Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
File:                     eRR9PW5TftaH0IV7r4SSgRj9pOU.mft (raw, json)
Hash identifier:          reCH/BE/Mu4NI02Q3exa8yjx3U+RalCmo2XcAMzTzz8=
Subject key identifier:   E8:BD:FE:A4:F3:B6:AC:BC:49:18:3B:14:A9:7C:F9:DF:FD:51:45:5B
Authority key identifier: 79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5
Certificate issuer:       /CN=F3688163AF/serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
Certificate serial:       01C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
Manifest number:          01C7
Signing time:             Thu 01 May 2025 04:22:52 +0000
Manifest this update:     Thu 01 May 2025 04:22:51 +0000
Manifest next update:     Sat 03 May 2025 04:22:51 +0000
Files and hashes:         1: eRR9PW5TftaH0IV7r4SSgRj9pOU.crl (hash: fDc4B24c2KCPzdBfMX2ECnZmySQj/8nvRTc3tt8pKFs=)
                          2: E8A5A2BCCBC911EE8E9BEF77775412E6.roa (hash: uW1ZZtqf2li8jzBd7IN42gC/xPbqnD5CcVOfHA/YQtE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688163AF, serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
        Validity
            Not Before: May  1 04:22:51 2025 GMT
            Not After : May  3 04:22:51 2025 GMT
        Subject: CN=6812f71c-4419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:65:b5:31:69:99:36:68:9c:a9:2f:e2:56:
                    e9:b8:0b:6b:26:76:fe:15:a4:67:a4:28:f3:7a:52:
                    e8:85:d1:30:e0:bb:0f:cf:01:57:ad:1f:a9:74:aa:
                    86:b5:73:98:16:f5:2d:7b:93:ca:f0:4a:88:6f:ad:
                    43:be:8d:8a:cf:b2:06:84:c6:91:1a:12:c5:f7:bd:
                    94:5f:d6:62:f8:4a:5d:56:87:53:64:42:d8:ca:57:
                    f4:a9:fb:00:91:e5:0b:25:bb:3f:1f:d1:d7:44:2a:
                    13:cd:b1:bf:b7:62:af:f4:72:5b:99:e6:d9:70:d1:
                    35:d4:0c:6f:95:ef:ed:12:2a:ce:99:5d:8b:4b:03:
                    90:35:b7:7f:80:8d:91:00:6c:5c:5f:38:de:04:c4:
                    f5:31:09:07:95:0b:6e:d8:59:55:3e:c6:f5:1f:82:
                    09:91:37:e2:dd:52:f2:f9:7e:00:f6:c1:3e:e5:cb:
                    50:5c:f5:d7:00:87:92:38:66:da:7b:81:1d:ec:a5:
                    80:76:b2:46:e0:8b:27:6a:15:e7:f0:91:05:81:24:
                    d1:b8:4d:b8:86:15:5b:82:0f:c1:16:52:30:c2:53:
                    6e:88:2e:16:0a:5b:95:d2:f0:c9:7e:60:1c:09:0a:
                    a2:5f:24:42:7a:d1:a0:57:88:b0:cd:dd:7a:26:cc:
                    cf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BD:FE:A4:F3:B6:AC:BC:49:18:3B:14:A9:7C:F9:DF:FD:51:45:5B
            X509v3 Authority Key Identifier:
                keyid:79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f9:55:58:4a:fe:f9:06:98:4a:93:50:89:3a:3a:40:47:96:
         6e:34:75:85:4c:bf:e0:d5:6a:7b:b8:5b:54:9f:69:82:cf:b3:
         fe:e4:87:dd:0d:35:6d:9f:2d:36:e9:d6:23:ad:db:97:98:a2:
         96:0e:1c:8f:48:29:a7:61:59:f2:56:17:0f:39:44:f6:89:e9:
         18:d3:0c:f3:30:bd:a5:c4:bc:1d:66:15:25:01:9b:b8:4f:52:
         d2:ea:c9:d6:28:f2:de:c0:1a:3b:c7:df:a8:88:55:f7:69:02:
         9c:c4:ca:3c:32:a7:46:49:64:0a:fa:bb:30:e8:6b:a7:a8:bf:
         d5:c1:70:cc:3d:c4:ca:58:d4:11:66:54:cc:01:ca:b5:0e:e7:
         ef:1d:28:14:b5:84:9e:d3:5f:ad:7b:bb:2b:9c:c7:aa:a9:9a:
         e6:14:5e:c7:a1:7d:2a:47:52:bd:eb:2e:bc:d5:9c:2c:e8:ff:
         28:87:9d:5e:fa:5e:30:b4:bf:5f:b9:69:ae:39:bd:31:20:a2:
         df:f4:17:6d:10:70:5f:c7:43:cb:ed:34:01:d8:50:bf:dc:28:
         8f:fa:81:2d:f7:2a:16:a1:e4:ff:9e:fc:f4:eb:00:a7:a7:38:
         a0:b0:59:60:87:3f:75:64:56:b9:83:50:63:c5:a5:34:5d:1f:
         4e:46:ae:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:18:37 2025 by rpki-client