Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
File:                     uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft (raw, json)
Hash identifier:          5iCGZmQRSGEyMXdUsUYTg0cw4wIFcxg0z8KpwtDJXhg=
Subject key identifier:   C0:8F:F8:30:3A:6A:BC:BE:F5:57:1D:D7:D7:58:2C:D9:CC:AA:42:A4
Authority key identifier: B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
Certificate issuer:       /CN=F3686B65AF/serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
Certificate serial:       0229
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
Manifest number:          0220
Signing time:             Thu 01 May 2025 04:13:19 +0000
Manifest this update:     Thu 01 May 2025 04:13:18 +0000
Manifest next update:     Sat 03 May 2025 04:13:18 +0000
Files and hashes:         1: uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl (hash: O44YqglJ6h7CcKXYYVNetAFNZTmZzfC1z2lobJ9tMjE=)
                          2: 41353ABCC22111EEB2919A95775412E6.roa (hash: oXcQymFlE/krOOEr4NVVaSaifs3aMH0vQz8dpJbk6Hw=)
                          3: 8E74FB4879B211EF8A6E278A762E951A.roa (hash: HVgCoNFWTE1lwq+yr47vjP6O5PwPrCMNfBORofraa3A=)
                          4: 431E183C79EE11EFAA7EEE76762E951A.roa (hash: 7aSukpXTBzkjxwef0CwTrreS0uSqRQoE76LmOrIjIRE=)
                          5: 59BC8CC8704211EF9670AC4C762E951A.roa (hash: YHGbrYfTK/XykaZGHLmnPu2OovDDz4Wf7WXTsS/BDLI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3686B65AF, serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
        Validity
            Not Before: May  1 04:13:18 2025 GMT
            Not After : May  3 04:13:18 2025 GMT
        Subject: CN=6812f4df-e821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:49:f2:6f:39:3d:df:8b:0b:b8:47:18:6b:
                    5a:de:fb:a0:f4:91:6d:e4:74:2c:e5:5e:09:c8:8b:
                    06:3b:8b:3a:71:df:d6:bb:d4:a4:d9:7f:19:fb:a4:
                    7d:40:c1:78:f4:e4:72:ec:09:49:29:9f:8d:bb:de:
                    d2:a0:b1:71:d7:4b:a1:42:ce:ac:9f:5f:4e:40:3d:
                    40:fc:71:24:bb:80:5b:59:1f:d0:8e:bc:08:8c:3d:
                    5b:80:71:fe:a0:db:5b:d7:f7:7a:39:28:e0:54:eb:
                    62:bb:54:55:9e:1b:0d:c8:9e:64:81:0f:9f:a6:91:
                    d5:d8:3f:5e:ae:60:84:02:ba:e7:4d:81:e6:41:66:
                    52:33:97:42:01:02:cc:33:af:61:27:48:54:c2:b7:
                    d8:04:49:a2:1b:50:e8:e2:1a:6f:48:74:dd:e8:cb:
                    67:bb:5a:21:91:4a:b9:eb:0b:05:2d:fa:3d:df:df:
                    ef:83:3e:1e:cc:8a:f4:bc:48:24:1e:f6:9b:3e:08:
                    66:5b:3f:8d:e8:81:a7:22:93:4d:d9:b1:bb:a1:ec:
                    39:b1:7e:8f:6e:a3:e5:d5:a8:0c:da:71:fa:84:43:
                    d3:24:b9:34:d2:9c:99:a3:96:e9:ae:3b:d7:d6:07:
                    8c:e5:66:78:1a:0c:1f:0e:dc:ce:1d:64:72:c4:8c:
                    e3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8F:F8:30:3A:6A:BC:BE:F5:57:1D:D7:D7:58:2C:D9:CC:AA:42:A4
            X509v3 Authority Key Identifier:
                keyid:B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:04:b3:ea:54:13:97:2e:16:d1:c9:1e:43:47:1f:4e:e7:55:
         eb:dc:e6:93:73:6c:6b:91:db:d8:02:fa:ab:c5:b2:de:42:11:
         1f:6a:6c:54:1c:6e:47:77:a4:2f:61:4b:6a:8e:96:d8:a7:c8:
         ea:6d:7e:b6:f1:6b:03:cb:c4:06:57:32:da:ec:7b:d8:d1:ce:
         b8:d3:f7:b3:0e:45:6a:4c:fe:d5:47:01:3d:c4:1c:60:14:28:
         a9:00:91:e2:46:ea:76:96:7d:a1:32:c5:b1:b4:3c:13:d0:7a:
         95:56:db:40:ae:03:e9:ff:6c:0e:68:c2:f9:41:ca:ba:62:00:
         48:1c:00:74:71:fa:a6:2e:28:46:4e:7a:be:14:80:90:30:46:
         45:b2:44:0d:8a:79:38:04:79:6c:fd:c1:8c:01:02:e3:ba:52:
         03:04:e4:83:44:aa:a3:39:72:a9:3d:8b:75:5c:59:ff:40:90:
         71:27:b7:0d:13:07:54:fb:ca:2c:ab:42:86:ce:55:15:57:a1:
         92:46:3d:33:fa:34:96:6d:fa:06:90:76:d1:be:4b:1e:ee:51:
         04:ab:19:ba:1a:b4:2a:75:df:4a:34:8a:a8:a2:83:52:bb:44:
         72:4b:da:1e:cb:01:81:7a:5a:ea:76:d6:15:ce:15:de:5a:d7:
         1a:66:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:33:15 2025 by rpki-client