Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
File:                     G0qwtyDYObeamJIyOw-r7ZZwWqI.mft (raw, json)
Hash identifier:          KYR8MS7r5uk7mJW+aqf7fU0B7LuRUPXlcaldoL1xL0Y=
Subject key identifier:   85:2A:F9:56:4A:BD:73:F4:93:2E:55:0B:44:69:9A:6F:AC:7D:B8:F3
Authority key identifier: 1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
Certificate issuer:       /CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Certificate serial:       0400
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
Manifest number:          03FA
Signing time:             Thu 01 May 2025 03:09:39 +0000
Manifest this update:     Thu 01 May 2025 03:09:38 +0000
Manifest next update:     Sat 03 May 2025 03:09:38 +0000
Files and hashes:         1: G0qwtyDYObeamJIyOw-r7ZZwWqI.crl (hash: X6ZOIVlTn59557k4oaTd/PLw77vsuULf36t1HO95dos=)
                          2: D9ED8CAC6EB311EF96086184762E951A.roa (hash: 6w3a+eg92q7dxLHTR3vq9vXUwlds4W9m99UG/J3eEsM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 03:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024 (0x400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367426AAF, serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
        Validity
            Not Before: May  1 03:09:38 2025 GMT
            Not After : May  3 03:09:38 2025 GMT
        Subject: CN=6812e5f3-d5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:1f:c3:4d:f6:91:c3:41:6f:02:0c:4f:08:
                    e9:95:ad:b4:46:5c:55:df:c3:b4:ae:5a:c9:1b:06:
                    e2:06:81:0b:13:76:23:bb:b4:19:ca:6f:ef:3b:7f:
                    d7:96:e6:0e:bf:80:8b:26:26:43:eb:a3:8c:da:fb:
                    61:dd:2b:24:2c:c6:8f:3b:ff:6b:70:a4:9c:65:a4:
                    9a:d0:ab:3f:5c:ac:e5:de:cb:63:9c:0f:c1:7f:55:
                    3a:26:e6:9d:a6:9c:38:54:8e:11:80:c4:0a:aa:60:
                    a9:d5:aa:b9:dd:4b:f5:c3:a6:9a:eb:04:91:6a:44:
                    90:32:cf:5c:11:73:4a:f0:c0:d0:ee:15:f9:16:40:
                    68:d7:8b:b9:fb:bf:92:14:bb:62:13:fb:d5:01:93:
                    66:ed:3b:53:b6:56:02:7f:07:75:67:3d:ba:f1:44:
                    c1:e4:a3:b4:26:f7:e5:be:28:0d:d2:58:c0:24:42:
                    42:4a:53:9b:86:aa:65:1c:8b:5b:7c:9e:fd:27:b8:
                    57:ad:74:ca:24:e9:4b:9f:be:64:b4:64:e8:15:93:
                    32:fd:84:ba:64:fe:1b:42:86:b9:60:57:07:af:f1:
                    52:6a:4b:a0:44:17:ab:3b:78:2c:53:d8:a5:28:f4:
                    73:43:e8:56:74:3a:41:d1:d7:40:5f:40:6b:2f:26:
                    30:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2A:F9:56:4A:BD:73:F4:93:2E:55:0B:44:69:9A:6F:AC:7D:B8:F3
            X509v3 Authority Key Identifier:
                keyid:1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ff:ef:cc:3a:8c:1f:8e:06:6c:cd:12:26:3f:6e:cd:6d:e8:
         08:cb:f3:6f:ba:79:20:e2:c5:2f:50:55:5d:b1:c3:d9:4b:81:
         9c:25:23:ad:0b:7b:fd:9b:ae:c9:6f:d1:83:62:1f:9b:66:60:
         6b:75:22:7f:59:68:ef:a4:d7:29:44:da:07:f4:38:74:2a:81:
         ef:74:a1:d8:d2:64:17:93:44:1d:6f:69:85:83:3b:7b:46:cb:
         2a:4e:31:11:f5:36:fb:39:12:e7:b7:23:05:7f:dc:8f:eb:dd:
         28:75:3d:ed:7d:7d:e1:c3:7f:1f:77:41:b5:bf:9d:c2:8e:50:
         10:bc:93:a6:cb:5e:31:96:d9:04:22:f5:cd:36:69:33:d5:be:
         6e:7b:9e:82:fc:37:10:33:27:be:12:55:43:fb:cb:94:2d:7b:
         0e:84:08:31:89:f7:a1:32:a3:cd:a1:3b:a3:49:f0:11:55:14:
         3a:62:d4:27:bf:e8:e0:a1:3b:72:59:2d:b5:5e:22:1a:ef:dc:
         a0:b4:36:e5:dc:dc:74:70:23:93:f8:68:ea:63:6b:91:cd:73:
         de:83:75:b0:61:46:e6:87:7d:c1:c9:3e:9d:f7:84:c0:f5:3c:
         68:3a:7e:ad:b8:e0:12:1b:58:ca:a3:ef:b3:d1:81:4f:bb:92:
         8a:3c:3f:3e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQyNkFBRjExMC8GA1UEBRMoMUI0QUIwQjcyMEQ4MzlCNzlBOTg5MjMyM0IwRkFC
RUQ5NjcwNUFBMjAeFw0yNTA1MDEwMzA5MzhaFw0yNTA1MDMwMzA5MzhaMBgxFjAU
BgNVBAMTDTY4MTJlNWYzLWQ1YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDE2h/DTfaRw0FvAgxPCOmVrbRGXFXfw7SuWskbBuIGgQsTdiO7tBnKb+87
f9eW5g6/gIsmJkPro4za+2HdKyQsxo87/2twpJxlpJrQqz9crOXey2OcD8F/VTom
5p2mnDhUjhGAxAqqYKnVqrndS/XDpprrBJFqRJAyz1wRc0rwwNDuFfkWQGjXi7n7
v5IUu2IT+9UBk2btO1O2VgJ/B3VnPbrxRMHko7Qm9+W+KA3SWMAkQkJKU5uGqmUc
i1t8nv0nuFetdMok6UufvmS0ZOgVkzL9hLpk/htChrlgVwev8VJqS6BEF6s7eCxT
2KUo9HND6FZ0OkHR10BfQGsvJjDbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhSr5
Vkq9c/STLlULRGmab6x9uPMwHwYDVR0jBBgwFoAUG0qwtyDYObeamJIyOw+r7ZZw
WqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0MjZBLzcxQTVCMTg0MjhEQzExRUQ5OUZGM0Q4RkYxMjIyNDY4L0cwcXd0
eURZT2JlYW1KSXlPdy1yN1pad1dxSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0cwcXd0eURZT2JlYW1KSXlPdy1yN1pad1dxSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzQyNkEvNzFBNUIxODQyOERDMTFFRDk5RkYzRDhGRjEy
MjI0NjgvRzBxd3R5RFlPYmVhbUpJeU93LXI3Wlp3V3FJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2/+/MOowfjgZszRImP27NbegIy/Nv
unkg4sUvUFVdscPZS4GcJSOtC3v9m67Jb9GDYh+bZmBrdSJ/WWjvpNcpRNoH9Dh0
KoHvdKHY0mQXk0Qdb2mFgzt7RssqTjER9Tb7ORLntyMFf9yP690odT3tfX3hw38f
d0G1v53CjlAQvJOmy14xltkEIvXNNmkz1b5ue56C/DcQMye+ElVD+8uULXsOhAgx
ifehMqPNoTujSfARVRQ6YtQnv+jgoTtyWS21XiIa79ygtDbl3Nx0cCOT+GjqY2uR
zXPeg3WwYUbmh33ByT6d94TA9TxoOn6tuOASG1jKo++z0YFPu5KKPD8+
-----END CERTIFICATE-----
Generated at Fri May 2 01:48:28 2025 by rpki-client