Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File:                     62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (download)
Hash identifier:          7bK1PSGd+n2zm2IYnZsRMJLB6ovgjcW33nB4MaKoQoI=
Subject key identifier:   7E:B7:72:D5:F5:33:56:44:D3:82:49:9F:0D:FF:6B:24:DE:05:9F:7D
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer:       /CN=AfriNIC-Root-Certificate
Certificate serial:       32
Authority info access:    rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access:      rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest Number:          A9
Manifest valid since:     Thu 26 Jan 2023 13:25:09 +0000
Manifest valid until:     Thu 02 Mar 2023 13:25:09 +0000
Files and hashes:
    1: afrinic-ca.cer
	hash y3gl7b7nJTLjo0n3ArdRaGuYrLPIf0RAgAqSMIFVZyc=
    2: apnic-to-afrinic.cer
	hash B6w5P1mkoNyJtM99GfGLaaKkGfSkQ6+4eC4tPijBLyM=
    3: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
	hash 6/0xLG4PlP0cgKtGLKlNzXH5hnSo5NWhl9o8xBbcvFY=
    4: arin-to-afrinic.cer
	hash wmJV3qcwiPcLtEMLBcvvyjs4V1Lz690bK3b8cv5v8F8=
    5: lacnic-to-afrinic.cer
	hash Sy8MEd5jIqTCI9TMKGF+hPRHpJvcRWt/XeBBAdGw3Zc=
    6: ripe-to-afrinic.cer
	hash 64eh2w7qQrFQVPaQrRJ4kA83gUgE3EDvm0D0AWHCXHM=

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AfriNIC-Root-Certificate
        Validity
            Not Before: Jan 26 13:25:09 2023 GMT
            Not After : Mar  2 13:25:09 2023 GMT
        Subject: CN=63d27f36-2649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:75:3a:49:72:c7:4f:41:de:17:fd:da:f8:
                    61:1f:3a:4d:3b:31:89:49:ac:10:55:4a:d9:fc:68:
                    04:a5:ec:3e:24:c9:9c:40:ba:12:67:3d:ff:36:44:
                    0a:3c:c5:72:a4:83:90:a9:3b:55:21:3d:05:46:5c:
                    ee:6c:f3:1d:f2:09:ed:6a:ad:1a:2d:e2:bd:a1:d2:
                    25:90:f9:7d:77:d5:23:86:12:d7:a1:86:2b:4d:bb:
                    24:97:1d:17:0e:a7:56:ce:94:4f:a2:ba:e4:67:1c:
                    d9:9b:fa:60:f0:f1:c8:01:61:0f:27:0d:01:45:05:
                    e8:80:40:f6:c7:14:79:e6:ee:fc:91:2d:81:94:92:
                    9a:cf:45:73:61:6b:cd:f7:56:7a:9c:75:14:be:eb:
                    93:b6:10:7c:e8:92:ed:4b:fd:47:67:b5:c2:1f:0a:
                    1a:32:ea:e1:aa:a4:74:6e:6e:8f:f0:77:ef:96:4f:
                    de:6b:c9:09:51:a2:f4:a2:91:f9:7c:d2:21:54:0b:
                    f3:ef:07:8b:d0:99:0e:f1:b0:a1:9f:b1:16:a9:f7:
                    db:18:af:be:15:4d:a9:cc:1f:28:eb:f6:04:c1:b9:
                    bc:8f:76:b5:c0:92:4f:3a:96:3b:e9:b1:87:43:3e:
                    5d:41:b6:5a:e4:37:bf:1b:6d:f1:6d:e4:8b:27:fc:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7E:B7:72:D5:F5:33:56:44:D3:82:49:9F:0D:FF:6B:24:DE:05:9F:7D
            X509v3 Authority Key Identifier: 
                keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f3:90:b4:6f:ca:d0:e7:e5:9a:da:00:4c:37:1b:33:8c:03:
         4b:a6:a9:f5:c7:2c:26:5d:d5:83:8f:31:11:04:db:c5:a3:31:
         81:67:82:8b:92:46:94:3c:88:7d:97:a2:12:63:53:a4:c2:e1:
         a6:61:5d:44:37:a3:11:2a:c8:b9:f1:cf:2c:57:44:ac:cb:b6:
         65:99:32:4b:6a:26:dc:1d:28:1f:e9:cc:07:23:3e:c6:82:32:
         91:c2:6d:58:e1:4b:b3:2e:c1:4b:48:eb:ba:58:23:b5:13:08:
         a4:86:85:86:be:43:1d:3a:02:f9:56:59:e2:b5:27:f2:95:a8:
         a2:35:c2:a1:df:a6:fc:1c:dc:ae:52:0b:f4:f2:f2:fe:79:04:
         4a:5e:0e:3c:10:c2:3b:8f:94:d9:d3:38:cb:2f:2d:88:cf:af:
         11:e4:09:cb:9e:42:21:1a:11:87:13:91:1d:71:8c:e3:9e:8f:
         d5:34:91:fb:25:b0:7e:f2:4b:56:b3:12:cd:7a:9e:9d:93:1d:
         0c:12:0d:1d:46:75:17:0b:d8:38:8e:c3:43:3a:e9:bd:d9:d4:
         0d:bf:48:2a:1c:b2:51:cd:58:db:44:d3:77:ae:26:41:7a:46:
         94:cb:e6:1d:2b:2b:fb:a9:61:7a:c4:69:64:7d:18:36:3a:0e:
         6a:e6:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 31 03:04:17 2023 by rpki-client.