Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
File:                     IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft (raw, json)
Hash identifier:          OU7fVgHzg+Fr6q25074NBQj6enk8ByHdmgbezWLfKyk=
Subject key identifier:   F3:A6:C4:3E:7C:ED:57:96:9F:94:2C:F0:E4:85:61:9E:27:67:15:86
Authority key identifier: 21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
Certificate issuer:       /CN=F36C7A1BAF/serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
Certificate serial:       034A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
Manifest number:          0348
Signing time:             Sat 26 Apr 2025 03:30:21 +0000
Manifest this update:     Sat 26 Apr 2025 03:30:20 +0000
Manifest next update:     Mon 28 Apr 2025 03:30:20 +0000
Files and hashes:         1: IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl (hash: bg83hSaKV6y+vkRDqEzWGIqpfiEVZ1JaQI1mtswqMzQ=)
                          2: 46769BA6A71011ED8E13C6ADF1222468.roa (hash: R9x99ks/pEliB0qi0nkW24IgeK+W3nFZnfzH3UhqkQ8=)
                          3: 16E36298A71011ED8B382EADF1222468.roa (hash: YwrcpofXcW+TieniRsmACWrSZmHA8Ph3c8IA66MXe/8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 03:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842 (0x34a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C7A1BAF, serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
        Validity
            Not Before: Apr 26 03:30:20 2025 GMT
            Not After : Apr 28 03:30:20 2025 GMT
        Subject: CN=680c534d-3846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a5:4e:1f:17:af:a4:73:28:fa:ce:ec:6d:5d:
                    61:de:ee:26:b8:d9:b5:44:e5:ee:90:8d:33:d3:e3:
                    81:5c:47:33:35:b1:9f:45:66:81:ec:23:66:24:aa:
                    8b:1c:b3:7e:8a:2d:2d:87:fb:d3:fe:08:61:92:cb:
                    95:d3:27:0d:41:5a:f3:a0:11:6c:b1:d3:47:6d:2c:
                    5c:7f:72:94:d5:dd:cb:59:89:c6:5c:65:1a:2a:50:
                    b7:43:d6:23:2c:71:13:bb:bc:29:d2:a0:b2:31:46:
                    67:6a:c2:53:1f:53:18:0f:51:a7:0c:71:85:b4:d1:
                    c6:8d:37:0f:58:36:77:c2:d2:33:63:28:ca:1f:ae:
                    f7:f9:72:96:eb:87:ce:29:de:91:bd:5e:54:6d:de:
                    62:8b:c9:47:d3:6a:3b:d3:2b:ab:d5:51:e9:63:fa:
                    e9:ed:4c:fe:63:bc:d4:f4:98:d7:2f:65:76:61:b8:
                    e7:c1:e4:0b:9a:ed:40:eb:08:80:bc:f8:e3:9e:9d:
                    33:bc:b8:99:af:40:73:45:db:75:72:78:4e:20:59:
                    35:09:95:77:c9:6d:a1:e9:ee:57:b3:b1:d3:c5:ed:
                    50:41:6f:5b:18:e3:18:bc:3a:b6:68:a1:32:db:5e:
                    0c:66:a4:31:eb:0c:37:f3:d7:03:a7:c9:ae:b0:c0:
                    9e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A6:C4:3E:7C:ED:57:96:9F:94:2C:F0:E4:85:61:9E:27:67:15:86
            X509v3 Authority Key Identifier:
                keyid:21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a3:37:97:32:88:a7:39:07:3c:ae:f8:8a:37:6d:63:28:d6:
         85:81:9b:64:e0:ca:67:55:a1:10:aa:36:c0:ec:f2:5e:a2:e8:
         f0:55:b5:85:00:d0:ca:a0:ca:23:16:a7:ce:cb:7f:7c:07:93:
         f4:99:33:f7:57:a8:14:76:35:ac:85:6e:fc:eb:90:46:22:30:
         73:48:7c:d2:9b:cd:84:f7:ca:2f:15:37:82:94:4d:42:3f:2a:
         5e:03:01:48:9f:b7:b4:b1:40:df:dc:49:f6:c3:20:ee:50:f2:
         7f:41:37:ee:1b:7d:f0:28:74:7e:d3:31:2f:73:5a:09:13:1a:
         1c:2a:60:51:ca:1b:81:8b:d5:81:ce:af:26:97:be:06:58:11:
         df:da:1f:54:02:fc:05:6b:b1:23:9e:b4:68:d8:34:57:51:58:
         d0:14:82:f4:f0:ad:81:63:17:e6:2b:2e:6f:de:ba:50:0a:01:
         f8:19:59:68:af:54:34:8f:3e:03:01:5a:fb:c6:ff:61:ce:1c:
         1f:a7:fd:6b:72:77:0e:f6:ec:b7:0e:d2:56:d2:d0:f3:1a:5c:
         13:8a:46:56:e5:42:21:7b:8b:3a:1b:a2:a5:9b:fa:da:d2:79:
         8c:f8:7e:46:60:e5:58:7b:92:72:ce:fa:f6:42:98:c5:63:45:
         e7:d0:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:32:51 2025 by rpki-client