Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
File:                     GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft (raw, json)
Hash identifier:          54D9VOsSTXWX3zv3nrMV2Lfdxdq9qC9fm0N1FlSKyXQ=
Subject key identifier:   C6:65:A0:AE:65:C8:D7:5D:E0:D5:36:BE:06:DF:C6:85:1F:47:96:66
Authority key identifier: 18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE
Certificate issuer:       /CN=F36A9104AF/serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
Certificate serial:       043A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
Manifest number:          0434
Signing time:             Sun 27 Apr 2025 03:00:47 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:46 +0000
Manifest next update:     Tue 29 Apr 2025 03:00:46 +0000
Files and hashes:         1: GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl (hash: ZUX32i+TB4xu56XXjdyVcN/kW9obzAgRS59Sn19u+lo=)
                          2: 641B15C8F61811ECA46BC9AEF1222468.roa (hash: lmyyvzmxJhC+JbEIN1Aywg0+Vb+IK8y5pQ85m8/YB3s=)
                          3: DE6A96689BAF11ED872A3CE3F1222468.roa (hash: Azt6ehpluobbTkNPa//tv1URzUpC9mBdBjuIo2fSzCg=)
                          4: 7B865506F61811ECB0B004AFF1222468.roa (hash: PBFWsp55Byo8HpYgxxUbYwWMACFeIH4/XatY+LgkHMc=)
                          5: 18DBB0029BB011EDB3B1D3E3F1222468.roa (hash: y6T5QrNiBFE0Y9/1KUKFDLVD4S3WdtmmEEg8hWLjEb0=)
                          6: FD0720789BAF11EDA474A4E3F1222468.roa (hash: XwuRQifMxDzgCRmEHxL8Hh9MMbu+jBrnT6vSXd5rPc4=)
                          7: 355CB3D49BB011ED9DBA47E4F1222468.roa (hash: TYgeZaJhaBXGlUhHN9w35PJVWeP3Uv0WM9ubwoAhGOo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9104AF, serialNumber=18FDC8AF53877802589BEEDEE813F6B626EF82FE
        Validity
            Not Before: Apr 27 03:00:46 2025 GMT
            Not After : Apr 29 03:00:46 2025 GMT
        Subject: CN=680d9ddf-8dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:fa:68:2b:59:39:99:6f:9e:90:f8:d7:e7:
                    e9:59:0b:59:e0:53:ee:e9:fc:88:2c:39:ed:fb:ce:
                    b5:88:49:18:4a:01:4b:00:87:d3:a3:32:6a:73:6e:
                    fd:7f:c0:f3:3d:00:a0:eb:77:4b:c2:18:bc:d1:04:
                    8a:6d:aa:81:8b:2e:2b:be:83:92:b7:f6:48:38:74:
                    05:b2:ac:74:b0:e3:6b:65:79:c5:fb:a6:75:57:07:
                    bb:21:b6:fc:1f:c8:a2:c6:87:3c:98:f0:82:7f:e2:
                    ac:f8:27:fe:01:8c:3e:f9:6c:5f:86:8a:bf:f9:8a:
                    95:9d:dd:98:01:67:19:d3:f6:a4:9c:03:7e:8f:13:
                    7c:b4:5d:3f:13:51:60:8d:dd:a9:b3:ff:e0:fc:54:
                    2d:79:e3:fe:58:f3:36:b2:42:f5:cf:bb:cb:5b:8a:
                    15:00:ff:5e:76:d9:f8:79:09:a1:7e:bd:4d:c6:f9:
                    de:aa:c6:ec:ea:0d:69:21:da:01:c0:2b:9e:39:35:
                    51:c5:03:ca:58:79:80:2d:cf:9f:ea:15:e3:c2:81:
                    2e:91:6b:fe:5b:b6:0a:ee:dc:80:04:99:bd:af:e4:
                    65:3b:1b:e7:7e:50:37:d4:94:c4:b0:d7:42:01:26:
                    59:cf:fa:87:9a:95:cd:ee:51:ac:c1:e9:8e:a7:01:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:65:A0:AE:65:C8:D7:5D:E0:D5:36:BE:06:DF:C6:85:1F:47:96:66
            X509v3 Authority Key Identifier:
                keyid:18:FD:C8:AF:53:87:78:02:58:9B:EE:DE:E8:13:F6:B6:26:EF:82:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GP3Ir1OHeAJYm-7e6BP2tibvgv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9104/41D036ECF61811ECA84F46AEF1222468/GP3Ir1OHeAJYm-7e6BP2tibvgv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:05:f7:58:d5:34:c0:80:9a:71:d8:02:6e:7c:de:b9:ad:bc:
         49:4d:6d:4b:3d:75:e7:52:ca:bd:6f:ab:d8:0d:d1:ea:cf:0a:
         9f:78:94:cf:99:29:fd:5b:5c:8f:8e:cf:b2:b9:28:a3:5e:f5:
         a2:ea:5b:a3:2e:69:18:d6:3e:bb:ec:ee:22:b9:b7:ea:a8:4e:
         12:e0:f0:81:ce:5d:7c:2b:db:c0:c5:bb:59:70:0c:2b:78:61:
         d1:44:dc:c5:e6:c0:76:21:ea:f9:ea:ae:69:a2:47:5d:d4:b5:
         07:3e:fe:71:6e:4f:03:0e:e8:f3:5b:36:74:5c:63:41:c7:60:
         01:fe:cc:ee:1e:18:d3:17:2b:72:24:c8:25:a2:aa:71:13:48:
         c0:a3:a7:3d:9a:11:a0:ec:db:b2:3f:ea:87:63:2c:be:21:ef:
         a6:66:78:4e:e6:ca:2d:bd:c9:e9:82:80:86:df:2a:e5:8c:52:
         ca:08:dc:30:e1:72:b0:7c:e8:5b:c7:e8:b5:29:a7:da:3b:40:
         1f:c5:4e:e1:64:53:d5:c5:6e:20:38:e3:cf:f6:82:a1:42:36:
         1f:7a:a2:30:12:05:68:c1:6e:e7:eb:19:41:82:40:a6:86:a8:
         04:b9:2c:96:da:b8:30:b6:23:3f:43:fa:11:38:f7:04:2d:39:
         dd:f3:51:d7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBDowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTkxMDRBRjExMC8GA1UEBRMoMThGREM4QUY1Mzg3NzgwMjU4OUJFRURFRTgxM0Y2
QjYyNkVGODJGRTAeFw0yNTA0MjcwMzAwNDZaFw0yNTA0MjkwMzAwNDZaMBgxFjAU
BgNVBAMTDTY4MGQ5ZGRmLThkYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMmfpoK1k5mW+ekPjX5+lZC1ngU+7p/IgsOe37zrWISRhKAUsAh9OjMmpz
bv1/wPM9AKDrd0vCGLzRBIptqoGLLiu+g5K39kg4dAWyrHSw42tlecX7pnVXB7sh
tvwfyKLGhzyY8IJ/4qz4J/4BjD75bF+Gir/5ipWd3ZgBZxnT9qScA36PE3y0XT8T
UWCN3amz/+D8VC154/5Y8zayQvXPu8tbihUA/1522fh5CaF+vU3G+d6qxuzqDWkh
2gHAK545NVHFA8pYeYAtz5/qFePCgS6Ra/5btgru3IAEmb2v5GU7G+d+UDfUlMSw
10IBJlnP+oealc3uUazB6Y6nAecDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxmWg
rmXI113g1Ta+Bt/GhR9HlmYwHwYDVR0jBBgwFoAUGP3Ir1OHeAJYm+7e6BP2tibv
gv4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE5MTA0LzQxRDAzNkVDRjYxODExRUNBODRGNDZBRUYxMjIyNDY4L0dQM0ly
MU9IZUFKWW0tN2U2QlAydGlidmd2NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dQM0lyMU9IZUFKWW0tN2U2QlAydGlidmd2NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTkxMDQvNDFEMDM2RUNGNjE4MTFFQ0E4NEY0NkFFRjEy
MjI0NjgvR1AzSXIxT0hlQUpZbS03ZTZCUDJ0aWJ2Z3Y0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQBfdY1TTAgJpx2AJufN65rbxJTW1L
PXXnUsq9b6vYDdHqzwqfeJTPmSn9W1yPjs+yuSijXvWi6lujLmkY1j677O4iubfq
qE4S4PCBzl18K9vAxbtZcAwreGHRRNzF5sB2Ier56q5pokdd1LUHPv5xbk8DDujz
WzZ0XGNBx2AB/szuHhjTFytyJMgloqpxE0jAo6c9mhGg7NuyP+qHYyy+Ie+mZnhO
5sotvcnpgoCG3yrljFLKCNww4XKwfOhbx+i1KafaO0AfxU7hZFPVxW4gOOPP9oKh
QjYfeqIwEgVowW7n6xlBgkCmhqgEuSyW2rgwtiM/Q/oROPcELTnd81HX
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:37 2025 by rpki-client