Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
File:                     8hDREntBqAZ-iuVwf0PSLggdxmU.mft (raw, json)
Hash identifier:          qodnIyXVPuMqO90lDDgFhWTaV4R7/j0GLG6vfQ+MlIY=
Subject key identifier:   71:62:94:6A:29:0F:AD:EF:EF:03:59:DC:EC:0A:36:4E:3C:07:67:84
Authority key identifier: F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65
Certificate issuer:       /CN=F36828EEAF/serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
Certificate serial:       0117
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
Manifest number:          0116
Signing time:             Mon 28 Apr 2025 04:49:28 +0000
Manifest this update:     Mon 28 Apr 2025 04:49:27 +0000
Manifest next update:     Wed 30 Apr 2025 04:49:27 +0000
Files and hashes:         1: 8hDREntBqAZ-iuVwf0PSLggdxmU.crl (hash: MznkfAY4LLh2fAyR3sBzs0oLi24vtfomGjhjpPcrPTk=)
                          2: 43556232564A11EF9942095B762E951A.roa (hash: k0gU6QmfsEjV/HHlrAtYyJc8G8bTw7CikYjZpypK4Wk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36828EEAF, serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
        Validity
            Not Before: Apr 28 04:49:27 2025 GMT
            Not After : Apr 30 04:49:27 2025 GMT
        Subject: CN=680f08d8-c282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:e1:4c:ce:10:37:99:fa:ef:58:39:d3:0a:
                    6b:58:fd:43:eb:40:94:3a:dd:1e:ab:d3:c5:f6:8c:
                    4d:ff:ec:14:0f:92:76:18:71:f5:6b:f7:43:5d:92:
                    0f:df:2e:0a:2a:17:74:78:06:4a:a5:d9:f5:72:45:
                    1b:39:0e:5a:82:88:76:ad:a4:cf:ab:52:d6:68:9b:
                    be:c4:76:e0:ff:63:26:84:37:f9:0f:36:5a:e3:fb:
                    f6:6a:93:63:31:70:35:12:7c:ba:99:6e:90:99:a7:
                    23:05:c6:bf:02:bf:cb:57:8e:55:55:ce:1f:ec:c0:
                    fd:64:ae:5f:da:35:9f:da:ea:b4:0d:66:40:8e:06:
                    ba:d4:59:1f:9f:e7:b3:f0:4d:69:a9:70:d6:ad:f4:
                    54:78:de:79:97:f4:92:d6:25:46:2a:d6:88:bc:43:
                    b0:77:2b:2c:bc:3e:67:6f:0d:fc:a5:9b:a7:7c:44:
                    ff:9e:d1:9b:e7:ff:9d:f9:52:89:bd:f5:c0:e2:6e:
                    84:a4:7f:9a:a2:07:1e:44:df:55:4b:e5:0c:64:4f:
                    c9:58:09:64:0c:f3:5e:f0:cc:b2:b0:22:f2:97:36:
                    57:0c:84:18:31:28:3e:ab:f8:83:65:ee:91:96:fc:
                    46:77:5c:71:28:5e:14:35:67:e1:fb:be:f3:85:22:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:62:94:6A:29:0F:AD:EF:EF:03:59:DC:EC:0A:36:4E:3C:07:67:84
            X509v3 Authority Key Identifier:
                keyid:F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:44:be:60:66:ee:79:2a:fa:f0:a5:67:23:a5:53:e4:d9:95:
         9c:7d:38:80:16:d7:f1:ab:4f:28:05:85:4d:fe:38:e8:8f:e6:
         21:59:f4:ba:41:87:3d:d9:a4:22:83:ff:8b:7d:c6:87:16:bb:
         5f:ee:e5:28:9f:13:4d:30:62:8d:c2:c8:e1:75:d4:f2:8d:d5:
         5f:84:05:43:88:30:da:9d:1a:1c:c3:f2:1b:fc:30:a4:ba:85:
         d9:a7:b3:bc:b6:98:d1:a7:a4:de:99:27:2d:40:de:31:2e:0d:
         86:87:6d:d8:5b:95:1b:73:82:0b:3f:b2:eb:dc:ea:d6:43:a0:
         ed:d5:9f:8a:e0:e2:a3:b9:d7:a4:37:27:c2:69:2d:d7:8d:39:
         bf:40:10:62:8d:c3:9b:51:78:b3:bc:de:33:64:08:92:15:80:
         84:11:29:76:15:4a:fe:fa:3b:ef:fc:6b:ad:fc:9e:aa:90:72:
         07:89:7c:9c:fe:82:8c:75:91:af:6a:8e:54:6d:71:ab:4c:87:
         2d:f5:3a:62:53:9e:9d:b4:e3:d9:bb:82:08:4c:35:20:db:c3:
         53:3a:90:b2:6a:26:c1:be:f4:74:8f:85:45:c4:30:17:09:d0:
         3c:2e:e7:f0:99:1a:e9:5f:1e:4a:02:e3:28:bb:6f:13:bc:d4:
         eb:2e:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:32:03 2025 by rpki-client