Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
File:                     FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft (raw, json)
Hash identifier:          jmXEN/qd+TIF9mbv0VRpJtPVDqtEJrkWa3bD1GmX6lM=
Subject key identifier:   44:0B:78:04:CD:DA:25:11:5D:8D:19:47:49:4D:2B:29:33:E2:5D:E5
Authority key identifier: 15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB
Certificate issuer:       /CN=F36A32F5AF/serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
Certificate serial:       F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
Manifest number:          F0
Signing time:             Wed 30 Apr 2025 04:52:09 +0000
Manifest this update:     Wed 30 Apr 2025 04:52:08 +0000
Manifest next update:     Fri 02 May 2025 04:52:08 +0000
Files and hashes:         1: FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl (hash: Run/TAUU64W2TnRA4qmnaGTJA728+XXGHvpH+B6Lbp8=)
                          2: B505C262710911EF82F828AE762E951A.roa (hash: xT25C22GG0twXqlKDHqtHM6ZD8MTGkUTk1OnWMySjRQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 04:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A32F5AF, serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
        Validity
            Not Before: Apr 30 04:52:08 2025 GMT
            Not After : May  2 04:52:08 2025 GMT
        Subject: CN=6811ac79-2fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:3d:67:95:2b:3c:1a:d1:64:93:71:d3:53:
                    a4:1a:9c:e2:a2:2c:ad:1b:d0:06:24:43:3d:62:43:
                    e4:f2:be:83:1d:f2:32:23:a3:93:fc:2c:bd:6b:73:
                    77:01:55:fa:9b:52:a2:94:7c:32:3a:ed:02:2d:0e:
                    d4:f5:b4:e5:f4:fa:7b:1d:0f:b4:9e:dd:b4:35:fa:
                    0e:33:78:dd:ba:d3:7a:16:68:74:ab:32:f0:f5:48:
                    9a:ad:23:91:e2:34:8d:08:fc:33:76:3a:1c:89:c0:
                    9b:4c:9b:78:ff:66:80:d3:e4:0c:5a:a4:20:d4:c0:
                    11:76:c3:47:8d:c4:d3:6b:9b:67:5f:a7:5e:75:ca:
                    9d:4a:12:e3:b5:15:42:de:5b:0a:74:4c:06:4f:e2:
                    87:3f:6f:e6:96:3f:43:33:9d:92:15:20:bb:4c:6f:
                    84:55:65:ff:06:7f:89:4c:f6:3d:7a:fe:de:f8:55:
                    f8:c9:7e:ba:ba:fc:7d:e0:ec:2f:4b:4b:6f:5a:2f:
                    5b:b4:45:79:3f:9e:08:82:72:21:4d:fd:96:f5:4f:
                    c9:bc:8c:a5:0c:02:c2:0a:75:9c:ec:0a:2a:d9:62:
                    67:5e:f6:c1:3b:47:9f:f9:ac:83:82:05:4d:54:56:
                    60:03:16:61:7c:83:fc:ce:e8:8f:1c:5b:3d:64:8e:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0B:78:04:CD:DA:25:11:5D:8D:19:47:49:4D:2B:29:33:E2:5D:E5
            X509v3 Authority Key Identifier:
                keyid:15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:45:8d:c7:de:3c:29:57:83:ec:53:0c:86:da:fe:0f:86:e4:
         68:94:48:88:b2:c2:26:91:75:c6:0d:3e:ef:e0:53:e9:d1:a4:
         fb:19:59:14:18:ac:93:91:b4:6b:6f:de:00:83:92:54:f8:d3:
         cc:c2:06:04:a0:46:92:67:b4:ac:d2:88:41:83:ee:e3:7d:77:
         b6:9e:f8:09:90:83:0e:8c:ae:ef:3a:ce:5a:a9:e6:ff:ac:7a:
         e7:a2:6e:4d:e7:31:4c:56:98:7e:f5:95:d9:af:51:fc:22:8a:
         5a:b4:8e:ea:c9:56:8e:81:cd:59:c5:05:8b:df:26:70:96:3d:
         2f:f8:d5:8e:a3:ed:5c:e0:45:97:7f:e4:a9:0e:9d:43:8d:62:
         00:e4:e8:f4:0d:4a:a9:e6:10:b3:a1:28:c2:4f:0e:a1:d7:81:
         e4:60:56:f5:d8:ce:f7:19:8d:1d:3e:be:c4:b9:b1:19:a3:a3:
         39:81:20:cb:dd:5f:9a:31:be:a5:8d:26:9d:39:44:5c:1f:4a:
         f8:5a:e9:79:2d:51:5f:78:d4:2e:a3:69:ef:11:dd:e3:48:8f:
         80:0a:8e:c1:6b:d9:69:76:c0:56:4e:be:83:4c:3d:19:d2:ed:
         3a:4e:26:72:20:ed:95:0e:1c:d4:60:ba:d5:cb:82:6b:94:8f:
         2f:2d:ca:a4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTMyRjVBRjExMC8GA1UEBRMoMTVCQzA2MkIwQjcwRThGN0YyMEI0QTE1QkUwNTA5
MDA1QjczMTBDQjAeFw0yNTA0MzAwNDUyMDhaFw0yNTA1MDIwNDUyMDhaMBgxFjAU
BgNVBAMTDTY4MTFhYzc5LTJmYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5/j1nlSs8GtFkk3HTU6QanOKiLK0b0AYkQz1iQ+TyvoMd8jIjo5P8LL1r
c3cBVfqbUqKUfDI67QItDtT1tOX0+nsdD7Se3bQ1+g4zeN2603oWaHSrMvD1SJqt
I5HiNI0I/DN2OhyJwJtMm3j/ZoDT5AxapCDUwBF2w0eNxNNrm2dfp151yp1KEuO1
FULeWwp0TAZP4oc/b+aWP0MznZIVILtMb4RVZf8Gf4lM9j16/t74VfjJfrq6/H3g
7C9LS29aL1u0RXk/ngiCciFN/Zb1T8m8jKUMAsIKdZzsCirZYmde9sE7R5/5rIOC
BU1UVmADFmF8g/zO6I8cWz1kjgjBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURAt4
BM3aJRFdjRlHSU0rKTPiXeUwHwYDVR0jBBgwFoAUFbwGKwtw6PfyC0oVvgUJAFtz
EMswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzMkY1LzAzNDk5MEE0NzEwODExRUZBN0E5RTRBMzc2MkU5NTFBL0Zid0dL
d3R3NlBmeUMwb1Z2Z1VKQUZ0ekVNcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0Zid0dLd3R3NlBmeUMwb1Z2Z1VKQUZ0ekVNcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTMyRjUvMDM0OTkwQTQ3MTA4MTFFRkE3QTlFNEEzNzYy
RTk1MUEvRmJ3R0t3dHc2UGZ5QzBvVnZnVUpBRnR6RU1zLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4RY3H3jwpV4PsUwyG2v4PhuRolEiI
ssImkXXGDT7v4FPp0aT7GVkUGKyTkbRrb94Ag5JU+NPMwgYEoEaSZ7Ss0ohBg+7j
fXe2nvgJkIMOjK7vOs5aqeb/rHrnom5N5zFMVph+9ZXZr1H8IopatI7qyVaOgc1Z
xQWL3yZwlj0v+NWOo+1c4EWXf+SpDp1DjWIA5Oj0DUqp5hCzoSjCTw6h14HkYFb1
2M73GY0dPr7EubEZo6M5gSDL3V+aMb6ljSadOURcH0r4Wul5LVFfeNQuo2nvEd3j
SI+ACo7Ba9lpdsBWTr6DTD0Z0u06TiZyIO2VDhzUYLrVy4JrlI8vLcqk
-----END CERTIFICATE-----
Generated at Thu May 1 06:12:15 2025 by rpki-client