Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
File:                     g9HRV2Bl4FAfLXR0TVFF001qcqo.mft (raw, json)
Hash identifier:          +r91K5uL5sIttPDEUAiTFxIJ0zuhEWL/HwiqOBUdsUo=
Subject key identifier:   11:3E:6A:8F:46:39:88:AA:D2:74:E0:4B:33:9A:09:EE:14:7C:D5:34
Authority key identifier: 83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA
Certificate issuer:       /CN=F3690D01AF/serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
Certificate serial:       0255
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
Manifest number:          0254
Signing time:             Thu 01 May 2025 04:02:41 +0000
Manifest this update:     Thu 01 May 2025 04:02:40 +0000
Manifest next update:     Sat 03 May 2025 04:02:40 +0000
Files and hashes:         1: g9HRV2Bl4FAfLXR0TVFF001qcqo.crl (hash: wVF8N/zpRsYbwOQs+MePWORrYMOg5sgId27q6kzzwKs=)
                          2: B5BAB51C637E11EEBB2D437E4AD9E6FC.roa (hash: lTgo88jgYIBRxqWVkQ/cnQHAMBRJfU2wE+z/YeI8Onc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 04:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690D01AF, serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
        Validity
            Not Before: May  1 04:02:40 2025 GMT
            Not After : May  3 04:02:40 2025 GMT
        Subject: CN=6812f261-b02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:91:10:ff:47:87:b2:f2:e8:8a:bc:36:ea:8d:
                    46:66:8a:14:61:67:4d:4a:31:e1:0e:d7:9e:39:f0:
                    ec:56:08:8b:e1:80:7e:39:ce:24:9e:9a:d4:04:4d:
                    bd:bc:fe:e5:a8:f8:f1:95:16:02:8c:51:e0:96:a0:
                    34:6b:c4:8e:49:92:40:06:2d:31:1f:bd:02:71:ff:
                    b0:0c:26:fd:bf:10:b7:af:b9:b8:38:87:8f:15:d4:
                    5b:bf:64:b3:17:09:c6:7e:34:97:10:71:90:4f:ba:
                    9d:1e:a8:f3:00:b2:b1:0c:9c:f6:96:24:1c:89:01:
                    13:75:ec:d3:f6:05:41:bb:09:ea:4a:00:fc:2d:6e:
                    50:39:90:c9:05:46:c1:8d:ab:7b:c1:65:14:9e:2a:
                    3c:1b:bd:7f:b8:4e:c9:64:61:51:4b:3b:e2:ff:29:
                    1b:f6:f3:80:83:4d:ab:11:74:6b:07:44:0c:f4:c6:
                    fd:52:11:85:c0:69:cf:d2:f2:79:fe:1e:b1:f2:34:
                    2f:23:d2:3f:68:81:32:ef:c5:0e:71:91:81:95:c7:
                    14:c1:34:c5:ed:e4:3f:0a:cf:08:f3:92:8e:e4:5d:
                    f3:93:69:42:7f:c1:9f:79:1a:eb:c8:c4:db:63:24:
                    b3:aa:e4:24:d8:e2:d9:fd:fe:1c:ad:13:b7:68:49:
                    6d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3E:6A:8F:46:39:88:AA:D2:74:E0:4B:33:9A:09:EE:14:7C:D5:34
            X509v3 Authority Key Identifier:
                keyid:83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:63:fc:ca:04:10:f0:87:c3:74:bd:e7:88:23:3a:e0:f7:91:
         a6:e8:f1:a4:34:8e:e3:a3:bd:1c:7c:ca:53:b7:40:df:eb:ba:
         8f:a7:ff:d4:83:84:da:99:c5:14:ee:a9:21:79:af:e6:c6:c8:
         82:01:63:25:a7:a6:a1:c6:fe:c5:8c:d7:7a:9b:18:08:89:01:
         a4:74:30:90:c2:55:62:95:26:15:30:c5:5a:a4:88:c2:09:c4:
         6f:96:8c:cb:e0:d9:e5:85:72:cc:07:35:c0:69:03:26:4b:55:
         5d:dd:49:2a:48:5e:07:fd:3f:44:ac:38:1a:f4:1b:d4:5d:2c:
         38:07:77:c7:38:58:4b:2e:0b:c4:b0:6c:aa:75:c0:79:87:88:
         0d:4c:c7:76:87:d0:fe:c2:98:4f:74:56:d8:1e:e7:bd:43:9f:
         0c:2e:54:1c:36:87:86:0b:d1:ce:1d:94:99:a2:ec:f5:28:69:
         2d:20:67:dd:13:10:f9:f9:1e:2b:97:a2:59:80:68:8b:84:96:
         c6:fd:84:29:75:61:ed:36:8e:05:2c:83:30:03:77:10:95:c5:
         77:3f:8f:6f:ae:f6:d1:a0:5b:82:f9:f4:76:b5:08:ee:1b:f5:
         bc:44:16:9d:46:0e:29:09:c4:9e:b2:8f:ef:76:4e:2c:3c:2b:
         9c:b8:62:be
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTBEMDFBRjExMC8GA1UEBRMoODNEMUQxNTc2MDY1RTA1MDFGMkQ3NDc0NEQ1MTQ1
RDM0RDZBNzJBQTAeFw0yNTA1MDEwNDAyNDBaFw0yNTA1MDMwNDAyNDBaMBgxFjAU
BgNVBAMTDTY4MTJmMjYxLWIwMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDskRD/R4ey8uiKvDbqjUZmihRhZ01KMeEO15458OxWCIvhgH45ziSemtQE
Tb28/uWo+PGVFgKMUeCWoDRrxI5JkkAGLTEfvQJx/7AMJv2/ELevubg4h48V1Fu/
ZLMXCcZ+NJcQcZBPup0eqPMAsrEMnPaWJByJARN17NP2BUG7CepKAPwtblA5kMkF
RsGNq3vBZRSeKjwbvX+4TslkYVFLO+L/KRv284CDTasRdGsHRAz0xv1SEYXAac/S
8nn+HrHyNC8j0j9ogTLvxQ5xkYGVxxTBNMXt5D8Kzwjzko7kXfOTaUJ/wZ95GuvI
xNtjJLOq5CTY4tn9/hytE7doSW1/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUET5q
j0Y5iKrSdOBLM5oJ7hR81TQwHwYDVR0jBBgwFoAUg9HRV2Bl4FAfLXR0TVFF001q
cqowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkwRDAxLzFDMjg3QjhDNjM3RTExRUVCN0IwODE3QzRBRDlFNkZDL2c5SFJW
MkJsNEZBZkxYUjBUVkZGMDAxcWNxby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2c5SFJWMkJsNEZBZkxYUjBUVkZGMDAxcWNxby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTBEMDEvMUMyODdCOEM2MzdFMTFFRUI3QjA4MTdDNEFE
OUU2RkMvZzlIUlYyQmw0RkFmTFhSMFRWRkYwMDFxY3FvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC3Y/zKBBDwh8N0veeIIzrg95Gm6PGk
NI7jo70cfMpTt0Df67qPp//Ug4TamcUU7qkhea/mxsiCAWMlp6ahxv7FjNd6mxgI
iQGkdDCQwlVilSYVMMVapIjCCcRvlozL4NnlhXLMBzXAaQMmS1Vd3UkqSF4H/T9E
rDga9BvUXSw4B3fHOFhLLgvEsGyqdcB5h4gNTMd2h9D+wphPdFbYHue9Q58MLlQc
NoeGC9HOHZSZouz1KGktIGfdExD5+R4rl6JZgGiLhJbG/YQpdWHtNo4FLIMwA3cQ
lcV3P49vrvbRoFuC+fR2tQjuG/W8RBadRg4pCcSeso/vdk4sPCucuGK+
-----END CERTIFICATE-----
Generated at Fri May 2 03:19:31 2025 by rpki-client