Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
File:                     ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft (raw, json)
Hash identifier:          jjQ7uerqPi/iTuQzKg2I55XiDyIvYzlXGzUZQ5/Ro5A=
Subject key identifier:   A3:21:81:BA:75:69:2A:65:AB:61:E2:02:8E:FD:AE:6F:79:9F:08:79
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Certificate issuer:       /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial:       0245
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
Manifest number:          0234
Signing time:             Thu 01 May 2025 04:10:39 +0000
Manifest this update:     Thu 01 May 2025 04:10:38 +0000
Manifest next update:     Sat 03 May 2025 04:10:38 +0000
Files and hashes:         1: ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl (hash: x+u+yiFRHkX0IUIf31q4WefcpNWnw69Gfs1FoYhUv1w=)
                          2: 4EA7D32E53E611EF9B5BE56C762E951A.roa (hash: NtlpVvP6+zWzB8RFTth6ghNvN5nR/THSHfhDD9x2bP8=)
                          3: C1A1DD34BE5E11EE99164ABD775412E6.roa (hash: wvW9kZ5/AUNQWgKaGpjvpIVPHuqxftH9YadONSy7YnM=)
                          4: 757D2A34887711EE836A404E4AD9E6FC.roa (hash: +ZI3X/alavjG8hd5TUGXudmlVMdSEsoVpfbaqPGHQKA=)
                          5: A1BBDFB45BDA11EFA2803F75762E951A.roa (hash: B+/DOrNgATDNRMYx/JLMgJNXWHAPifjl6iw4sXJYoDA=)
                          6: D2F9CEC4BE4B11EE8D656598775412E6.roa (hash: Cxpb4VpHsS5nAkYLG5LF8Ro6WmVM8kJPPNxJ4wnGbyc=)
                          7: 75479C3CBE5711EEA57807B1775412E6.roa (hash: KJ78VQh/EaM4VrWU0qtdFJzJqdOESws+8hhBj0+/JkQ=)
                          8: 8804A9420EF611EF90E9CB4F017001B1.roa (hash: Ah/gC+WFiWi7Jlp6m9g/RNWVwD4e/UvuFekwBmptqnY=)
                          9: A8121FD29CFC11EF91E12A85762E951A.roa (hash: 40tq9RUAvjkX3eq2QoBMj2ZOuP4wwcDT4oeJUrXPD54=)
                          10: EC1D132E0D2A11EFB8F87A2D017001B1.roa (hash: Ly9LZH0Fh6E4ZtDar/abB8C31gGCVwPrBo7kMnb8boM=)
                          11: 0EF37AD45BDA11EF9E5BF670762E951A.roa (hash: 51koAiGBT4Qlz96Il2OYaGj869PU6MSFeqlPyjHqg1Q=)
                          12: 518CAA929CFC11EF95640782762E951A.roa (hash: OyktAYCtLdWaRz8aqABUtVcVPRFArgA2QV1t66oDcS8=)
                          13: 23292B7612C311EFB9087350017001B1.roa (hash: ljEIXCzMDkNC6MsSv3Wx80qJCOfaflJx6GdHSwJRefU=)
                          14: D265FEDE0BCA11EF917FA0F3007001B1.roa (hash: JnlsXUtJ6yRPF3xH5RBfKSof1yPWn25dJe2aCkd3Tug=)
                          15: 7F5635A2887511EEBFD443484AD9E6FC.roa (hash: ocQwdIyiszloWpRuczWxhp841V/qq4mP8+w57e47R8w=)
                          16: 3B419B887CAB11EFB49DDE4D762E951A.roa (hash: IQzn2Mmxf3299kc5c2KxlM3LEdiHGEsho1HI4seozUE=)
                          17: 88C005FAE86F11EEA0289955775412E6.roa (hash: 2xUGL17bO3ah/ni1p+4Y+DjG347crU5mRkFs3eTev0U=)
                          18: 566CE01C0BD011EF922BB41F017001B1.roa (hash: NJoaiPoqCsvM8uTcCsGcl3CIrYSjToxekiedssQBL9U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
        Validity
            Not Before: May  1 04:10:38 2025 GMT
            Not After : May  3 04:10:38 2025 GMT
        Subject: CN=6812f43f-9e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:d3:da:4c:80:ce:56:08:8e:bd:6c:7f:fd:
                    a5:b0:89:e4:67:06:7c:76:07:50:3b:a9:4e:d8:7b:
                    aa:7f:0c:b4:ca:9a:9f:72:b2:b7:9c:3e:5e:10:73:
                    31:fb:fd:96:6e:85:df:43:2d:b1:6d:fb:1f:50:9d:
                    6d:29:aa:6c:1d:d6:9f:74:a8:87:10:e9:d5:2f:c2:
                    71:95:93:06:34:34:d1:2e:fa:cf:ea:81:07:12:6e:
                    33:12:e3:0f:ef:1a:b9:50:44:75:10:ef:50:48:49:
                    ae:70:e7:c2:f2:74:9f:38:f3:4a:f1:a6:c5:d1:72:
                    b4:e4:74:e9:3e:f3:75:b4:bb:2b:df:8d:9d:e3:fb:
                    fa:a9:a1:ab:ee:34:81:34:52:de:a4:60:fe:f9:5c:
                    c2:cd:1d:43:69:c8:b8:64:49:a9:3d:ef:4f:6d:44:
                    f0:8c:76:1b:81:60:2f:37:97:f3:27:f8:25:ef:c3:
                    03:62:02:66:b8:29:fe:22:3b:ea:a2:78:c7:de:83:
                    5f:3e:a7:ee:d2:44:cd:43:ca:ac:e0:24:1a:77:da:
                    d3:9e:6c:88:a2:05:14:32:0c:15:57:c1:b2:a4:a8:
                    b2:b6:89:e4:5c:43:86:63:60:14:87:d9:eb:de:bb:
                    7f:7a:07:22:69:33:a1:fc:19:93:4f:c8:a1:1e:25:
                    3f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:21:81:BA:75:69:2A:65:AB:61:E2:02:8E:FD:AE:6F:79:9F:08:79
            X509v3 Authority Key Identifier:
                keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b1:92:b3:21:47:d6:5f:1a:53:91:a7:3b:6b:c1:c6:ce:f9:
         e0:e9:3b:66:1f:c6:6a:69:3b:90:6c:08:4c:c2:5d:82:f3:2c:
         09:63:b5:06:42:fe:dc:78:cd:af:eb:1a:ef:bc:13:e7:80:41:
         a3:ba:c3:f1:86:3b:2e:60:42:3f:9d:31:47:33:a7:c7:a5:b5:
         fb:f7:a1:42:9e:90:44:9e:c8:89:4f:cb:54:14:ca:84:b1:dc:
         b8:6f:a8:05:2f:95:ba:d7:09:c3:00:df:84:5b:51:dd:40:59:
         f4:83:eb:a9:7d:2c:7b:14:70:04:ef:ce:ac:76:5d:b1:b0:87:
         83:ef:af:d8:41:96:d1:2a:2e:f2:8d:8d:43:f7:98:80:28:d7:
         5b:12:b7:ae:0c:ee:18:f8:e4:f5:e4:fd:99:f4:80:b7:66:9c:
         65:27:88:dd:02:de:2c:c2:be:cc:1d:09:36:6f:b7:62:a8:0e:
         89:12:5c:2f:b9:52:21:24:a1:ea:5f:bb:52:50:8c:4e:ef:b0:
         94:5b:57:62:94:d2:87:a1:17:15:83:d4:8c:9a:59:9d:29:ec:
         da:b6:1c:8b:cd:c6:4a:d1:fb:54:e8:2a:6e:5f:c1:8f:e1:b1:
         74:70:c6:f4:7f:75:12:d7:4b:c1:c4:cd:27:d3:dd:2a:e1:31:
         13:06:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:52:40 2025 by rpki-client