Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.mft
File:                     T9QksefB0mEEkWonZM6OzkUivV4.mft (raw, json)
Hash identifier:          lMD2VWlmm91jK+KPrllaW5u/RfWROqzhh276KklY7oc=
Subject key identifier:   0E:32:D3:09:2C:87:20:12:6C:F6:45:32:19:9C:E1:DD:D6:3F:91:27
Authority key identifier: 4F:D4:24:B1:E7:C1:D2:61:04:91:6A:27:64:CE:8E:CE:45:22:BD:5E
Certificate issuer:       /CN=F36FD195AF/serialNumber=4FD424B1E7C1D26104916A2764CE8ECE4522BD5E
Certificate serial:       0450
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.mft
Manifest number:          044C
Signing time:             Sat 03 May 2025 02:58:16 +0000
Manifest this update:     Sat 03 May 2025 02:58:15 +0000
Manifest next update:     Mon 05 May 2025 02:58:15 +0000
Files and hashes:         1: T9QksefB0mEEkWonZM6OzkUivV4.crl (hash: w8Mh40eapOy316yxufBm2PN6wZ4NvX5vRZpOpBtUsgE=)
                          2: CF54421AE7EF11EC89F129B2F1222468.roa (hash: ajGWSHVkqmLc/f7cPeugVsqBMXMh0oKeDqay1n/CA3g=)
                          3: 23C75FD2114E11F096716753762E951A.roa (hash: HronqzA8u7pgcf2yTBTSIXAuIG0H4XHI632DcimDTOo=)
                          4: 2BF48062809511EFBA3DFF63762E951A.roa (hash: DIejCdSTY0WppTtS1iYIu/XX3//9llWktzdBuNfwANg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 May 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FD195AF, serialNumber=4FD424B1E7C1D26104916A2764CE8ECE4522BD5E
        Validity
            Not Before: May  3 02:58:15 2025 GMT
            Not After : May  5 02:58:15 2025 GMT
        Subject: CN=68158648-9060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:77:ea:03:73:9d:f9:89:7a:95:1d:91:c2:
                    7b:41:08:67:fe:99:7e:d9:17:7b:b3:42:97:6f:f0:
                    4c:70:9c:d4:83:4c:1b:4f:94:f4:37:7f:b9:84:e3:
                    98:38:b4:65:e3:c3:19:bb:ac:d6:a2:af:aa:fa:3a:
                    9d:73:72:7c:53:39:1d:ba:7d:e2:03:3f:dd:0a:5b:
                    aa:17:f5:1f:c7:1d:3c:9d:4d:2b:d2:de:27:f3:02:
                    0f:12:e5:6a:8a:6c:99:a8:f5:32:81:d5:c6:51:31:
                    f0:00:e2:b7:dd:77:b2:26:6a:36:2a:4b:b5:5d:71:
                    af:f3:7d:1b:10:80:57:6b:4f:3f:86:e7:cd:d2:45:
                    68:17:28:bb:e2:46:c3:c9:c8:09:5f:b1:05:bc:36:
                    04:09:2a:b7:aa:a4:01:c9:1a:fe:2d:99:9a:ea:ee:
                    21:16:bc:9e:d3:e9:2e:3b:a2:96:59:08:bb:0e:db:
                    10:6a:d6:14:ae:0f:b0:3f:01:a8:74:c5:22:9f:0a:
                    b4:52:c5:3e:8e:48:d4:68:fe:bf:d9:ca:76:82:d7:
                    4f:53:5b:1c:63:0f:46:39:66:30:e3:27:0c:fb:69:
                    46:6d:4a:70:c1:1a:af:de:b7:42:06:8b:a8:a0:7f:
                    b3:c8:07:fe:1d:6c:b9:9a:a5:cc:7e:7d:58:49:ee:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:32:D3:09:2C:87:20:12:6C:F6:45:32:19:9C:E1:DD:D6:3F:91:27
            X509v3 Authority Key Identifier:
                keyid:4F:D4:24:B1:E7:C1:D2:61:04:91:6A:27:64:CE:8E:CE:45:22:BD:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:fd:cd:e7:29:d4:88:f2:3c:da:b4:12:d8:a6:96:af:7f:
         fa:e3:dd:1f:95:71:fe:64:45:90:3b:96:01:ea:9b:21:60:52:
         59:c8:df:d5:a8:7f:ee:e1:b4:9e:e1:2a:9b:b2:2b:c3:ff:55:
         b4:4c:20:90:63:bf:91:64:29:15:64:be:5b:5e:32:2d:c4:5d:
         d4:bc:2a:ec:e5:92:0a:4f:8c:70:82:10:9b:c9:56:18:dd:63:
         85:12:ba:f5:c4:78:99:6d:0e:3f:7f:dd:58:81:e2:fb:1f:b5:
         c2:15:f5:11:a8:dd:0c:3e:66:3f:51:f8:53:4a:c3:e9:03:d1:
         c8:89:3f:0f:d0:b0:2e:71:5f:a1:23:98:41:99:24:9d:8f:37:
         66:b7:3c:78:31:95:ca:11:39:02:de:6a:51:b1:35:0f:05:82:
         39:f4:64:bd:63:f3:ef:b5:2b:98:84:56:93:42:fb:ec:69:6b:
         a1:b3:e3:27:bf:bb:a0:3f:3d:1c:01:4c:d1:7d:12:d2:48:5d:
         58:63:0f:09:2c:1f:3b:e2:ed:e2:06:e3:60:d5:a6:bd:06:ee:
         fd:e9:bf:30:98:99:3d:20:b2:80:2d:93:9f:99:3b:58:4c:94:
         59:2c:4c:b7:39:57:ae:10:18:8b:ff:6f:08:b2:b5:89:eb:bd:
         d4:d3:46:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:17 2025 by rpki-client