Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
File:                     glG2X8_012csmHWQ58DLZJ1EwhI.mft (raw, json)
Hash identifier:          DQeQKYwjL7TdXfU1m4LdZhLjRdk+pI6d2ccAOBYyswY=
Subject key identifier:   F3:C8:D6:88:BD:08:6B:D4:30:20:62:C3:05:2D:BF:59:11:C7:CD:A4
Authority key identifier: 82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Certificate issuer:       /CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
Certificate serial:       045A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
Manifest number:          0458
Signing time:             Fri 08 Aug 2025 03:08:56 +0000
Manifest this update:     Fri 08 Aug 2025 03:08:55 +0000
Manifest next update:     Sun 10 Aug 2025 03:08:55 +0000
Files and hashes:         1: glG2X8_012csmHWQ58DLZJ1EwhI.crl (hash: 7UJB3UTZdEap2RlgIoH6HCfEl6lQTmn8BSkbZjM5u8k=)
                          2: 63024F1E28B611ED8CF5BD8AF1222468.roa (hash: 4ljd9pI9G7HxkQ3CSXE8wSNVbsWYc0or91A3WwVt9x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 00:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAF, serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
        Validity
            Not Before: Aug  8 03:08:55 2025 GMT
            Not After : Aug 10 03:08:55 2025 GMT
        Subject: CN=68956a48-f660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b5:8f:c1:6c:72:a0:a4:9c:12:26:42:fb:ac:
                    ea:b1:23:d9:df:39:3a:05:40:10:df:66:24:c0:fe:
                    62:8c:71:99:f4:3a:3c:c3:78:26:da:af:44:7a:0e:
                    63:0e:4f:46:42:58:f5:cf:cb:ef:c4:ac:e5:e7:d7:
                    8e:31:f4:5b:ca:05:1f:fe:77:40:3f:d0:59:e6:ff:
                    34:13:03:7f:ee:ed:69:1a:69:9f:81:7d:a8:4d:a5:
                    62:e6:b3:46:5c:5c:2c:26:c9:eb:ea:9f:16:ed:24:
                    28:73:c0:00:3c:dd:90:8c:d4:d6:99:3c:31:a5:9d:
                    7f:1f:d3:34:06:c7:e5:59:f8:07:46:b8:28:57:e6:
                    39:3b:f1:53:85:f1:07:6e:b2:20:df:c8:02:97:30:
                    6c:47:bc:db:ce:ca:95:23:67:ac:76:e0:82:86:c6:
                    97:d9:92:ea:fe:8c:85:01:5f:14:bc:58:cd:61:39:
                    5e:34:c6:78:83:69:32:6c:ff:a6:27:a9:3e:46:69:
                    3d:1c:41:03:75:9b:e5:17:95:88:5d:03:0c:3f:49:
                    51:c0:99:e3:ef:72:87:98:01:41:2f:6a:ac:ac:77:
                    78:d7:f8:e8:a5:32:17:9b:43:fb:7d:d0:92:af:a8:
                    36:a7:e8:50:c3:98:16:bb:f4:b2:3a:b1:dc:93:eb:
                    d2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C8:D6:88:BD:08:6B:D4:30:20:62:C3:05:2D:BF:59:11:C7:CD:A4
            X509v3 Authority Key Identifier:
                keyid:82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:52:fb:f6:14:af:5d:b5:85:09:cb:74:45:c1:ef:eb:8c:
         4c:a3:d2:6e:d8:44:e1:1c:f5:22:9d:10:fa:57:ed:ed:db:30:
         82:6b:c9:93:a4:6d:1b:9a:8a:dd:a4:d1:1e:0f:1e:7c:71:a0:
         d0:17:be:1d:62:7c:4e:d8:32:99:04:16:63:c0:ad:c1:3c:67:
         ed:92:fd:4b:2a:d2:30:51:bd:1f:9b:49:69:c2:aa:aa:f3:fd:
         6c:47:87:b2:41:16:8a:5a:7d:28:1d:96:a9:4f:fb:4c:2f:9b:
         ad:17:7a:8a:d3:55:97:d9:e9:78:33:7d:dd:98:d0:5f:33:17:
         4e:7a:82:cb:e7:a5:d5:d1:74:3a:af:65:d8:16:04:f2:be:b2:
         c7:41:00:b3:c4:8b:f2:09:c1:6c:8b:92:ed:6f:42:ce:fd:c8:
         89:d1:13:6a:b4:3f:26:db:c6:3b:e4:2e:3b:1e:f7:a1:88:a3:
         01:d4:41:67:bf:71:57:d1:11:fc:9a:1a:f6:fb:2a:e2:dd:01:
         20:23:3f:e2:e1:8b:82:8a:ce:89:63:95:72:09:87:0f:2b:ff:
         66:18:4b:b2:d4:0a:6b:78:46:d4:3c:28:9b:cf:e2:22:80:af:
         ed:24:7f:f0:1f:ee:c3:5f:96:4e:b7:0d:16:1c:f6:e9:d7:6d:
         67:74:c2:65
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUUwM0RBRjExMC8GA1UEBRMoODI1MUI2NUZDRkY0RDc2NzJDOTg3NTkwRTdDMENC
NjQ5RDQ0QzIxMjAeFw0yNTA4MDgwMzA4NTVaFw0yNTA4MTAwMzA4NTVaMBgxFjAU
BgNVBAMTDTY4OTU2YTQ4LWY2NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDetY/BbHKgpJwSJkL7rOqxI9nfOToFQBDfZiTA/mKMcZn0OjzDeCbar0R6
DmMOT0ZCWPXPy+/ErOXn144x9FvKBR/+d0A/0Fnm/zQTA3/u7WkaaZ+BfahNpWLm
s0ZcXCwmyevqnxbtJChzwAA83ZCM1NaZPDGlnX8f0zQGx+VZ+AdGuChX5jk78VOF
8QdusiDfyAKXMGxHvNvOypUjZ6x24IKGxpfZkur+jIUBXxS8WM1hOV40xniDaTJs
/6YnqT5GaT0cQQN1m+UXlYhdAww/SVHAmePvcoeYAUEvaqysd3jX+OilMhebQ/t9
0JKvqDan6FDDmBa79LI6sdyT69KlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU88jW
iL0Ia9QwIGLDBS2/WRHHzaQwHwYDVR0jBBgwFoAUglG2X8/012csmHWQ58DLZJ1E
whIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVFMDNELzVGMENGQzE4Mjg5MDExRUQ4ODZENEQ5NEYxMjIyNDY4L2dsRzJY
OF8wMTJjc21IV1E1OERMWkoxRXdoSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dsRzJYOF8wMTJjc21IV1E1OERMWkoxRXdoSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUUwM0QvNUYwQ0ZDMTgyODkwMTFFRDg4NkQ0RDk0RjEy
MjI0NjgvZ2xHMlg4XzAxMmNzbUhXUTU4RExaSjFFd2hJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAC91L79hSvXbWFCct0RcHv64xMo9Ju
2EThHPUinRD6V+3t2zCCa8mTpG0bmordpNEeDx58caDQF74dYnxO2DKZBBZjwK3B
PGftkv1LKtIwUb0fm0lpwqqq8/1sR4eyQRaKWn0oHZapT/tML5utF3qK01WX2el4
M33dmNBfMxdOeoLL56XV0XQ6r2XYFgTyvrLHQQCzxIvyCcFsi5Ltb0LO/ciJ0RNq
tD8m28Y75C47HvehiKMB1EFnv3FX0RH8mhr2+yri3QEgIz/i4YuCis6JY5VyCYcP
K/9mGEuy1ApreEbUPCibz+IigK/tJH/wH+7DX5ZOtw0WHPbp121ndMJl
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:58:09 2025 by rpki-client