Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
File:                     DfSP5wXc0B45e4-chO8Xkcls-9g.mft (raw, json)
Hash identifier:          GOq93KP1ARLVYfg1nlBiHOe5uzchm9XsD0M61RWPtTw=
Subject key identifier:   33:ED:4B:F7:DC:82:E2:6F:EF:B6:44:45:18:26:63:C5:D5:8F:82:DE
Authority key identifier: 0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
Certificate issuer:       /CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
Certificate serial:       064D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
Manifest number:          064A
Signing time:             Sun 27 Apr 2025 02:06:00 +0000
Manifest this update:     Sun 27 Apr 2025 02:05:59 +0000
Manifest next update:     Tue 29 Apr 2025 02:05:59 +0000
Files and hashes:         1: DfSP5wXc0B45e4-chO8Xkcls-9g.crl (hash: IRhT8iShA3he4Kx4zrivkRGvv6v/eF283agXQqm7xL8=)
                          2: 23040FFA339B11EFAA1E5754762E951A.roa (hash: X4ZAQ6gAg0uApdYdcGPSN7HGXQ1rd2UvdvLUe5VreL8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4AD7AF, serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
        Validity
            Not Before: Apr 27 02:05:59 2025 GMT
            Not After : Apr 29 02:05:59 2025 GMT
        Subject: CN=680d9108-9c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:5c:1f:49:22:55:e6:ae:c8:ab:04:5d:d6:
                    21:29:79:e0:e6:d9:2f:59:1a:aa:dc:73:0c:be:7b:
                    a5:6c:28:ee:cf:ac:e0:11:c9:77:fb:f4:7b:5a:da:
                    27:a4:c8:cd:da:f0:c6:89:69:4b:65:45:8f:92:c8:
                    a1:aa:45:ee:98:49:f8:8b:5c:23:e9:71:56:40:a6:
                    11:2b:56:a8:ce:be:c8:12:f2:ef:13:fb:d7:1c:2a:
                    21:4b:fc:c9:bd:6f:e3:9f:e6:1a:6b:62:b3:8e:87:
                    8e:13:d5:09:f5:52:f6:23:dc:66:1a:6b:4f:f7:55:
                    20:0b:43:ef:7a:29:63:4c:12:67:6f:4e:6b:e5:ca:
                    a7:86:c1:eb:22:e0:b6:3c:c7:7d:1c:0d:17:8d:47:
                    3d:7d:48:cc:19:fc:16:84:d2:5f:dd:6c:93:03:70:
                    ee:f4:c2:24:1f:24:dd:f7:f6:6f:31:c0:cc:63:df:
                    72:ec:7a:56:7b:bb:14:d6:5b:3f:59:3c:1a:80:6e:
                    5a:fb:d3:bc:9e:f0:a6:98:65:18:d8:6d:a3:c8:16:
                    ff:8c:68:97:01:a3:f3:fc:63:9c:d3:46:5b:66:2c:
                    f3:ad:1a:9c:09:b3:6a:e9:cd:6a:a0:56:cc:73:fb:
                    97:df:4b:55:b3:ea:55:2a:93:d0:ce:39:aa:f5:43:
                    24:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:ED:4B:F7:DC:82:E2:6F:EF:B6:44:45:18:26:63:C5:D5:8F:82:DE
            X509v3 Authority Key Identifier:
                keyid:0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ef:f6:a4:0b:db:59:d0:5b:ef:20:64:67:c8:67:a1:c3:8d:
         55:b4:fa:ed:61:30:89:40:c8:3e:88:21:35:d3:f1:62:1f:06:
         ae:d1:41:7f:73:5e:53:2d:c9:a5:a9:ec:9a:e2:1c:23:26:fa:
         6d:e8:ee:f9:f1:65:23:c5:65:03:d4:5b:de:63:01:c3:4b:71:
         75:26:ae:31:a4:05:5d:a3:f6:d9:f0:be:46:0b:2f:09:bd:f3:
         de:d5:53:38:29:0a:c8:e6:bb:3d:b1:89:14:a5:52:8e:a4:86:
         6b:d6:50:26:7b:6e:ec:5a:cc:20:5f:06:99:02:e3:89:c3:5f:
         a7:54:b9:f1:b7:b7:b0:39:f0:13:3b:80:f6:12:00:4e:ab:d8:
         90:6e:ca:01:96:75:ec:e1:d7:ac:00:12:f9:3a:53:42:32:4b:
         3b:b7:e9:80:17:5e:8c:c3:97:c9:2e:da:eb:14:48:f7:fd:c5:
         e1:4b:a9:40:82:1c:8a:d3:cd:81:8d:01:7c:bf:4c:63:c0:a8:
         3a:45:b3:f4:fa:42:02:da:b4:6f:b5:6f:d5:b2:3f:96:5f:0c:
         56:a0:2b:6b:33:1e:be:6c:94:50:69:31:8a:82:88:0e:20:b7:
         f3:ab:da:32:70:13:cc:97:f3:87:60:68:53:1f:5f:60:19:bd:
         ac:60:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:05 2025 by rpki-client