Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
File:                     QDrQFAXpeziMuD5pbQudgLuguLg.mft (raw, json)
Hash identifier:          gV8l7C3MVHYbUXFcjihdkC905RSo6koyAIXN6FZx49Y=
Subject key identifier:   AE:C4:DD:52:30:5E:A6:09:0B:9B:2C:72:D8:C3:BA:DA:F3:C4:B4:C8
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Certificate issuer:       /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial:       065F
Authority info access:    rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
Manifest number:          065E
Signing time:             Wed 30 Apr 2025 02:10:06 +0000
Manifest this update:     Wed 30 Apr 2025 02:10:05 +0000
Manifest next update:     Fri 02 May 2025 02:10:05 +0000
Files and hashes:         1: QDrQFAXpeziMuD5pbQudgLuguLg.crl (hash: IGALe0TLRWrzfDi8kGJUWcKQY71ay95ankpHWrvEOA4=)
                          2: 2295CF68523711EEB515D05D4AD9E6FC.roa (hash: KlQWt1tn1KH/CPgIYBRda65+Ao1w8Du+dkLesEZUQIQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                          rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 00:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
        Validity
            Not Before: Apr 30 02:10:05 2025 GMT
            Not After : May  2 02:10:05 2025 GMT
        Subject: CN=6811867e-2f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:71:15:3b:3f:6c:06:df:26:fb:0e:e4:51:
                    e8:31:fa:9c:06:9d:d3:77:eb:6e:22:be:f3:6b:95:
                    60:59:40:57:51:fa:f2:5b:65:fb:ae:a2:4b:69:45:
                    a2:da:7b:a3:7d:66:4c:c2:1f:80:4e:9a:7f:d6:8f:
                    58:97:30:da:1a:f3:e6:7f:0a:3f:11:b5:77:82:32:
                    aa:2e:c3:32:15:1c:a3:e7:f6:0c:b5:eb:49:37:ec:
                    1e:f6:ad:64:f9:1d:0a:3c:4b:01:5e:fd:de:56:c8:
                    40:3c:7b:12:a1:e9:c6:26:11:e5:55:23:e0:ad:2d:
                    ab:53:92:01:83:d5:59:9f:fa:8d:89:c6:fa:f3:5d:
                    13:0c:33:2f:d2:e1:70:e6:5a:33:0a:f1:5f:1c:cb:
                    e4:e1:c3:7f:19:18:e2:dc:54:de:17:db:ef:da:7d:
                    26:8b:1b:df:fe:ed:92:d8:70:f9:fc:02:bd:85:fd:
                    05:7d:e7:0c:e4:de:64:ca:b2:f3:26:ff:5d:a9:71:
                    2a:a7:86:9d:21:ab:db:6d:a9:f8:0f:c3:68:e9:b2:
                    a6:31:a5:88:59:2e:7f:52:98:46:a3:b3:30:6b:33:
                    8f:6b:86:0a:b9:83:94:40:e5:80:98:65:11:b8:da:
                    9c:2b:b3:c1:71:a4:19:97:ec:40:ac:84:67:b2:05:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C4:DD:52:30:5E:A6:09:0B:9B:2C:72:D8:C3:BA:DA:F3:C4:B4:C8
            X509v3 Authority Key Identifier:
                keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:83:d4:74:86:16:da:1e:3b:10:72:59:ea:06:2c:bb:aa:00:
         1c:f8:b6:be:49:04:2f:7b:b2:01:f9:57:56:eb:c4:a1:82:c3:
         6c:2a:35:06:e1:14:5b:b8:59:2b:6f:46:c9:2e:c5:0e:ca:9e:
         ad:86:af:d4:9a:59:e3:a1:76:af:96:72:49:fe:43:3b:9c:f4:
         49:06:a2:a0:8b:e0:7b:36:34:09:de:a7:2c:3f:55:c8:60:6e:
         1b:c6:e6:e7:d5:54:0f:d4:e5:26:81:23:3b:62:f7:9b:6f:1e:
         1d:57:c6:18:85:89:78:5e:1a:ae:21:09:43:e4:1b:d1:e2:fd:
         fa:dc:7f:80:4c:52:7b:17:a5:4f:3b:20:f1:17:e8:a5:93:c1:
         f5:ac:7e:52:75:c6:b1:c1:74:f2:a0:d5:2f:ec:bd:93:48:5b:
         cc:c4:ca:d2:ea:6b:3e:f6:f0:41:73:e6:f5:e9:10:40:8a:bc:
         b4:5f:5a:53:5c:fe:82:69:bd:cf:a7:c1:5f:e9:e7:a1:59:2d:
         e0:5d:44:8e:9d:bf:c7:ae:14:a4:5a:65:fb:22:c4:9e:b8:b3:
         b1:2d:c5:4e:5f:b4:c1:90:8d:a1:1c:21:e6:73:cf:68:58:77:
         5a:75:83:8b:71:98:19:47:91:83:58:bf:81:26:50:4f:43:ae:
         55:fd:f6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:56:23 2025 by rpki-client