Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
File:                     5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft (raw, json)
Hash identifier:          qWAcSJq6kPrF2e4PlI+gor4ftS/0GJ2EyWReqRx/VOU=
Subject key identifier:   CB:3B:55:E4:42:3C:E5:05:C9:14:16:DA:B9:C9:F5:E4:27:8F:CB:6C
Authority key identifier: E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
Certificate issuer:       /CN=F36CC8EBRI/serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
Certificate serial:       048C
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
Manifest number:          048B
Signing time:             Fri 02 May 2025 02:52:29 +0000
Manifest this update:     Fri 02 May 2025 02:52:28 +0000
Manifest next update:     Sun 04 May 2025 02:52:28 +0000
Files and hashes:         1: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl (hash: kHaJoP0eEOHroFfDRCQImW+qeiivyWcbK91Yf8bonBY=)
                          2: A971279EB0EE11EC8D6592845A40D577.roa (hash: 0T+GuWqC72/c81r19BWbq4EQ4yHRxHBnW02fRB1Ftrs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                          rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 May 2025 00:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1164 (0x48c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBRI, serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
        Validity
            Not Before: May  2 02:52:28 2025 GMT
            Not After : May  4 02:52:28 2025 GMT
        Subject: CN=6814336d-6427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:6c:c9:3f:ad:1e:73:35:d9:d6:93:9f:55:
                    da:61:3e:6f:9b:bf:6e:18:03:fb:9f:a5:60:f5:00:
                    e6:8b:0c:3d:9a:21:3e:49:92:89:5a:13:b0:94:08:
                    2b:8d:81:d1:4b:95:4a:cf:73:d3:10:4d:e4:57:7c:
                    e4:7f:f0:e5:dd:b7:b8:29:f1:a1:13:48:a2:20:5a:
                    ee:ae:ea:66:35:3d:3b:ce:bf:04:2b:26:5b:09:48:
                    48:a0:63:46:79:b4:94:49:38:97:c7:3a:06:af:4e:
                    50:25:26:f4:7f:1f:7e:7c:c1:cf:d6:38:f4:f0:6e:
                    87:e9:26:20:1b:da:f8:2e:02:f3:76:67:cf:c9:e1:
                    1d:00:20:62:5a:93:d6:26:df:76:63:da:d3:6a:db:
                    d1:53:18:ff:97:d9:52:1f:ea:6a:c7:f3:cb:5a:70:
                    91:55:0d:54:2f:f0:d4:89:e8:32:11:7e:d5:8c:5d:
                    e4:ea:72:69:23:b5:47:17:a0:84:ad:f4:43:fb:87:
                    a5:22:62:2a:c2:ea:0e:4c:b6:85:6d:46:ab:a2:59:
                    2b:be:4a:e3:66:58:ec:77:a9:3d:90:b4:6d:8b:0e:
                    e0:5d:ab:75:e9:ea:84:82:f2:dc:6e:eb:1d:8d:90:
                    54:35:53:fe:97:63:4c:4f:cd:af:76:9c:3c:e3:15:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3B:55:E4:42:3C:E5:05:C9:14:16:DA:B9:C9:F5:E4:27:8F:CB:6C
            X509v3 Authority Key Identifier:
                keyid:E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:16:c4:9d:eb:3a:92:5a:86:f1:ff:f6:20:2f:90:eb:65:e8:
         0d:70:b4:f6:92:bf:98:ee:bb:03:66:dd:1b:5d:85:d2:6f:48:
         aa:18:dc:29:5b:8e:d3:ad:c8:5d:3f:da:aa:44:27:c5:cc:78:
         59:7b:21:28:63:aa:06:a4:09:63:7c:33:8a:29:57:34:5c:ac:
         d8:65:55:ad:73:4f:39:e0:4f:30:6e:b2:f8:cd:b8:c0:c8:b7:
         95:8e:7a:4c:57:10:be:a4:c0:48:7d:c1:f9:84:e5:26:7e:fd:
         87:6c:f9:92:89:b0:73:ab:18:a2:75:40:14:5a:15:a5:e9:2c:
         08:9d:5c:5b:af:75:0f:b5:ff:0c:7a:89:5c:41:0c:8f:5f:29:
         2a:cb:90:a3:81:97:b4:33:9a:c7:74:cb:a4:c3:2b:8f:4c:f7:
         e6:2c:da:1a:0a:4a:36:36:b3:5b:a7:eb:10:da:79:d9:c7:dd:
         8f:b5:14:db:49:0f:48:b8:bb:18:30:d5:bd:6e:c0:66:40:f9:
         cc:a0:1a:f5:b5:fd:cc:a2:b6:70:98:cb:85:9c:39:6b:3b:64:
         57:3b:ea:82:3b:51:6e:e5:59:55:9f:09:b2:ae:7d:76:46:aa:
         81:50:6b:18:18:3e:4b:d4:9d:bc:a5:26:96:47:4d:a0:59:fe:
         0a:c1:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:15:41 2025 by rpki-client