Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
File:                     AsRM7WthmrGkBPztNQKx2WhIMp4.mft (raw, json)
Hash identifier:          /gZYkMuu52vSQp18ewjKr6A8jj4hRMXGY/Inru5KsHQ=
Subject key identifier:   F2:F9:AE:47:3E:BA:99:7A:5A:17:CF:0B:4F:D3:02:24:21:5A:A7:C6
Authority key identifier: 02:C4:4C:ED:6B:61:9A:B1:A4:04:FC:ED:35:02:B1:D9:68:48:32:9E
Certificate issuer:       /CN=F365F086AF/serialNumber=02C44CED6B619AB1A404FCED3502B1D96848329E
Certificate serial:       0247
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
Manifest number:          0244
Signing time:             Sun 27 Apr 2025 04:04:19 +0000
Manifest this update:     Sun 27 Apr 2025 04:04:19 +0000
Manifest next update:     Tue 29 Apr 2025 04:04:19 +0000
Files and hashes:         1: AsRM7WthmrGkBPztNQKx2WhIMp4.crl (hash: ooE3RDfvL/QH2exnuT8q3Ofim6e4jBZWXZVtyDdz4VE=)
                          2: 859462CC6CC311EE8EFBB4784AD9E6FC.roa (hash: sQU9LffxBvSsgmgcwizGIhPdQKBe5eoXX4AMZgFSru4=)
                          3: D16CB6506CC211EEAE1488764AD9E6FC.roa (hash: 8W8MLoaZGdQj+poYAqkXMgXc2YN4jz1pc8HUUsTYfXk=)
                          4: DD015D826CC111EE88677D734AD9E6FC.roa (hash: qWeL/3G03cESkK0lfpuTmBLiPLwBFByixPyVGD+RD2k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F086AF, serialNumber=02C44CED6B619AB1A404FCED3502B1D96848329E
        Validity
            Not Before: Apr 27 04:04:19 2025 GMT
            Not After : Apr 29 04:04:19 2025 GMT
        Subject: CN=680dacc3-05af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0d:3d:6e:b2:58:3e:f2:ad:07:69:c3:5d:2f:
                    92:b9:32:b1:df:b5:f5:e8:87:4f:e9:51:e6:98:90:
                    1d:6e:29:09:cf:53:7c:c6:31:6e:dd:84:5e:80:f6:
                    55:4d:11:32:76:66:8c:04:1f:a5:d0:48:3b:8a:d3:
                    34:01:76:8b:45:c8:79:29:4e:ad:ce:d6:91:92:3a:
                    c6:80:44:cb:30:fc:fd:64:7f:6e:b8:99:82:53:d8:
                    02:55:a4:a4:dd:07:1a:4b:7b:3d:35:4e:1b:b7:70:
                    0f:30:d7:37:ba:9e:7d:b8:b8:bd:b4:6e:e3:40:c3:
                    e8:2c:f9:22:f2:29:36:56:1e:e3:fe:b5:af:83:60:
                    87:e8:af:fa:2e:cb:f6:b5:29:69:db:c9:0d:49:54:
                    24:2f:e1:0c:0b:6b:19:34:f7:91:51:52:50:95:0e:
                    5c:5b:80:b0:de:dc:b9:8a:d3:79:df:d9:9b:67:73:
                    25:ed:02:b1:50:06:9f:dd:bf:48:9c:66:38:53:cb:
                    17:52:17:21:59:dc:50:fa:52:4a:1e:e8:8f:af:fe:
                    12:cc:f2:fa:a7:76:db:ca:95:f9:6d:33:c1:0a:78:
                    56:c1:ea:9f:d8:b5:12:1a:76:fa:f0:54:8d:ab:c0:
                    38:ea:94:48:80:76:1b:a3:7a:b2:04:b8:4c:0c:e1:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F9:AE:47:3E:BA:99:7A:5A:17:CF:0B:4F:D3:02:24:21:5A:A7:C6
            X509v3 Authority Key Identifier:
                keyid:02:C4:4C:ED:6B:61:9A:B1:A4:04:FC:ED:35:02:B1:D9:68:48:32:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AsRM7WthmrGkBPztNQKx2WhIMp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/DE7B16EE6CBC11EE9A59EE634AD9E6FC/AsRM7WthmrGkBPztNQKx2WhIMp4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:10:92:0a:0d:91:c5:64:4f:5a:78:66:b3:b7:cb:64:44:
         e1:27:a4:91:57:94:41:d6:13:af:83:4d:b5:9e:8d:41:bf:98:
         77:9f:23:95:cb:2c:61:39:50:8a:60:fd:55:d7:d6:69:d2:95:
         be:74:17:10:0d:6a:d7:eb:f4:56:98:da:84:ee:07:8e:12:7a:
         f5:40:ee:7f:c7:da:f2:62:2b:ed:32:e6:c9:4e:e6:fa:ff:be:
         3b:63:73:c3:6a:58:4c:02:96:99:be:49:8e:4c:48:ca:e3:d4:
         e1:f2:99:63:62:b1:3b:8d:2e:73:5a:89:9f:96:2b:e1:b5:22:
         df:fc:66:71:fc:f4:ce:ff:e7:ba:fc:2e:49:e0:0f:76:17:18:
         6f:e1:f8:85:ca:15:7e:5a:13:6c:d8:d5:b5:0e:87:d6:d2:15:
         4e:d3:34:51:5a:1a:c7:23:d4:d7:65:79:ca:7c:82:42:fb:f2:
         20:aa:80:03:3e:57:54:e8:8b:6b:86:89:c1:01:e4:7e:8a:91:
         db:11:b1:31:0a:bf:8e:57:0f:be:5a:b8:67:1e:2a:91:45:4e:
         e2:07:7b:0c:a4:13:eb:75:04:04:b0:f1:b5:2a:d6:3a:c3:d1:
         99:05:04:86:09:ff:08:ed:b7:a9:63:98:23:5f:bf:07:ce:28:
         75:72:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:58:06 2025 by rpki-client