Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
File:                     5GfUsiPAgVQKkfIRfW5UihuCiew.mft (raw, json)
Hash identifier:          URGANLTu4Tvl8nHw6S/Ze+tkpaHv+QiMY3cRgVIJqTY=
Subject key identifier:   E0:CA:B3:3C:9B:C7:F6:E4:66:34:F3:0F:B2:06:D2:C9:8A:28:1C:D1
Authority key identifier: E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
Certificate issuer:       /CN=F36DBA67AF/serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Certificate serial:       0450
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
Manifest number:          044D
Signing time:             Sun 27 Apr 2025 02:56:32 +0000
Manifest this update:     Sun 27 Apr 2025 02:56:31 +0000
Manifest next update:     Tue 29 Apr 2025 02:56:31 +0000
Files and hashes:         1: 5GfUsiPAgVQKkfIRfW5UihuCiew.crl (hash: 9zS4nFN9xos0M/NYohde2IkQ7+BbK6efzhfhhZdzVGo=)
                          2: 52526144E26C11EC955D66B3F1222468.roa (hash: wsdzu4KpztjrJvczumWwqzotF/Rua7W27u+H+9K+kyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBA67AF, serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
        Validity
            Not Before: Apr 27 02:56:31 2025 GMT
            Not After : Apr 29 02:56:31 2025 GMT
        Subject: CN=680d9cdf-ed44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:99:34:8a:48:0f:4c:51:c6:0c:77:88:b9:
                    57:bb:1e:59:c0:40:77:05:07:ec:40:67:c8:23:70:
                    21:30:a9:97:12:b4:fc:bf:2d:1c:fc:4c:da:6f:12:
                    7a:08:a6:5d:2b:be:62:95:83:97:7f:da:17:bf:59:
                    d1:c2:bf:a2:bf:bc:d8:49:94:57:9f:62:83:01:70:
                    74:a5:12:44:fd:58:23:44:e3:e4:de:c0:c9:b8:c2:
                    6c:38:66:c3:2f:08:9f:5e:a5:ae:3b:5f:b1:4f:55:
                    69:3f:5f:72:8d:97:02:b7:6d:0b:d6:89:7f:8f:ab:
                    90:9c:5b:a7:e5:68:36:30:ad:a4:53:0a:9a:4f:0d:
                    53:d1:d3:ed:d9:db:1c:b2:13:7b:c4:5b:94:93:2e:
                    ed:f7:3d:3a:7a:d2:2c:05:2f:e6:79:14:57:1e:e9:
                    9f:b7:81:35:2f:3a:97:3f:fd:8c:8b:41:e9:29:d6:
                    99:2d:60:b9:07:04:58:bd:01:de:ed:8a:3e:02:7c:
                    21:9d:ae:76:e8:7f:d7:cc:5d:e5:28:4d:52:e8:bd:
                    39:db:c2:32:1f:b5:11:4f:cf:fe:58:24:a0:18:90:
                    97:66:a0:44:a4:85:7a:b1:a7:7b:09:55:7a:03:0f:
                    c4:88:56:44:f0:17:76:d6:cd:e7:58:af:2f:9b:54:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CA:B3:3C:9B:C7:F6:E4:66:34:F3:0F:B2:06:D2:C9:8A:28:1C:D1
            X509v3 Authority Key Identifier:
                keyid:E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4c:f9:6f:d4:c1:8d:6e:f1:b5:1d:91:6f:72:25:24:2a:7c:
         4d:78:c3:35:f8:22:0b:41:6b:79:91:97:18:7d:f7:d8:41:93:
         08:cc:0c:c8:ed:d3:a8:1c:79:b6:e1:2a:f3:f9:81:05:41:28:
         d6:ef:3b:46:d1:6e:4a:40:bd:9a:35:a4:98:5b:a2:47:7d:9e:
         b3:cd:8a:77:ec:ec:25:ab:81:14:93:f2:24:a5:dc:02:6e:4d:
         ae:0d:7e:2e:29:2f:d2:5b:e9:d9:18:2c:e5:f3:69:3d:eb:bc:
         59:ad:86:80:03:57:32:48:3b:85:c5:8a:63:eb:77:81:1f:60:
         f3:2a:26:a3:8a:65:15:27:2a:f8:9b:c7:24:cf:7b:e4:e4:47:
         32:7b:22:c2:fe:b4:c0:a5:40:ed:5b:a4:7f:d3:21:1f:c2:e8:
         5c:bc:30:1a:ac:3d:9d:19:8d:58:4e:dc:aa:5c:4d:b8:99:c5:
         3a:84:0f:0e:a5:7d:0b:a6:08:16:2f:48:07:a8:22:35:44:7f:
         5c:aa:c9:63:38:80:6b:1d:b2:61:6d:fa:f4:e8:f3:cf:61:68:
         e8:ca:aa:4b:61:1c:8b:f1:ae:35:e0:3b:e0:ac:6b:15:23:03:
         3e:de:b8:7c:01:51:bf:34:50:86:70:4a:89:b4:e3:eb:b5:39:
         09:ab:fa:6b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REJBNjdBRjExMC8GA1UEBRMoRTQ2N0Q0QjIyM0MwODE1NDBBOTFGMjExN0Q2RTU0
OEExQjgyODlFQzAeFw0yNTA0MjcwMjU2MzFaFw0yNTA0MjkwMjU2MzFaMBgxFjAU
BgNVBAMTDTY4MGQ5Y2RmLWVkNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4bpk0ikgPTFHGDHeIuVe7HlnAQHcFB+xAZ8gjcCEwqZcStPy/LRz8TNpv
EnoIpl0rvmKVg5d/2he/WdHCv6K/vNhJlFefYoMBcHSlEkT9WCNE4+TewMm4wmw4
ZsMvCJ9epa47X7FPVWk/X3KNlwK3bQvWiX+Pq5CcW6flaDYwraRTCppPDVPR0+3Z
2xyyE3vEW5STLu33PTp60iwFL+Z5FFce6Z+3gTUvOpc//YyLQekp1pktYLkHBFi9
Ad7tij4CfCGdrnbof9fMXeUoTVLovTnbwjIftRFPz/5YJKAYkJdmoESkhXqxp3sJ
VXoDD8SIVkTwF3bWzedYry+bVE6TAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4Mqz
PJvH9uRmNPMPsgbSyYooHNEwHwYDVR0jBBgwFoAU5GfUsiPAgVQKkfIRfW5UihuC
iewwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCQTY3L0IyMDA5MUNFRTI2NzExRUNCQzgxM0ZBNUYxMjIyNDY4LzVHZlVz
aVBBZ1ZRS2tmSVJmVzVVaWh1Q2lldy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVHZlVzaVBBZ1ZRS2tmSVJmVzVVaWh1Q2lldy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REJBNjcvQjIwMDkxQ0VFMjY3MTFFQ0JDODEzRkE1RjEy
MjI0NjgvNUdmVXNpUEFnVlFLa2ZJUmZXNVVpaHVDaWV3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArTPlv1MGNbvG1HZFvciUkKnxNeMM1
+CILQWt5kZcYfffYQZMIzAzI7dOoHHm24Srz+YEFQSjW7ztG0W5KQL2aNaSYW6JH
fZ6zzYp37Owlq4EUk/IkpdwCbk2uDX4uKS/SW+nZGCzl82k967xZrYaAA1cySDuF
xYpj63eBH2DzKiajimUVJyr4m8ckz3vk5EcyeyLC/rTApUDtW6R/0yEfwuhcvDAa
rD2dGY1YTtyqXE24mcU6hA8OpX0LpggWL0gHqCI1RH9cqsljOIBrHbJhbfr06PPP
YWjoyqpLYRyL8a414DvgrGsVIwM+3rh8AVG/NFCGcEqJtOPrtTkJq/pr
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:33 2025 by rpki-client