ab:16:11:f1:89:21:a1:6a:63:69:d9:17:06:51:
         61:29:3d:76:20:56:e5:54:88:6b:3b:19:81:c7:54:81:83:42:
         93:9c:87:cf:ef:53:7b:c9:f9:f5:33:34:8b:91:81:4d:37:78:
         f3:ae:bf:7f:ef:63:71:b1:c6:4f:11:15:53:b0:a5:da:e1:f6:
         c0:c0:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:00:00 2025 by rpki-client