Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
File:                     y4hYdSezg5FswLHYhmZTwzQx5F0.mft (raw, json)
Hash identifier:          dIWKZYzcgRyOu4/PpIv/1BJtQleHhPT6SeLqdR/gEb0=
Subject key identifier:   69:0B:17:88:27:FF:E6:CD:8C:75:DA:B6:59:9A:35:C2:5C:4A:70:88
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Certificate issuer:       /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial:       0761
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
Manifest number:          075E
Signing time:             Wed 30 Apr 2025 01:51:17 +0000
Manifest this update:     Wed 30 Apr 2025 01:51:16 +0000
Manifest next update:     Fri 02 May 2025 01:51:16 +0000
Files and hashes:         1: y4hYdSezg5FswLHYhmZTwzQx5F0.crl (hash: cCcDZNSxo+n2IW3qPNzAOCkQR4zYcojI8/BKKlPpO9k=)
                          2: AE18FBD67CA911EEB6D3DD404AD9E6FC.roa (hash: EUXpIG95DQgNgpSPlS78r4ZPbIQJ7nP3j1DIht+45k0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 01:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889 (0x761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663CEEAF, serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
        Validity
            Not Before: Apr 30 01:51:16 2025 GMT
            Not After : May  2 01:51:16 2025 GMT
        Subject: CN=68118215-5c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e7:ff:5c:9c:98:b8:e0:65:79:6a:0b:71:32:
                    67:5f:d9:66:c7:2a:6a:05:59:2e:9d:0f:1e:ba:c0:
                    20:02:ac:ce:c8:27:06:42:10:96:55:9c:2c:fb:5c:
                    c9:92:77:e8:e3:27:10:b1:4c:ff:aa:3d:ef:16:71:
                    6e:f8:dc:b0:f7:fb:cc:83:5d:99:37:6a:bd:ff:a3:
                    4f:6a:5a:2b:6b:8b:1b:c4:42:4b:21:fe:bc:9e:f3:
                    54:8d:00:f4:7b:da:55:3d:8f:a4:f2:51:6b:dd:5d:
                    dc:6f:31:1f:2c:e7:30:c4:84:1d:0b:a6:50:c9:d2:
                    51:46:f1:ce:8e:3f:d6:4f:a9:14:15:6e:a7:d2:40:
                    7a:d7:6a:e1:71:b5:b1:53:c4:01:b9:f6:75:2b:8d:
                    1b:21:d1:a6:2f:77:17:eb:77:c4:ab:99:f5:9f:f2:
                    99:d7:4b:16:f1:23:f3:ab:d3:40:f7:07:fe:57:a0:
                    dd:cd:dd:4b:11:5c:6c:cd:9f:2b:ed:11:1e:ee:b3:
                    6a:35:5a:99:81:14:af:cf:9c:d7:ab:72:13:e6:45:
                    3d:46:74:1c:2a:29:1c:cb:d6:13:d7:c2:ea:1e:95:
                    21:a5:f7:66:72:4f:a4:b2:04:6f:c5:05:73:81:d0:
                    23:f9:e7:6e:4c:9a:24:dc:b5:d3:43:8e:91:b1:1e:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0B:17:88:27:FF:E6:CD:8C:75:DA:B6:59:9A:35:C2:5C:4A:70:88
            X509v3 Authority Key Identifier:
                keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:45:1c:45:09:54:37:1f:7b:d9:ce:04:03:6b:ce:71:84:71:
         34:b1:da:fc:03:4d:cb:c2:15:e4:7e:38:00:14:60:77:8c:8f:
         ac:0e:80:9c:c9:14:25:80:33:3c:67:6b:13:f8:7d:95:16:4a:
         39:d7:ef:48:b9:ef:b2:6e:34:51:5f:fa:e5:17:a2:8d:e6:62:
         e4:e7:b4:9f:ae:d0:d1:b6:56:93:f7:76:75:c9:8d:5f:fc:55:
         ba:a2:e1:a9:43:ac:c2:92:cb:b0:7d:88:ca:db:32:34:cf:66:
         79:42:c0:cc:50:8d:36:96:92:35:6e:d2:40:c1:36:70:54:1f:
         17:ec:1a:41:a6:5e:d8:6e:99:e0:d3:43:6e:4e:98:b4:7f:05:
         32:d3:4f:4f:48:a3:01:d2:a5:1e:c9:2f:e8:96:d0:54:2f:25:
         4a:76:6d:02:4b:fe:a6:20:0e:98:d1:b7:ce:12:d4:b9:19:55:
         8a:5a:84:b3:94:74:2e:77:50:ee:e6:f8:4f:8e:27:b5:0a:92:
         1a:81:08:bc:d5:2e:07:e7:68:52:15:eb:c1:98:9b:75:ac:68:
         c6:8c:e1:64:c6:e4:ec:fe:de:1c:38:54:80:22:91:c0:89:bd:
         46:91:af:b0:65:b4:63:47:b7:ef:8e:fc:d6:a8:0b:b0:bd:d0:
         85:9a:0a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:07:06 2025 by rpki-client