Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
File:                     Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft (raw, json)
Hash identifier:          oPqe5dumHikHyan5Noe+egiWwv/+ScwUnt2XmQ642tg=
Subject key identifier:   CD:B3:EF:D3:3B:10:E8:48:C9:64:8F:88:52:BE:FC:0D:FB:E3:C6:E5
Authority key identifier: 26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44
Certificate issuer:       /CN=F36E4A6EAF/serialNumber=263ED1E56140214B1B2EBFB55667A67CE5594644
Certificate serial:       03C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
Manifest number:          03C3
Signing time:             Mon 28 Apr 2025 03:21:55 +0000
Manifest this update:     Mon 28 Apr 2025 03:21:54 +0000
Manifest next update:     Wed 30 Apr 2025 03:21:54 +0000
Files and hashes:         1: Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl (hash: wsR18lIXTnmMYQPDNc1zCuFb6HPe3zcVAUJXDBtUsIA=)
                          2: B6E3EFEC4B2B11ED8B51B99DF1222468.roa (hash: SeEZMep8qUp7m/jfkKAlult6v7B0lE6Bk41ZD/YO3Aw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4A6EAF, serialNumber=263ED1E56140214B1B2EBFB55667A67CE5594644
        Validity
            Not Before: Apr 28 03:21:54 2025 GMT
            Not After : Apr 30 03:21:54 2025 GMT
        Subject: CN=680ef452-f977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:b8:f7:e2:90:aa:8c:3d:e4:0f:86:9b:e4:
                    2e:75:e2:a5:8b:aa:74:66:67:8a:51:2b:85:21:e5:
                    d9:d4:8d:e8:f6:24:a8:db:f8:3c:c0:68:0b:3c:fa:
                    ef:08:5f:37:ea:f8:5d:22:8e:db:50:4c:f1:45:18:
                    14:64:44:78:e8:74:f4:9c:3f:e7:44:4f:c0:78:a4:
                    e7:e9:f6:41:4e:a4:b4:8c:9e:4b:3d:27:36:f4:c5:
                    70:4c:fd:ea:18:5d:b1:e6:80:32:44:83:a9:02:c7:
                    8a:2c:ea:54:eb:90:34:23:75:13:a7:bc:b1:7e:b4:
                    a9:f9:b0:c6:00:94:ef:71:b9:ec:d6:2d:21:ce:42:
                    25:3d:82:03:8d:26:02:8d:1a:77:e4:b7:bc:ec:dd:
                    a1:79:17:6f:f0:59:d0:de:f3:cd:0c:71:b1:53:40:
                    1c:09:05:ab:df:b4:91:d1:55:16:a7:02:f9:cd:60:
                    1d:b3:89:dc:8b:45:b4:38:af:f1:b8:54:29:52:0a:
                    2e:fe:ca:c6:e5:88:df:be:6b:fa:cf:51:1c:66:6d:
                    89:3d:30:ee:e0:81:89:7e:ce:16:ed:ba:b8:16:60:
                    89:74:a0:1d:f3:e5:10:51:43:12:ae:ad:d1:0f:51:
                    34:85:9e:2a:5b:4d:02:28:6b:c9:77:d6:92:39:6b:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B3:EF:D3:3B:10:E8:48:C9:64:8F:88:52:BE:FC:0D:FB:E3:C6:E5
            X509v3 Authority Key Identifier:
                keyid:26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:b0:7e:7d:1e:17:ae:dd:23:0b:bc:d2:20:06:36:df:09:
         a6:5f:13:b6:89:fb:cc:67:43:d5:47:aa:de:db:f5:90:55:74:
         2d:ce:c4:60:f5:c1:47:13:08:fd:a1:e8:f2:1d:f3:82:0a:e8:
         1b:da:88:d6:d7:f2:fb:36:de:2d:c4:12:c5:de:2d:10:ba:af:
         93:15:a6:06:44:63:8d:3b:4d:34:91:13:94:b2:05:a7:f3:a1:
         60:ba:f9:55:fc:17:af:a0:68:e2:50:e8:72:68:d6:ad:4a:c8:
         0c:35:1c:37:1d:f1:93:cf:cf:e2:2a:87:b8:80:94:0f:13:1c:
         26:bc:32:e2:8b:03:ba:a9:9d:bd:82:83:df:4d:ec:39:21:75:
         e7:8a:33:1e:f2:29:fd:51:33:7f:a7:04:b4:57:d2:bf:df:34:
         db:94:88:77:d0:7d:d4:3e:ba:2d:e6:40:52:34:ea:76:5f:ee:
         3d:4b:83:d9:7a:80:af:54:1c:cc:ad:f4:80:01:25:ba:57:42:
         10:2f:63:5a:7d:33:39:93:02:7e:f9:43:f8:07:b9:5b:34:cd:
         09:6d:66:25:0b:7c:6b:b5:50:7a:58:ff:e2:23:c6:d1:f6:92:
         36:83:89:0a:0b:8d:46:85:ac:ab:25:15:45:6b:a3:62:1e:0d:
         83:27:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:26:26 2025 by rpki-client