Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File:                     lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier:          B0fpEnmIk8lFnjDEQZ1JcrsRAb4aaH8rDJaiu/77X4A=
Subject key identifier:   3D:1B:F1:AF:56:71:DC:7A:53:10:7F:07:53:0A:15:DB:F5:4C:71:B0
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       089E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number:          089A
Signing time:             Mon 28 Apr 2025 01:36:20 +0000
Manifest this update:     Mon 28 Apr 2025 01:36:19 +0000
Manifest next update:     Wed 30 Apr 2025 01:36:19 +0000
Files and hashes:         1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: rg7O0hPPzqYSSsYv08DwyutFvJ8KIRWaB+8BoK0Rl1U=)
                          2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
                          3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
                          4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
                          5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206 (0x89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: Apr 28 01:36:19 2025 GMT
            Not After : Apr 30 01:36:19 2025 GMT
        Subject: CN=680edb94-9825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:f2:8d:24:92:ef:4d:ce:bc:ed:25:07:bf:
                    74:7b:7b:9d:33:d7:c8:e8:a5:82:01:32:bd:f3:3e:
                    66:2c:83:e6:53:b9:95:0d:94:e3:79:ff:b6:1f:a3:
                    6c:8f:93:46:6f:89:bf:8e:d2:08:66:1a:8d:ff:eb:
                    62:df:2f:59:11:44:29:95:c7:9f:e4:c4:47:d9:fb:
                    b6:50:99:37:9a:a9:7e:f8:01:c8:2d:aa:72:6a:97:
                    cd:2b:8e:66:53:4a:20:0f:96:39:9f:11:f4:ee:3c:
                    e3:4c:ec:8c:05:7a:7a:6f:0b:58:94:0d:77:b8:41:
                    c6:e2:15:3e:10:3b:06:58:85:34:26:b5:10:5f:e4:
                    4c:60:ff:4d:61:51:a1:84:a7:74:b8:41:d7:3b:d2:
                    0c:ef:f4:57:59:56:4f:01:66:09:7c:a8:f9:d3:e3:
                    78:16:fa:86:16:92:6b:b0:2f:5c:a7:1c:dc:c1:3c:
                    1b:a3:db:70:94:cd:6d:7c:25:8b:86:20:6e:45:ba:
                    fc:4f:07:fb:df:b2:4b:13:d9:35:99:05:97:a8:ee:
                    12:e2:e0:c0:a7:a7:44:5f:12:74:67:dd:30:bc:a6:
                    0d:54:cf:02:93:dd:13:37:ab:4f:21:4f:64:38:ef:
                    46:33:c2:70:16:ae:7e:d0:2c:1f:ce:06:31:fa:9f:
                    78:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1B:F1:AF:56:71:DC:7A:53:10:7F:07:53:0A:15:DB:F5:4C:71:B0
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:84:93:a7:07:da:49:00:0a:87:9a:ce:c0:cd:93:93:56:8f:
         35:66:aa:45:7f:66:c4:03:e1:03:9f:a0:5e:e0:14:89:60:e2:
         80:de:ee:4f:d5:43:dd:0b:32:8b:79:91:cc:df:35:9a:ec:3d:
         67:14:87:10:b7:c8:a5:04:51:71:f1:c7:a5:2a:d2:04:a4:f2:
         f8:38:8e:a1:b8:d6:e1:21:90:64:70:67:88:0f:9d:f5:51:2d:
         15:02:c0:05:a4:54:1d:28:d3:dc:df:81:02:d6:99:d1:7d:3e:
         32:b8:03:83:fa:40:99:e4:5d:f0:c3:fc:d7:e4:77:6a:79:6b:
         21:19:9f:5b:df:0a:ec:c5:c7:bd:01:dc:ba:91:7d:b5:cc:02:
         db:1e:e5:63:23:ac:42:40:a7:c2:41:86:9a:fa:5d:c3:d9:3e:
         cd:06:fd:30:78:49:da:61:cf:21:0d:49:61:d2:35:5b:76:ae:
         94:24:c1:2e:a7:20:dc:73:89:df:45:b6:c8:48:21:3d:65:7d:
         bb:98:54:4c:1d:c9:a5:ac:df:b4:56:1a:23:d0:02:a7:41:0a:
         31:77:05:fc:b0:ef:00:d9:2d:ea:17:ca:bc:50:4c:fb:43:81:
         e2:45:8c:46:a6:fd:90:6f:88:ac:0f:bf:e4:36:29:b7:39:88:
         35:28:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:34:25 2025 by rpki-client