Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
File:                     2GE7731yVWdaZKmo4qXSb98uXG4.mft (raw, json)
Hash identifier:          PIe9kEugGPIOZOrosWw4VqL/KxpXDC3NdPrLSQSDhmE=
Subject key identifier:   9C:F2:90:FC:4F:3D:7E:53:1D:03:83:08:6F:9E:6A:55:C3:4A:E0:9B
Authority key identifier: D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E
Certificate issuer:       /CN=F3615A48AF/serialNumber=D8613BEF7D7255675A64A9A8E2A5D26FDF2E5C6E
Certificate serial:       02B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
Manifest number:          02B2
Signing time:             Fri 04 Apr 2025 02:31:18 +0000
Manifest this update:     Fri 04 Apr 2025 02:31:17 +0000
Manifest next update:     Sun 06 Apr 2025 02:31:17 +0000
Files and hashes:         1: 2GE7731yVWdaZKmo4qXSb98uXG4.crl (hash: H7PiwKKRxZwxbAlEWvKi43UjQIesdxnzQ3XjvbE68F8=)
                          2: A4E38B880D4211EFBFAE0F6C017001B1.roa (hash: U373km8ThmQ4tEdHpVbSUiU0V187z85GTRJnfELwn7k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Apr 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AF
        Validity
            Not Before: Apr  4 02:31:17 2025 GMT
            Not After : Apr  6 02:31:17 2025 GMT
        Subject: CN=67ef4476-fdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:83:2d:47:7c:ac:d5:6c:30:ec:3e:3d:98:
                    fb:cc:3f:dc:40:a0:09:2a:ec:76:97:0b:e4:51:09:
                    40:51:f5:98:a1:32:1c:29:cb:c0:50:50:0b:fe:e8:
                    a6:63:00:09:89:de:ef:24:bd:dd:65:57:0b:c1:eb:
                    8a:31:df:37:3c:24:18:fd:04:22:29:e3:19:61:48:
                    1a:f3:45:d2:a8:67:69:93:3e:23:37:0e:96:b2:d1:
                    0d:cf:2e:ff:5b:7f:8a:9c:4d:e2:34:6c:c9:5c:13:
                    fe:ba:ad:bd:6b:e3:db:c6:ff:3d:88:eb:6e:c2:b8:
                    34:68:4c:df:e1:53:80:91:7f:f3:fc:a9:6d:44:be:
                    a1:2f:fb:42:89:0d:3f:83:6f:d2:45:34:01:cb:4a:
                    fa:a1:6c:02:fe:bb:37:3a:ea:d3:13:55:e3:ad:f0:
                    09:bb:32:b7:91:f8:4e:81:2e:8e:fe:9b:c6:56:0f:
                    3a:fb:73:04:39:1c:a7:87:ec:c8:48:6d:be:8e:30:
                    89:54:dd:70:3f:b9:81:2b:c5:3b:95:86:5e:f5:c9:
                    2a:44:e9:ff:6c:8b:4b:80:26:e8:3e:53:80:60:47:
                    ab:57:49:87:c1:3c:fd:86:21:25:1d:97:4e:27:0c:
                    0c:19:22:3e:68:42:9a:76:47:0a:71:9a:0d:27:64:
                    57:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F2:90:FC:4F:3D:7E:53:1D:03:83:08:6F:9E:6A:55:C3:4A:E0:9B
            X509v3 Authority Key Identifier:
                keyid:D8:61:3B:EF:7D:72:55:67:5A:64:A9:A8:E2:A5:D2:6F:DF:2E:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2GE7731yVWdaZKmo4qXSb98uXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/460D3588043211EE9946265C4AD9E6FC/2GE7731yVWdaZKmo4qXSb98uXG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:68:a6:5d:d5:83:15:be:c3:50:49:ab:d6:ac:70:1f:0d:36:
         41:f9:04:4a:66:c9:27:e7:c5:c1:24:f2:e9:97:38:39:4f:e7:
         60:dd:61:5e:24:2f:4f:7b:f2:c9:03:8b:c9:9e:ec:56:21:be:
         54:6b:0d:91:d3:81:52:83:9c:26:84:3c:dc:57:ba:29:33:e0:
         ed:1a:d0:77:38:40:69:b8:d0:96:28:1e:64:9e:2e:45:3a:16:
         dd:13:70:d4:7f:92:36:66:c3:f9:c5:4e:25:a0:d2:b6:5f:57:
         63:31:ca:a0:2d:c7:9a:9a:8e:cb:0a:71:5a:22:f2:61:8e:03:
         59:46:a9:84:22:28:80:d7:e9:e0:2b:62:da:77:ad:c0:ef:1b:
         07:ff:f1:37:e6:2c:33:ac:00:d6:ec:28:1b:8b:60:44:f1:dc:
         6d:a1:4a:3b:9c:e1:24:3c:ff:5b:8d:4a:d5:c0:12:4b:f6:75:
         cc:ae:7e:1e:55:53:c7:6a:6b:2d:97:59:2b:71:3f:c3:ad:72:
         c4:05:32:f2:40:a7:27:cd:02:83:df:c9:fb:c1:6b:7e:8e:d2:
         37:33:1e:b1:6f:07:e4:f7:b9:b1:7d:af:06:7e:f5:43:01:9a:
         52:28:11:8b:a0:c7:60:d2:34:d3:6b:51:69:2d:b2:81:80:38:
         47:e0:49:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:43:18 2025 by rpki-client