Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
File:                     yRNvElsMvwHLUu8Ona1pO53hebE.mft (raw, json)
Hash identifier:          xfGq3aq4sMHk/WILOBWTfFd/qjyMgnz6x5x7BgkxYAI=
Subject key identifier:   83:3A:56:26:FC:A7:99:AA:8F:7D:04:BB:1E:C4:71:1E:8B:77:8C:6F
Authority key identifier: C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1
Certificate issuer:       /CN=F369F5CBAF/serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
Certificate serial:       0101
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
Manifest number:          FF
Signing time:             Sun 04 May 2025 04:50:49 +0000
Manifest this update:     Sun 04 May 2025 04:50:49 +0000
Manifest next update:     Tue 06 May 2025 04:50:49 +0000
Files and hashes:         1: yRNvElsMvwHLUu8Ona1pO53hebE.crl (hash: T7mgMx+pvL48LWBGK6eIlUAPItIAkT7QWty2yOUyzBg=)
                          2: DAA13BB269C211EF87DB5478762E951A.roa (hash: Y1C12JjUCRZB6miS2tftf7tn5FoqQq5MI2tzdSPlKmM=)
                          3: 6902F9DC69DB11EFB4D7CE8D762E951A.roa (hash: bWiMdJKsCZRqY9/D/tP0KK4vV03plvkNcR9SdfYbiCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 May 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F5CBAF, serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
        Validity
            Not Before: May  4 04:50:49 2025 GMT
            Not After : May  6 04:50:49 2025 GMT
        Subject: CN=6816f229-abd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:52:8b:9d:9a:33:22:4b:5c:33:84:a9:08:
                    9d:e0:b5:15:1c:76:eb:e5:20:33:d6:ae:fd:2e:20:
                    1f:b8:aa:9f:a7:67:3e:3f:29:76:af:a1:7d:ab:db:
                    b4:2a:44:89:af:02:47:0b:3a:e4:1c:0f:be:ff:01:
                    01:d4:4e:9f:2d:14:0a:ba:57:7d:85:f2:c5:37:ce:
                    44:bf:66:b9:fb:9a:41:49:10:81:43:23:40:46:34:
                    9e:05:2d:9f:4d:59:a7:d8:71:23:30:cf:06:58:b0:
                    f1:dd:5d:5e:f2:f3:fa:46:72:48:fb:4c:43:54:e9:
                    ff:90:f7:9d:3b:73:3f:7d:1f:57:4a:ae:b4:11:be:
                    88:2e:ac:78:9c:8f:ff:47:65:ef:04:4a:f8:e7:9d:
                    af:50:46:ac:49:26:2d:8b:3a:8f:5f:43:5e:72:17:
                    04:90:78:93:28:f5:39:12:87:b9:f8:43:09:f0:ff:
                    16:24:a5:7a:ff:8b:60:cb:6f:c3:b7:36:43:87:a7:
                    1a:a5:57:0f:57:05:93:3b:49:1e:a9:79:62:d6:49:
                    17:49:1a:d4:75:c2:a7:89:c7:9b:3f:47:0f:0a:e2:
                    98:d4:28:3e:a5:34:b7:f6:14:f0:00:cd:75:d7:ad:
                    c0:b7:50:16:ee:12:50:7a:56:5f:4d:3f:f8:a4:80:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3A:56:26:FC:A7:99:AA:8F:7D:04:BB:1E:C4:71:1E:8B:77:8C:6F
            X509v3 Authority Key Identifier:
                keyid:C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9e:33:70:e1:07:69:07:f9:39:53:44:65:6b:6e:84:37:d5:
         fb:2f:a2:1d:f1:f8:c7:3c:d1:8d:59:cc:b0:1a:3b:e5:8b:ff:
         3f:7b:65:24:50:48:5b:a3:0b:29:67:5d:10:f5:6f:3b:e6:67:
         fe:de:02:f9:6d:93:7d:6c:6b:6e:5a:98:e3:57:d5:3e:33:68:
         e1:3b:1a:17:9a:c6:c1:43:94:bc:56:d0:9b:b0:de:6e:43:dc:
         f8:3f:48:c3:76:90:3d:ed:2d:83:58:42:18:f8:cd:0b:25:8b:
         44:29:5d:d6:e6:71:2d:24:21:a7:1e:bf:a1:c1:66:3b:db:63:
         46:b0:dd:3f:d3:5a:9f:8e:d1:af:d7:92:70:e1:b1:13:25:6d:
         1e:b5:1e:bd:19:95:33:de:f1:90:d3:eb:a5:8e:95:8c:2c:e5:
         2a:5e:56:52:ea:6a:68:4d:c1:cd:48:72:90:fd:02:37:7b:63:
         85:65:b7:c6:2e:a7:a0:44:e2:04:e0:89:4a:70:52:a9:73:30:
         5f:b3:ee:75:06:5a:d2:f7:1e:62:22:f2:d6:85:20:41:39:91:
         ff:19:7b:ef:9f:3d:f8:b0:25:4b:8f:81:1c:4c:30:f4:d8:5a:
         83:57:27:40:2f:e0:80:07:f4:38:de:01:3e:0a:8b:aa:8e:83:
         ec:2e:a0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:37:16 2025 by rpki-client