Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
File:                     mlfRoEhHbJDZjDymmHBdYtTdRNM.mft (raw, json)
Hash identifier:          2C22bY953u1HiCNhVlvKAQ6DKz/3mUCqB7xW7MPL2MU=
Subject key identifier:   46:51:5A:EC:DC:C2:24:87:77:3B:F1:46:3D:18:67:BB:89:27:B5:2F
Authority key identifier: 9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
Certificate issuer:       /CN=F36A44EAAF/serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Certificate serial:       08A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
Manifest number:          08A2
Signing time:             Sun 27 Apr 2025 01:30:59 +0000
Manifest this update:     Sun 27 Apr 2025 01:30:58 +0000
Manifest next update:     Tue 29 Apr 2025 01:30:58 +0000
Files and hashes:         1: mlfRoEhHbJDZjDymmHBdYtTdRNM.crl (hash: SJOFW2Z2407P2Ft2q1rBrMcKGtCrgq+SEqTDazbcPFw=)
                          2: C2885C5A890C11E99FBFB061F8AEA228.roa (hash: Nc3QhHvVxfoVedVMaampsQ99yjqvi1tBTakd45JoFJw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAF, serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
        Validity
            Not Before: Apr 27 01:30:58 2025 GMT
            Not After : Apr 29 01:30:58 2025 GMT
        Subject: CN=680d88d3-363a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:92:09:54:b4:fb:9b:f9:a4:3b:fa:1e:ad:
                    63:ee:1c:43:9f:4d:f8:cc:a0:28:a5:6d:2a:ce:a1:
                    33:4d:32:4c:60:ab:99:d6:d2:c3:9e:50:82:8d:cb:
                    31:74:bb:cd:b7:5e:33:b8:47:1c:53:1d:66:6d:66:
                    fe:32:fe:53:98:8a:77:40:3e:5f:b7:56:6e:26:dc:
                    78:3b:a3:e9:03:cb:e7:0e:8f:22:85:6a:3c:04:7b:
                    dc:a8:cb:66:c9:ff:44:f0:6a:57:fa:33:99:50:3f:
                    28:bf:7a:09:df:30:56:48:5b:e7:f7:3a:c6:b8:6c:
                    cc:8d:24:b8:7d:85:fe:ca:ea:e8:81:10:a1:f9:61:
                    a2:05:12:57:87:2c:e0:bb:51:0f:7e:7f:7e:5d:ba:
                    e5:a8:2d:e0:fa:62:aa:56:0a:09:f7:33:bc:6c:90:
                    b1:f7:4e:be:9b:19:e1:22:f6:ec:2d:bf:e8:49:03:
                    f2:61:f9:f4:c3:23:6a:23:31:18:2f:7d:8c:cf:ec:
                    18:3f:fa:e7:05:90:94:19:9b:1e:d0:30:4c:c3:9d:
                    dd:27:bb:cf:9c:9e:01:fa:57:df:76:e2:2e:98:4a:
                    b7:5b:d8:83:56:36:8b:e1:07:87:08:d6:d6:89:fb:
                    a5:c3:4a:cb:1b:e9:32:4f:63:c3:3f:da:6e:24:48:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:51:5A:EC:DC:C2:24:87:77:3B:F1:46:3D:18:67:BB:89:27:B5:2F
            X509v3 Authority Key Identifier:
                keyid:9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:7a:62:ad:a0:07:89:ce:6c:d7:d4:6a:cc:de:63:9d:e3:
         35:29:69:8f:d1:7f:48:bb:66:a4:26:5e:b6:33:2c:66:c1:25:
         67:0f:32:98:ac:67:c7:ca:89:a1:76:5c:ef:e8:2f:58:83:1e:
         16:3b:3c:13:08:2c:54:cc:4e:a5:6b:2b:e8:31:95:9c:39:36:
         96:fc:1d:98:29:5d:90:01:cc:a8:e8:b9:c2:7b:58:6d:ad:09:
         9c:2e:ee:e6:05:bb:2b:6d:40:1d:f1:77:87:46:84:9a:a8:0e:
         92:b8:6a:00:ed:f3:eb:2a:8d:57:55:94:be:e6:f8:ff:e3:92:
         93:34:f7:c4:95:47:97:b1:42:e4:2f:f8:3c:ad:17:28:94:65:
         e8:c0:d5:df:a8:f3:4e:57:f9:4f:b6:a8:39:7c:9b:b3:d1:99:
         6d:7d:5b:14:67:e0:65:69:da:13:4e:87:0c:60:22:a1:33:a9:
         4a:6f:93:5e:a7:17:d1:d8:80:77:cc:af:cd:64:71:12:73:95:
         19:4a:58:f4:7a:31:9d:0c:a4:a0:bc:e3:89:b5:30:bf:cb:0f:
         7c:46:8f:24:d7:0e:0f:b3:78:48:9b:22:0f:6c:0b:55:e7:51:
         a9:82:09:81:f8:05:a3:4a:a3:10:df:96:aa:ad:9f:f6:29:50:
         2c:5e:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:08 2025 by rpki-client