Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
File:                     TNw7PW0GCBEg29bsI2NRx172TMw.mft (raw, json)
Hash identifier:          QVWOXHGTDfgEV16F0pnFvj66dTGNvpXac27GKZ5N35g=
Subject key identifier:   AF:EC:57:E9:68:05:CF:F6:DA:05:14:BB:18:92:43:A9:FB:9E:02:DC
Authority key identifier: 4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Certificate issuer:       /CN=F36DA6FBAF/serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Certificate serial:       3D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
Manifest number:          3A
Signing time:             Wed 30 Apr 2025 05:14:29 +0000
Manifest this update:     Wed 30 Apr 2025 05:14:28 +0000
Manifest next update:     Fri 02 May 2025 05:14:28 +0000
Files and hashes:         1: TNw7PW0GCBEg29bsI2NRx172TMw.crl (hash: +c6sDxBmrv9zLSXL4EZvyknwPRDf0lLDTBLVEHUBuwo=)
                          2: 51D56DFEFE6311EF8981AA93762E951A.roa (hash: v1iecGoXLrBsavXRX1kf0YmMMDAB2gV9RZnpPeiZxzU=)
                          3: 81829ED6FE6411EF86C6749A762E951A.roa (hash: p0zc+GDWSPngPzC4UqPmM1kDzoimJaQE4vWQrsCXryc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 05:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA6FBAF, serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
        Validity
            Not Before: Apr 30 05:14:28 2025 GMT
            Not After : May  2 05:14:28 2025 GMT
        Subject: CN=6811b1b5-a994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:96:1c:d2:d6:5e:1c:3d:c7:01:8b:f3:9b:
                    75:58:23:2d:39:60:7d:52:bc:16:50:2e:ca:c8:a1:
                    c6:df:e9:31:d7:3b:72:ea:4c:57:ef:7c:51:8d:5b:
                    00:49:57:d9:fa:e0:f9:bb:bf:dc:f1:74:3a:a9:56:
                    67:cc:c9:1b:fb:28:12:bd:a5:8d:dd:42:2b:60:70:
                    fe:12:6a:c0:24:d5:24:ba:ce:60:08:52:83:ac:20:
                    d7:bb:f8:59:59:59:fe:ea:e3:4e:16:91:8d:e6:5c:
                    f0:31:16:62:9b:2e:64:4c:b3:75:dd:46:93:62:01:
                    ba:35:11:2a:9c:cf:cc:30:b8:d8:44:b6:1a:b4:c9:
                    97:b1:75:1c:c8:d7:02:d2:2b:62:a1:bf:86:ef:0a:
                    43:dc:3f:75:41:e9:fa:8d:d7:8e:a9:01:06:f6:53:
                    d3:8f:89:20:83:29:dc:9a:fa:af:02:21:23:2b:a6:
                    a3:b2:c6:2e:32:e8:87:40:c5:91:bb:ab:f6:13:6b:
                    23:65:04:c3:4a:69:0c:d3:fa:88:cc:a1:9c:cc:3f:
                    48:44:ec:2a:c6:d9:c8:c8:e3:08:c4:9f:07:44:1e:
                    47:29:ba:74:c3:81:66:48:96:6e:5f:4e:27:cb:70:
                    ec:71:f8:7c:65:47:49:0c:e4:34:94:4f:93:af:85:
                    21:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EC:57:E9:68:05:CF:F6:DA:05:14:BB:18:92:43:A9:FB:9E:02:DC
            X509v3 Authority Key Identifier:
                keyid:4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e3:47:51:1d:82:3f:f7:0c:a8:67:bf:ce:43:f1:e7:b2:56:
         73:9c:ca:30:7f:1a:6b:cb:8d:a0:f6:97:19:e2:23:8d:c1:9e:
         8a:87:ee:41:94:c6:a3:a5:24:70:3f:b4:50:0e:5b:f3:79:05:
         51:31:c0:b4:ca:13:d2:b8:8c:bc:9c:cc:a7:4b:1e:c7:a1:b1:
         5b:eb:b7:c1:9d:bc:dd:44:76:13:4e:13:d5:dc:5c:e4:ef:eb:
         8b:11:d8:18:c4:4b:f0:a3:d1:20:97:18:00:e1:65:b9:8a:b1:
         de:eb:6d:94:d3:55:e2:60:15:49:45:09:63:2c:6a:e3:1c:89:
         6e:56:bb:6b:4f:93:83:79:c3:3d:e5:fd:b1:89:98:eb:e8:46:
         7f:ff:ff:e2:17:af:3a:99:c4:de:78:62:47:1b:61:b3:fa:23:
         37:13:18:6d:26:5f:66:0a:23:2c:9a:a2:f6:a0:d8:d4:33:64:
         26:d5:78:15:f1:ab:f3:de:7e:eb:b7:9f:77:8c:e6:8c:98:10:
         71:a4:9e:79:c6:0b:05:85:7b:ce:da:e2:a7:1c:a0:b6:dd:e1:
         63:b8:12:ae:4d:c7:bb:b8:cc:a8:1b:fe:ef:ac:d3:09:98:78:
         d3:ff:92:f4:a0:8f:8a:d6:1f:5b:05:bf:3f:f7:53:c6:3c:65:
         e3:4c:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:21:55 2025 by rpki-client