Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
File:                     z9HOEVgucPjVG3hwclwV72fgxlE.mft (raw, json)
Hash identifier:          7wI83LyE9AAbPC9Jkf1drwz5VRKgecnhkneI7WeVHIU=
Subject key identifier:   A9:AB:86:16:7F:76:0C:94:6A:1D:9F:93:57:90:A5:84:5F:4B:71:E3
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Certificate issuer:       /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial:       0D98
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
Manifest number:          0D95
Signing time:             Wed 07 May 2025 01:01:39 +0000
Manifest this update:     Wed 07 May 2025 01:01:38 +0000
Manifest next update:     Fri 09 May 2025 01:01:38 +0000
Files and hashes:         1: z9HOEVgucPjVG3hwclwV72fgxlE.crl (hash: mqJ9PrktdFHSAr39atGUzp6fEqhzF3CVLQXCWWs+D28=)
                          2: 44FF457CB46311E58407FA55F8AEA228.roa (hash: B9WSKZRqziRr6GOCV6BDWegKxCtGmeVw42cvf6ryK9U=)
                          3: A17B340AB46311E59241EB56F8AEA228.roa (hash: 7FwQeUfCbVL0Bd2EXyoVC5y/xe6Lbd8u11SpNh5f5zI=)
                          4: F0D40794B46211E5A330CA55F8AEA228.roa (hash: t2nsrO2U23DwtiWKoe3fqAaOO4rdHwgErkagqsJpKHc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 May 2025 00:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3480 (0xd98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB4B4AF, serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
        Validity
            Not Before: May  7 01:01:38 2025 GMT
            Not After : May  9 01:01:38 2025 GMT
        Subject: CN=681ab0f2-7615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:75:61:18:43:0b:59:ab:9c:1f:3a:f5:f5:
                    3a:68:ab:45:87:12:6b:b4:ab:65:4d:e6:be:b9:35:
                    bd:53:85:69:4c:a8:00:2b:fb:24:e2:7c:0c:59:90:
                    b1:52:fd:7a:54:d8:d7:29:90:20:94:f6:a9:e2:66:
                    d5:39:ec:10:61:3a:8c:48:df:e7:6d:19:fc:0e:f9:
                    a6:3d:c7:df:bb:22:c9:69:6e:09:2f:40:a7:78:10:
                    52:3a:17:6f:c5:48:18:6d:39:96:f1:9d:17:57:03:
                    0e:c1:86:73:a7:b4:43:15:ee:f1:d4:70:48:9e:a8:
                    39:e4:06:e9:6e:cd:d9:17:d1:ff:b9:4f:9f:14:26:
                    6b:ba:fb:44:c7:e8:4d:22:5e:f6:b8:72:81:90:23:
                    d2:f3:0e:dc:05:cf:31:9c:98:6a:d9:2b:ca:cd:81:
                    cd:c5:dc:83:53:f3:e5:97:b8:b5:c9:b4:84:cf:d5:
                    e7:79:ad:c7:be:94:d4:f7:c8:2c:ec:55:f6:f9:62:
                    0e:3a:a5:75:50:27:1f:8d:ec:b5:dc:42:c1:b1:47:
                    2a:16:d1:12:6f:fc:a4:26:56:09:eb:77:88:3e:c0:
                    7d:8a:e5:be:8a:f0:d1:d3:4c:49:16:ca:eb:8b:4e:
                    be:2e:46:02:68:32:e6:b4:cb:eb:23:74:90:fa:81:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AB:86:16:7F:76:0C:94:6A:1D:9F:93:57:90:A5:84:5F:4B:71:E3
            X509v3 Authority Key Identifier:
                keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:20:22:42:91:27:0a:bc:4f:21:f6:2f:fd:07:9c:aa:ad:8c:
         c8:3e:7e:bd:76:68:97:1b:f3:ae:ec:12:0f:f7:17:72:1a:21:
         f9:76:8b:75:3d:67:8f:29:d9:92:64:5c:a2:a7:95:81:c5:c1:
         d5:68:d4:62:cc:59:cc:38:16:67:8f:e0:72:bc:44:a1:68:6d:
         bd:9c:8f:48:42:1d:62:e0:9f:76:76:f0:45:3f:33:e9:1f:06:
         4f:da:67:d3:2a:7d:5a:33:d0:36:21:c8:b7:c8:65:92:9d:b1:
         65:67:9c:f2:1d:4a:b5:72:d2:94:54:fe:37:9c:5f:25:59:4e:
         11:12:6e:46:d6:67:1b:73:b0:b1:34:1c:87:ab:62:8c:b4:24:
         0f:ce:63:dc:b0:75:eb:44:6a:f0:71:27:c0:70:3c:26:9c:75:
         03:b2:85:45:c5:40:f4:65:15:20:2a:4b:6e:a0:e8:92:5c:8b:
         3d:38:2e:70:17:9a:a1:2d:88:ba:53:39:00:fe:06:97:47:00:
         f2:ae:34:8a:1c:8d:79:1c:57:50:27:60:55:6b:65:55:f5:dc:
         3b:4c:1b:35:07:ec:1b:fb:26:3c:12:22:57:f4:51:ac:22:b7:
         7f:a1:d0:82:ca:6d:a2:07:d4:0a:91:28:f2:1f:f9:92:e6:81:
         44:28:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:18:39 2025 by rpki-client