Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
File:                     vN_wydKPGrRQYvSTuzVmysFCZG0.mft (raw, json)
Hash identifier:          6dGdLVqQy3+SYwZd5Xs8drwBNiNhvwq/iyyuTNKvbb4=
Subject key identifier:   67:68:DA:D6:91:6F:E8:DE:2E:74:F2:17:62:6F:FC:FD:84:42:33:3B
Authority key identifier: BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D
Certificate issuer:       /CN=F3680C14AF/serialNumber=BCDFF0C9D28F1AB45062F493BB3566CAC142646D
Certificate serial:       0CC2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
Manifest number:          0CBF
Signing time:             Fri 02 May 2025 01:03:59 +0000
Manifest this update:     Fri 02 May 2025 01:03:59 +0000
Manifest next update:     Sun 04 May 2025 01:03:59 +0000
Files and hashes:         1: vN_wydKPGrRQYvSTuzVmysFCZG0.crl (hash: Jttro+zqRmcv3k80Nx8bIqVF4QRBYAWT29/EiC+j4ns=)
                          2: B33457F859DA11EC856F77BD5A40D577.roa (hash: agjY6LUdCjwnZ2M4yw1LKIU5MO1B5MHNkAfCnRIca5I=)
                          3: F7CE05E67D7A11EF88A9F065762E951A.roa (hash: CO1sEd4b6tDHp7VX2OHYT+QzzDJimiXxpvi4W3VBGpA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 May 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3266 (0xcc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AF, serialNumber=BCDFF0C9D28F1AB45062F493BB3566CAC142646D
        Validity
            Not Before: May  2 01:03:59 2025 GMT
            Not After : May  4 01:03:59 2025 GMT
        Subject: CN=681419ff-fdf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:a3:da:bf:82:5d:40:33:75:82:22:b3:b1:
                    98:56:d6:83:24:8a:06:cf:6c:83:19:ef:06:36:9c:
                    b3:e1:63:23:c6:5d:eb:d1:fa:fa:5c:1b:1b:79:42:
                    f1:37:5a:f3:aa:24:8c:ea:a6:f8:6f:37:25:4e:a6:
                    a3:0f:a4:ce:c5:1d:91:b6:5d:54:81:ab:5e:34:ab:
                    59:73:0e:34:ff:ba:9e:04:4a:c1:80:e5:75:73:8a:
                    b6:c5:7d:f3:60:9a:79:7b:95:9e:18:73:db:6c:72:
                    db:60:7d:bb:67:1b:7b:20:5d:0f:04:7e:a2:2d:d2:
                    a6:e9:50:4e:a6:a4:5b:dd:d5:49:a2:58:63:9a:ff:
                    11:91:6c:95:c4:6b:14:fd:ed:51:0f:33:f2:a4:39:
                    99:cc:d1:b1:d4:83:3b:b7:9c:c5:ac:af:af:e2:f3:
                    b8:ef:a3:87:71:05:0d:37:80:fc:26:4e:28:08:64:
                    f4:78:3f:23:01:95:60:4d:5c:d1:18:2b:e8:d7:d7:
                    70:c4:66:ff:1f:3d:b8:b7:4b:64:dc:b2:a7:5f:cd:
                    6a:d0:01:c5:6e:cd:14:42:23:49:bc:2c:31:19:37:
                    d6:72:a2:15:01:4b:c8:0a:3b:17:3b:ae:04:84:81:
                    f9:0c:f5:56:f8:78:02:72:d0:d3:0c:3a:d4:ce:d6:
                    83:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:68:DA:D6:91:6F:E8:DE:2E:74:F2:17:62:6F:FC:FD:84:42:33:3B
            X509v3 Authority Key Identifier:
                keyid:BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:23:ce:ca:5f:eb:09:fd:09:16:cd:0e:09:07:68:ea:07:
         1f:57:77:9d:17:2d:4c:7a:50:26:ee:fc:dc:85:e5:c4:b4:5d:
         9e:51:7e:1a:0a:2e:2e:85:0e:6b:bd:61:a5:fa:51:2b:95:a3:
         8b:f8:bf:84:42:f6:de:d7:b0:6e:ca:61:b4:db:3d:10:71:bc:
         9e:7e:db:cb:1c:63:29:eb:0f:44:53:2b:d2:76:1b:3a:01:ad:
         22:76:06:a9:23:be:29:89:52:b3:b7:05:7f:dc:74:2e:d5:91:
         bb:18:8c:29:17:37:0b:b0:53:0e:31:b8:08:92:21:38:f7:b9:
         b4:45:15:04:60:0a:56:33:b7:ef:18:93:d1:d1:3b:7d:76:06:
         7b:cd:09:e1:0d:dc:bc:46:f6:97:24:04:7f:94:e1:ae:f2:07:
         e9:0d:30:76:75:44:3a:0f:42:85:5d:08:31:dc:04:d2:28:7e:
         88:0f:40:d5:c0:78:66:8f:88:2d:94:67:5a:13:4f:39:82:d1:
         9e:2e:55:f2:4b:32:51:e7:42:39:47:45:5e:5c:c3:a3:e9:0f:
         d3:c1:6e:00:f6:b5:d5:8a:c8:d5:52:fb:d0:27:a0:93:1e:ee:
         ee:8f:a5:87:4e:21:4c:d6:4b:2c:55:d6:bb:c1:4c:7e:ad:11:
         3a:65:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:43:26 2025 by rpki-client