Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          yE/mg9IhKXB6H5y/4js03zCiRl08mbBelIDBovZ4vg4=
Subject key identifier:   4F:A1:E0:15:74:61:A6:6E:DB:82:6B:3B:F4:09:B7:D6:D7:C9:71:87
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       06A5
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          06A0
Signing time:             Thu 01 May 2025 02:03:26 +0000
Manifest this update:     Thu 01 May 2025 02:03:25 +0000
Manifest next update:     Sat 03 May 2025 02:03:25 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: 0KYDThEV/0mGDQdtThlb9xORpk/fsADMIiSUnSbF0V0=)
                          2: 9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa (hash: ic/Fv7vDPLdwq215X1uSW0oAemEyGKLMsbDQyRvHOkE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1701 (0x6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: May  1 02:03:25 2025 GMT
            Not After : May  3 02:03:25 2025 GMT
        Subject: CN=6812d66e-44ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:d3:8d:45:01:71:e5:01:ff:1c:6a:78:c9:
                    60:00:46:88:38:91:9e:f3:97:40:83:d4:ca:75:92:
                    6b:0b:97:5a:e4:7b:d5:36:a4:56:2f:b3:cd:b8:4c:
                    a6:10:39:ba:ca:7b:f4:69:16:8a:ab:29:b8:9f:3e:
                    22:0e:f3:e7:01:11:34:1e:dc:68:8a:8d:c3:d4:98:
                    96:56:c8:78:fa:96:e2:28:be:37:c8:29:3c:75:e2:
                    c2:48:70:70:e3:fc:ff:41:e3:c4:ae:dc:40:d5:48:
                    eb:c8:46:7f:b0:15:18:9c:9b:f2:1e:1f:1c:16:73:
                    02:c5:d0:0a:3c:09:5e:f8:80:57:ae:bf:0c:9d:1d:
                    4d:61:e3:84:c2:6b:2d:53:41:c4:84:d0:90:49:3f:
                    77:bd:27:f4:50:a0:31:7b:7b:5f:ec:4f:db:60:8b:
                    45:15:a4:55:46:ce:59:3f:b1:97:4c:c4:19:44:1e:
                    55:38:c1:12:0b:70:59:b8:a1:05:3f:36:f6:12:b7:
                    60:be:5a:04:2b:4d:fd:ba:cb:56:c4:fb:dc:e0:f9:
                    bb:a4:10:f5:a5:95:c6:69:ff:3b:2d:f7:b7:2e:1b:
                    18:e5:b8:b8:08:87:bb:c9:7a:ef:a1:c2:89:92:ab:
                    79:ee:c7:4d:5e:f8:51:82:0e:ac:10:7f:70:b3:d5:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A1:E0:15:74:61:A6:6E:DB:82:6B:3B:F4:09:B7:D6:D7:C9:71:87
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d3:31:85:fa:81:67:7f:f1:dd:45:3e:a4:a9:59:e9:77:3f:
         db:2b:c6:bc:0a:e4:4d:32:9d:a9:66:cf:1a:fe:4c:7c:e0:ac:
         bf:37:32:18:03:52:04:52:5a:b6:05:1a:5d:cb:e3:62:ab:4c:
         d1:42:06:ee:97:de:da:38:a9:10:ad:5b:f0:35:dc:bc:71:a2:
         e0:55:83:7b:2d:af:c5:ed:e1:79:0d:59:92:b7:54:a4:63:82:
         6c:ac:f9:6a:12:d9:59:57:dd:8b:eb:ec:ab:75:71:3a:aa:e9:
         a1:fe:76:9a:04:e9:cd:fc:8e:77:3c:ba:e3:39:bf:c7:c5:3b:
         5a:11:c1:56:ec:31:2b:0b:cd:81:93:45:76:f7:2d:89:15:a4:
         05:f1:59:1a:2a:1e:36:10:b4:3b:26:a2:9a:35:5e:47:6b:30:
         fb:ae:3a:c1:29:3b:f9:13:bc:a1:bc:f9:69:ff:df:f7:2e:2e:
         47:70:0c:a3:27:ee:ba:14:79:66:8c:ac:b2:ee:e1:9c:15:08:
         16:99:be:1a:76:7e:fb:1d:04:e7:a5:7a:b5:7b:28:c7:e6:fb:
         c7:6f:3c:12:6e:cf:b4:c8:18:34:85:98:2a:eb:ac:4f:28:0a:
         52:af:c0:e2:71:da:f1:bf:e3:b5:ac:a1:d2:43:ea:74:18:c7:
         78:83:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:08:26 2025 by rpki-client