Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier:          Aj4H7/uH8fKf/Tn4TlrLugYoRrqGC1C/CO75kXvqrjs=
Subject key identifier:   7A:24:16:64:A4:10:96:16:DC:19:20:DB:73:39:17:66:F5:CF:68:C8
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer:       /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial:       0430
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number:          0429
Signing time:             Fri 20 Jun 2025 03:10:57 +0000
Manifest this update:     Fri 20 Jun 2025 03:10:56 +0000
Manifest next update:     Sun 22 Jun 2025 03:10:56 +0000
Files and hashes:         1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: D54jc2dokyO/6F0x6xGWntkV373nlwEOHowPd/ELces=)
                          2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
                          3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
                          4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
                          5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
                          6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
                          7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
                          8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 22 Jun 2025 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1072 (0x430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
        Validity
            Not Before: Jun 20 03:10:56 2025 GMT
            Not After : Jun 22 03:10:56 2025 GMT
        Subject: CN=6854d141-7685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:c0:9c:42:5d:18:b4:70:ed:0a:d1:35:2a:
                    77:d3:d9:04:10:a8:0c:97:ba:ab:bb:1d:8d:4c:c4:
                    52:ee:a8:5a:a5:84:14:be:16:ef:d7:5c:6a:15:71:
                    45:a6:2e:99:96:01:f2:56:6a:d2:21:3e:d8:ef:75:
                    44:d1:8d:1d:93:a7:45:69:a4:2c:19:fe:54:80:b8:
                    07:d2:9c:5b:0e:30:88:dc:a2:14:7a:91:67:11:c1:
                    6c:19:1c:1c:85:41:a7:d1:bb:ec:f1:ab:31:75:92:
                    1a:6f:5a:9f:27:72:84:e2:b4:f0:a9:fd:a4:8b:98:
                    90:6f:77:3b:f9:05:fb:0c:ee:31:ef:3f:e8:0b:e7:
                    77:51:6e:4b:bc:49:22:04:1e:2b:83:60:b7:8e:ef:
                    6f:7c:18:5d:a4:95:b9:4e:33:7d:d8:c6:a9:77:7e:
                    f2:9b:0a:4b:8d:ca:23:85:db:e6:bf:e9:02:09:0d:
                    83:6b:f9:3b:14:86:ab:f4:f7:2d:aa:5a:44:f6:a1:
                    c8:c2:f0:97:92:95:a0:8e:35:df:f7:8d:df:ce:65:
                    15:aa:13:37:1b:71:ce:53:a0:a3:5f:d2:9b:40:9a:
                    af:3f:b3:2d:64:2e:e4:43:a7:4f:da:47:54:94:f1:
                    92:cf:0a:66:4e:c0:1a:a8:74:4f:d4:da:d6:ac:9e:
                    0b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:24:16:64:A4:10:96:16:DC:19:20:DB:73:39:17:66:F5:CF:68:C8
            X509v3 Authority Key Identifier:
                keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:df:9d:ce:6b:98:ff:b3:15:09:5b:32:a5:14:cf:49:f2:77:
         58:35:2a:6c:14:69:fb:49:a7:c2:33:a2:b8:08:45:fa:f7:f0:
         5e:7f:59:40:d9:74:7e:22:1b:db:04:ff:2b:a3:60:ec:48:04:
         37:3f:31:ea:44:a1:4c:e1:a6:c8:2a:69:4a:e8:5f:60:97:9f:
         ec:70:22:d9:da:7d:72:a5:14:13:24:d1:74:ff:47:7d:79:e1:
         27:9a:5a:eb:81:78:6f:ed:fe:28:b3:c4:cb:c7:e7:10:eb:8a:
         77:53:01:f8:f5:b5:d5:a1:ee:47:dd:8e:f1:c5:a0:96:4a:e0:
         03:24:4f:bd:7d:b0:f4:f3:3d:90:aa:48:11:2d:96:ad:5b:29:
         83:b7:ea:3c:c8:1a:24:88:3d:24:3c:6a:de:07:f5:3d:b9:68:
         e5:82:21:10:c5:61:81:5c:12:62:c0:84:53:e0:16:36:dc:ae:
         52:75:9e:67:a0:af:35:ca:ca:1f:50:14:b5:a6:43:12:53:da:
         72:dc:2e:2f:97:52:ee:53:d1:5f:eb:b1:56:67:ad:54:35:c7:
         51:e7:69:77:df:6d:78:63:d6:b9:12:b4:fe:2a:39:c3:f8:a3:
         22:b5:b4:77:c7:fe:ea:5d:0d:50:2e:d3:a7:a5:2f:15:86:8c:
         1f:54:d3:df
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0NTlBRjExMC8GA1UEBRMoODRCQzIyQTE0QkI1Rjg4OUJDMTBBMjJDRjE3QzlD
MTlCNTE5QjI4ODAeFw0yNTA2MjAwMzEwNTZaFw0yNTA2MjIwMzEwNTZaMBgxFjAU
BgNVBAMTDTY4NTRkMTQxLTc2ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCe9MCcQl0YtHDtCtE1KnfT2QQQqAyXuqu7HY1MxFLuqFqlhBS+Fu/XXGoV
cUWmLpmWAfJWatIhPtjvdUTRjR2Tp0VppCwZ/lSAuAfSnFsOMIjcohR6kWcRwWwZ
HByFQafRu+zxqzF1khpvWp8ncoTitPCp/aSLmJBvdzv5BfsM7jHvP+gL53dRbku8
SSIEHiuDYLeO7298GF2klblOM33Yxql3fvKbCkuNyiOF2+a/6QIJDYNr+TsUhqv0
9y2qWkT2ocjC8JeSlaCONd/3jd/OZRWqEzcbcc5ToKNf0ptAmq8/sy1kLuRDp0/a
R1SU8ZLPCmZOwBqodE/U2tasnguDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeiQW
ZKQQlhbcGSDbczkXZvXPaMgwHwYDVR0jBBgwFoAUhLwioUu1+Im8EKIs8XycGbUZ
sogwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NDU5L0NERDc0RDc2MkQxQjExRURCRTAwODg4QkYxMjIyNDY4L2hMd2lv
VXUxLUltOEVLSXM4WHljR2JVWnNvZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hMd2lvVXUxLUltOEVLSXM4WHljR2JVWnNvZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQ0NTkvQ0RENzRENzYyRDFCMTFFREJFMDA4ODhCRjEy
MjI0NjgvaEx3aW9VdTEtSW04RUtJczhYeWNHYlVac29nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDP353Oa5j/sxUJWzKlFM9J8ndYNSps
FGn7SafCM6K4CEX69/Bef1lA2XR+IhvbBP8ro2DsSAQ3PzHqRKFM4abIKmlK6F9g
l5/scCLZ2n1ypRQTJNF0/0d9eeEnmlrrgXhv7f4os8TLx+cQ64p3UwH49bXVoe5H
3Y7xxaCWSuADJE+9fbD08z2QqkgRLZatWymDt+o8yBokiD0kPGreB/U9uWjlgiEQ
xWGBXBJiwIRT4BY23K5SdZ5noK81ysofUBS1pkMSU9py3C4vl1LuU9Ff67FWZ61U
NcdR52l33214Y9a5ErT+KjnD+KMitbR3x/7qXQ1QLtOnpS8VhowfVNPf
-----END CERTIFICATE-----
Generated at Fri Jun 20 22:03:53 2025 by rpki-client