Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
File:                     RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft (raw, json)
Hash identifier:          MzSjPD0GA98vz7PR01Bqp158FDsAQiYgBWRp0xh5nfs=
Subject key identifier:   7C:B7:3C:3C:81:70:18:8E:C7:42:36:67:37:A9:C3:27:EE:EF:21:C0
Authority key identifier: 45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2
Certificate issuer:       /CN=F36E3941AF/serialNumber=456931501964CDB884B1475B56D68F3069C22AF2
Certificate serial:       0290
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
Manifest number:          0289
Signing time:             Mon 05 May 2025 04:02:42 +0000
Manifest this update:     Mon 05 May 2025 04:02:41 +0000
Manifest next update:     Wed 07 May 2025 04:02:41 +0000
Files and hashes:         1: RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl (hash: yapJ5qR3fIvHRnP6gEsgZ00hr3mpAeEiqtVAk9q+ZK8=)
                          2: 0C2FE94C570611EEAC1023344AD9E6FC.roa (hash: 7/VCkuO1MJrUrePvzuQCDljF/ayH1j149oaeTB6AkuI=)
                          3: 90DFE62C13B311F0B457F24A762E951A.roa (hash: F0Iu3tARZ4V2QdTChm0buYcD4/1ZoSlFs0g6nMo5b0Y=)
                          4: 1B18370013B311F0AC6E944A762E951A.roa (hash: NVMBrbFJ6GO3CdHpjCKo/lPShcbNb+afYHl6HdgnJCI=)
                          5: EC716680DFF811EFADCBE781762E951A.roa (hash: oPKoX17XBcVWDruW8njPRytKKsu2yxLVq+E1bf3Vds0=)
                          6: 90BC8EA4FEA911EEA69C406E017001B1.roa (hash: UwU5AHQOAS7CU+i+ADd/wfQ4IXSkFtvjT7nzo/QGiMQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 04:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3941AF, serialNumber=456931501964CDB884B1475B56D68F3069C22AF2
        Validity
            Not Before: May  5 04:02:41 2025 GMT
            Not After : May  7 04:02:41 2025 GMT
        Subject: CN=68183862-00a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:bc:f9:bf:70:61:9a:e0:da:08:97:71:88:
                    3c:46:54:7b:49:2e:cf:df:25:85:5b:45:16:9e:be:
                    7a:39:c6:78:b6:f9:20:ff:cf:71:af:5d:cc:93:08:
                    74:de:9e:06:cc:74:da:26:31:ed:4a:b9:9d:e0:f6:
                    83:b2:e4:ef:3c:ce:4e:ea:cf:01:2c:b2:96:cc:cb:
                    c8:fc:40:47:ea:d9:0e:25:6c:de:aa:96:15:39:d7:
                    57:9d:7f:da:a3:c8:a3:1a:34:ca:79:20:cd:89:cb:
                    2d:9a:27:fe:7c:ea:b1:0b:04:bd:bc:1a:46:9e:47:
                    dd:4a:fd:85:40:f0:fc:65:5f:78:21:eb:8f:c1:17:
                    53:dd:f7:ae:34:cf:94:be:21:99:a6:95:ad:bb:1f:
                    f4:80:22:58:9c:5b:df:cb:dd:4e:66:28:b6:4c:55:
                    b1:26:aa:56:ec:ca:48:43:fe:c5:86:f3:fe:ca:a5:
                    ae:ff:19:75:20:0d:46:69:3e:17:8d:fb:56:1f:c6:
                    c5:19:7d:cd:93:9c:7a:4a:eb:14:bd:7d:53:28:15:
                    83:de:44:9b:ec:4f:89:b2:da:87:48:b8:72:cb:b0:
                    53:36:fe:9b:7a:3a:1a:d4:2a:92:dc:1a:33:52:6c:
                    bd:c5:a5:40:da:61:4b:ec:63:db:61:e4:74:18:10:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B7:3C:3C:81:70:18:8E:C7:42:36:67:37:A9:C3:27:EE:EF:21:C0
            X509v3 Authority Key Identifier:
                keyid:45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:c0:86:9f:35:5a:28:19:cd:8d:ab:1a:7d:08:23:db:80:29:
         6f:6a:80:6f:3a:c5:2a:72:74:2f:8e:ff:c8:5c:d3:d4:02:f5:
         96:7c:f4:a9:45:2d:9c:96:82:56:0f:06:c4:21:7c:9b:ab:c5:
         b6:84:44:b7:e1:67:78:37:94:60:c0:49:95:8f:7f:5e:25:c0:
         3e:85:3f:f3:f8:d3:23:c6:e2:b3:b8:23:11:70:16:52:34:59:
         66:3e:ad:ca:d0:47:81:c6:15:11:bc:db:c7:41:44:33:83:69:
         ec:1b:98:59:5c:fd:24:71:6f:3d:3b:7f:43:2e:41:bd:0a:82:
         c5:f0:93:5a:21:ea:eb:c8:61:ff:06:d7:dd:3a:56:0a:1b:c0:
         3c:4a:ae:e0:34:2b:49:2e:ff:f7:cb:27:6c:88:34:9b:c1:f1:
         b2:ae:5f:20:47:e4:45:55:a6:a7:0c:e2:2a:82:a5:b3:0e:a3:
         92:d1:f3:27:ae:6e:32:f5:a0:f5:19:88:45:b6:5a:35:5c:ab:
         37:de:7f:24:a7:52:f8:ff:c4:9c:eb:c6:b9:fe:73:da:aa:3a:
         da:a6:6a:67:e5:fd:de:67:ab:32:ce:b5:d4:c6:b2:05:1f:f4:
         28:54:b1:5b:ed:46:a9:3e:00:91:70:80:8c:54:11:1e:0d:81:
         d1:24:12:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:45:57 2025 by rpki-client