Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
File:                     VPGf2krwV1qRqtTk5vY1pk56j-w.mft (raw, json)
Hash identifier:          GCTTsijI1vzmQSuFstyHkfSQBg/H3Xp3s6ZcQtLy4tI=
Subject key identifier:   E3:19:62:56:69:9C:E9:25:F4:A4:51:5B:2D:31:A1:8C:25:01:DB:99
Authority key identifier: 54:F1:9F:DA:4A:F0:57:5A:91:AA:D4:E4:E6:F6:35:A6:4E:7A:8F:EC
Certificate issuer:       /CN=F36A6924AF/serialNumber=54F19FDA4AF0575A91AAD4E4E6F635A64E7A8FEC
Certificate serial:       61
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VPGf2krwV1qRqtTk5vY1pk56j-w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
Manifest number:          60
Signing time:             Wed 30 Apr 2025 05:10:57 +0000
Manifest this update:     Wed 30 Apr 2025 05:10:56 +0000
Manifest next update:     Fri 02 May 2025 05:10:56 +0000
Files and hashes:         1: VPGf2krwV1qRqtTk5vY1pk56j-w.crl (hash: AR3HpBBjqmhZdcC6bn7nF6e9gWM6S1+fcsTHUvYkdZU=)
                          2: 9343B656DE6511EFAF948D61762E951A.roa (hash: zDYsubxhkHYMHfjJPFrGHDpArkGFwI5Ms1TbXtuvEN8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VPGf2krwV1qRqtTk5vY1pk56j-w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 05:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6924AF, serialNumber=54F19FDA4AF0575A91AAD4E4E6F635A64E7A8FEC
        Validity
            Not Before: Apr 30 05:10:56 2025 GMT
            Not After : May  2 05:10:56 2025 GMT
        Subject: CN=6811b0e1-17a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8e:5e:b0:c4:e8:42:ca:ac:0f:84:be:7e:98:
                    b7:16:f4:93:44:f4:7f:b8:0e:a7:fc:98:fb:15:bb:
                    ff:e6:7b:e6:25:24:f2:58:b1:a8:fb:ba:06:98:e2:
                    bb:81:71:41:e8:a7:e1:02:04:e4:ce:13:f5:61:48:
                    38:16:fe:8d:0d:11:d0:d0:46:ab:10:6b:b7:97:4f:
                    0a:e8:3d:c9:e6:16:60:85:6f:4f:3d:ef:41:0a:cc:
                    52:17:25:7f:81:a2:29:88:d8:99:55:c4:3d:e1:6c:
                    2e:94:d9:cf:0e:80:e0:bc:8e:ee:05:03:dc:b2:59:
                    41:bb:e3:4d:71:58:30:58:83:5a:06:e6:75:dc:2b:
                    2b:17:9d:90:2e:1f:7d:e6:87:ad:88:88:ce:b3:eb:
                    b5:31:30:b9:e6:f8:eb:a3:40:c0:83:78:a3:29:a3:
                    b2:2d:d5:09:67:84:15:4f:29:54:24:5e:8d:24:2a:
                    61:69:7f:ef:e7:f6:85:43:8f:97:f7:90:00:bd:cd:
                    e2:48:42:5b:a1:12:8c:49:1b:7a:de:a1:bc:39:b9:
                    e1:c6:13:d8:57:9d:6f:06:34:9e:8f:ca:7f:74:c6:
                    a3:af:0d:b3:8a:d4:96:64:a9:9f:56:b0:0a:5d:7a:
                    fa:5c:17:78:1a:d5:f9:6b:33:de:d5:75:8d:64:db:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:19:62:56:69:9C:E9:25:F4:A4:51:5B:2D:31:A1:8C:25:01:DB:99
            X509v3 Authority Key Identifier:
                keyid:54:F1:9F:DA:4A:F0:57:5A:91:AA:D4:E4:E6:F6:35:A6:4E:7A:8F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VPGf2krwV1qRqtTk5vY1pk56j-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6924/EFD9E414DE6311EFB38DFE54762E951A/VPGf2krwV1qRqtTk5vY1pk56j-w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:08:e7:a3:2d:83:00:88:9e:ae:77:00:0a:b3:e0:35:ee:fb:
         e8:83:8a:57:4f:c2:78:f0:6f:3d:7f:00:8b:bf:73:eb:8f:52:
         9e:7a:9e:76:38:62:6f:f4:a3:e8:b6:09:78:04:66:e9:dd:26:
         0b:3e:33:d9:8f:e2:00:48:50:fa:a3:97:fb:b2:00:f1:e2:ca:
         6c:ef:88:bd:4c:3b:4d:ad:4d:3d:eb:a3:03:a0:91:04:02:83:
         ac:eb:20:a9:8b:41:b4:fd:33:ff:63:5a:25:97:ed:da:db:8e:
         d3:ea:46:0a:20:5c:a6:9b:99:88:86:b8:a3:40:c8:f9:81:de:
         a7:cf:98:26:94:fc:27:9f:73:65:d8:03:7d:f0:b8:c8:30:bc:
         9e:93:3e:50:53:75:a5:b5:08:41:9a:bf:c6:7b:e8:74:d2:f5:
         0d:a7:fb:f6:76:8d:87:a4:81:63:5f:cb:59:b0:0b:d3:a8:03:
         da:d1:a7:eb:8e:fa:48:aa:ac:69:30:d7:94:f5:53:fb:7b:ce:
         ae:52:63:93:5f:98:c3:53:82:dd:27:3b:ee:d6:c1:05:22:28:
         1c:24:2c:02:c8:da:0d:a1:d5:5c:39:3b:95:1f:49:a4:61:09:
         a9:6a:03:bf:65:bf:da:b2:02:77:a7:dd:e4:da:0e:26:87:97:
         8a:c1:46:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:31 2025 by rpki-client