Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
File:                     RQb8pqpV74TTpMAErIOrtQvu07k.mft (raw, json)
Hash identifier:          rpZlkLZqInpUMIPP2waAf1q4k8Z6RUEFVMgq/pmwFIg=
Subject key identifier:   6D:BD:81:83:3E:84:6C:7D:43:DE:9B:AE:36:EB:94:B7:E2:3C:AB:54
Authority key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
Certificate issuer:       /CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Certificate serial:       04A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
Manifest number:          04A5
Signing time:             Sun 27 Apr 2025 02:49:14 +0000
Manifest this update:     Sun 27 Apr 2025 02:49:13 +0000
Manifest next update:     Tue 29 Apr 2025 02:49:13 +0000
Files and hashes:         1: RQb8pqpV74TTpMAErIOrtQvu07k.crl (hash: mzBuQWgQbLY9RptnGsnvl64ORQEz0OxQ/F6374YdeRs=)
                          2: 9DDD28FC9A3111EC8707D1B65A40D577.roa (hash: FZcB4QBBqx/jYH6PVYH2VRq/gBlCUQZrKAZfwhy/+S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1190 (0x4a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AE0AF, serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
        Validity
            Not Before: Apr 27 02:49:13 2025 GMT
            Not After : Apr 29 02:49:13 2025 GMT
        Subject: CN=680d9b2a-acec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7d:10:2c:6a:10:b1:be:c9:8f:ec:9a:04:f1:
                    9e:8f:99:47:27:1f:10:b1:d4:66:b7:2f:8f:06:8b:
                    33:7b:40:70:71:69:e4:f2:fe:dc:2d:1f:cc:8f:ee:
                    9f:ae:be:0d:de:7b:0e:a1:1b:33:25:36:73:e3:58:
                    6a:6e:33:26:cf:d1:3c:9b:22:1f:44:87:f8:31:6d:
                    72:6a:27:9b:da:f8:cd:f5:7d:12:ac:14:81:b7:d0:
                    5a:d9:ed:b3:81:3d:44:00:39:68:08:b3:8a:9d:01:
                    b2:89:7e:79:73:ba:57:4c:3b:e9:26:91:bb:81:83:
                    c6:66:3c:1f:9c:c6:66:c7:62:c6:51:86:32:d1:13:
                    e0:8f:1d:e2:da:3c:ec:1e:2b:01:e3:cb:95:86:99:
                    f9:37:1a:08:34:5e:45:0e:0a:77:e6:53:08:2e:22:
                    30:68:b5:d1:2d:26:61:9e:a2:14:ce:b8:31:b1:a4:
                    d2:13:79:38:c1:3e:43:88:b0:d9:94:af:23:a3:ba:
                    ab:25:25:4c:9c:95:08:ac:0a:26:4a:44:39:f7:96:
                    4c:6e:03:bc:15:29:b6:1a:fd:ea:7a:43:76:8a:3d:
                    bf:52:b5:89:01:7e:cd:2f:cf:fd:a3:f8:3e:ca:f5:
                    71:5d:02:82:8b:1a:63:c0:79:06:3b:75:10:a2:82:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BD:81:83:3E:84:6C:7D:43:DE:9B:AE:36:EB:94:B7:E2:3C:AB:54
            X509v3 Authority Key Identifier:
                keyid:45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6e:e2:01:a8:23:5a:28:ad:7c:3c:d9:5b:a7:21:ca:73:0b:
         8c:93:2f:62:e7:54:7f:7f:da:26:ae:8d:02:0b:c9:24:85:70:
         c4:97:67:5c:d7:b7:ed:1a:ca:2d:64:10:be:01:b7:c1:a5:b3:
         9f:fa:45:db:7f:6c:1f:af:5d:2d:6b:d3:f2:7f:75:b4:fc:c3:
         e8:53:9a:85:40:d7:5a:8e:98:2a:ed:c6:ed:56:4a:83:da:3d:
         f6:84:11:76:f6:65:8d:4b:f8:92:89:50:60:2f:82:ef:33:74:
         de:a8:f6:51:f3:99:92:fc:22:5f:61:e4:67:22:a5:61:6f:76:
         bd:46:c4:ab:bd:29:aa:fb:12:bf:d3:25:81:76:2c:d1:12:c0:
         77:e8:65:9b:a6:5c:ef:84:a4:5c:31:0e:a7:02:2c:51:8c:f4:
         5b:c4:26:a9:8a:40:47:99:d1:65:f8:5c:7c:2d:9f:a7:dd:43:
         21:2d:3c:5e:2d:2a:81:5c:1b:c5:8c:5b:ec:d3:52:20:a9:3a:
         d9:1b:83:cf:ef:43:be:59:d9:dd:6f:7d:63:ae:9d:91:91:0a:
         5c:62:93:5d:70:52:18:f5:00:f7:c0:88:02:7c:23:b9:b5:c5:
         69:a9:df:5a:df:ef:f3:24:64:9e:75:24:01:b5:9f:47:04:3d:
         e0:43:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:21:08 2025 by rpki-client