Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
File:                     IGKsHBhX7ixX9xZrmADtH4952XE.mft (raw, json)
Hash identifier:          sAXqLVTvxA/k4EsSq3enB9Y+dojvJhgOvv1BZHKYRbs=
Subject key identifier:   80:0F:76:16:10:6B:6B:38:03:FC:FF:71:73:D3:C3:D4:6A:FD:94:41
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Certificate issuer:       /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial:       FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
Manifest number:          FA
Signing time:             Thu 01 May 2025 04:52:24 +0000
Manifest this update:     Thu 01 May 2025 04:52:23 +0000
Manifest next update:     Sat 03 May 2025 04:52:23 +0000
Files and hashes:         1: IGKsHBhX7ixX9xZrmADtH4952XE.crl (hash: DVlROCICOhJbQM7sfcoD4mYFYmOcCpuHGijFXzKIKa8=)
                          2: 730CF53E6F7811EFB7469458762E951A.roa (hash: 4Xr+HaCJbqAah+5S3H7APXwnc3AnA1LsHigd1Wadgok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C3F1AF, serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
        Validity
            Not Before: May  1 04:52:23 2025 GMT
            Not After : May  3 04:52:23 2025 GMT
        Subject: CN=6812fe07-5180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:17:54:9e:2a:ac:93:7a:7d:8d:a8:59:bd:
                    4d:f1:73:27:55:43:a0:90:3c:e5:b2:66:2c:1d:32:
                    3b:0a:96:43:da:a6:e9:7f:4f:c0:23:47:66:7f:7d:
                    cc:5a:48:a9:26:96:61:ac:da:5a:5d:b2:95:64:ba:
                    8a:fb:50:9d:67:7e:9d:05:f8:61:a4:ee:77:2d:31:
                    8e:a3:36:f8:64:19:79:17:78:03:22:eb:2f:a7:05:
                    b4:4f:c2:4c:52:58:f7:16:d1:a6:ca:68:c8:d9:a4:
                    a6:9f:5d:d2:51:4a:de:a6:3f:5c:3f:52:55:56:12:
                    2a:37:41:22:43:ed:7d:30:87:33:1a:b3:07:a6:1e:
                    a4:28:ba:46:5f:fc:d5:61:15:7c:e7:d0:c6:d1:cf:
                    38:00:64:41:9b:cc:4d:e9:98:bb:28:7e:ab:78:88:
                    9c:ca:96:44:f2:5e:ba:62:ea:8a:5c:68:86:83:d2:
                    2a:07:e4:2b:a8:20:78:fe:08:84:0a:c5:af:d4:49:
                    5f:df:cd:21:29:07:dd:95:08:88:77:98:be:3d:a5:
                    e0:ec:f8:31:17:bc:2f:59:fe:b1:e0:ee:0c:a0:8b:
                    3e:a1:30:ec:fc:0c:23:57:af:02:af:5d:32:f1:e4:
                    b8:f2:fa:c0:f8:c1:af:7e:73:f7:47:cb:c1:62:ce:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0F:76:16:10:6B:6B:38:03:FC:FF:71:73:D3:C3:D4:6A:FD:94:41
            X509v3 Authority Key Identifier:
                keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8b:b1:c2:f3:84:15:66:62:7a:b6:a0:e7:3b:46:98:88:f9:
         1c:ff:c4:cd:aa:1e:b7:bd:5e:01:84:30:29:e6:5a:e3:4c:ae:
         e9:f6:4e:61:f6:b4:35:ce:ff:9a:0c:df:2b:83:c9:96:ae:f7:
         2b:c1:14:9e:fa:75:24:7d:af:f6:1c:92:ff:b8:ce:f9:7c:b3:
         ce:2f:86:e1:bc:84:14:a6:73:5b:46:6c:e5:14:2c:9c:70:f4:
         96:6a:21:e2:d5:d4:dc:59:2c:a2:47:83:cf:39:5e:de:19:8c:
         77:8c:6c:4c:64:b8:05:36:18:b4:23:d3:b6:fc:9d:7e:db:1e:
         7d:df:15:f5:f5:3b:5a:74:5f:fd:15:53:f9:f7:d2:08:63:46:
         1e:4b:34:db:75:ab:ab:9a:02:0c:c6:08:bf:8a:a4:7c:c5:55:
         d3:ae:f5:5d:2d:6e:29:c2:6b:55:11:fe:34:6b:e9:dd:85:9f:
         83:66:f1:ea:73:e7:ea:70:ec:f1:48:ef:7c:28:93:2a:54:6c:
         94:31:bb:fc:29:ce:3d:46:c4:d9:2c:4c:e9:6c:22:d4:c6:00:
         b1:32:b1:9e:f8:73:93:8f:f5:a5:3b:b4:43:48:4a:d2:4b:78:
         75:88:f6:c6:a1:ab:6c:ba:f7:e7:22:fb:e3:ea:ba:c7:4a:eb:
         9e:77:ff:c7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUMzRjFBRjExMC8GA1UEBRMoMjA2MkFDMUMxODU3RUUyQzU3RjcxNjZCOTgwMEVE
MUY4Rjc5RDk3MTAeFw0yNTA1MDEwNDUyMjNaFw0yNTA1MDMwNDUyMjNaMBgxFjAU
BgNVBAMTDTY4MTJmZTA3LTUxODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDARdUniqsk3p9jahZvU3xcydVQ6CQPOWyZiwdMjsKlkPapul/T8AjR2Z/
fcxaSKkmlmGs2lpdspVkuor7UJ1nfp0F+GGk7nctMY6jNvhkGXkXeAMi6y+nBbRP
wkxSWPcW0abKaMjZpKafXdJRSt6mP1w/UlVWEio3QSJD7X0whzMaswemHqQoukZf
/NVhFXzn0MbRzzgAZEGbzE3pmLsofqt4iJzKlkTyXrpi6opcaIaD0ioH5CuoIHj+
CIQKxa/USV/fzSEpB92VCIh3mL49peDs+DEXvC9Z/rHg7gygiz6hMOz8DCNXrwKv
XTLx5Ljy+sD4wa9+c/dHy8FiznpHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUgA92
FhBrazgD/P9xc9PD1Gr9lEEwHwYDVR0jBBgwFoAUIGKsHBhX7ixX9xZrmADtH495
2XEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDM0YxL0Y0QkU1NUEwNkMzRjExRUY5NUQ5RTg5Qjc2MkU5NTFBL0lHS3NI
QmhYN2l4WDl4WnJtQUR0SDQ5NTJYRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lHS3NIQmhYN2l4WDl4WnJtQUR0SDQ5NTJYRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUMzRjEvRjRCRTU1QTA2QzNGMTFFRjk1RDlFODlCNzYy
RTk1MUEvSUdLc0hCaFg3aXhYOXhacm1BRHRINDk1MlhFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsi7HC84QVZmJ6tqDnO0aYiPkc/8TN
qh63vV4BhDAp5lrjTK7p9k5h9rQ1zv+aDN8rg8mWrvcrwRSe+nUkfa/2HJL/uM75
fLPOL4bhvIQUpnNbRmzlFCyccPSWaiHi1dTcWSyiR4PPOV7eGYx3jGxMZLgFNhi0
I9O2/J1+2x593xX19TtadF/9FVP599IIY0YeSzTbdaurmgIMxgi/iqR8xVXTrvVd
LW4pwmtVEf40a+ndhZ+DZvHqc+fqcOzxSO98KJMqVGyUMbv8Kc49RsTZLEzpbCLU
xgCxMrGe+HOTj/WlO7RDSErSS3h1iPbGoatsuvfnIvvj6rrHSuued//H
-----END CERTIFICATE-----
Generated at Thu May 1 19:51:12 2025 by rpki-client