Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
File:                     1-l-xBu1iYDED-Sp42wBC8ABPTE.mft (raw, json)
Hash identifier:          VawbXPQBzONOE2VL0mm+BiSGFbQZBDkoOBn8V3mkoBE=
Subject key identifier:   4F:00:31:68:EF:22:17:96:64:A2:B8:CB:48:29:5E:EB:1A:B0:12:5D
Authority key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Certificate issuer:       /CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Certificate serial:       47
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
Manifest number:          45
Signing time:             Wed 05 Feb 2025 03:22:03 +0000
Manifest this update:     Wed 05 Feb 2025 03:22:02 +0000
Manifest next update:     Fri 07 Feb 2025 03:22:02 +0000
Files and hashes:         1: 1-l-xBu1iYDED-Sp42wBC8ABPTE.crl (hash: z28e9VyRnvhGaResrXE4laJRIygb9fc8QIBDcQn7HvU=)
                          2: FAE9132EBEE311EFA8C67594762E951A.roa (hash: 4V2xq+YhsqcDrEW6q5qpBpAI8sGhmeoDwb8giUJL3zw=)
                          3: 247867E4E27011EFA0A04798762E951A.roa (hash: +UBXwm2myeOTyr1l1PVQJ5MRdDqTlUZ0ucC+vd+kfcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361610CAF
        Validity
            Not Before: Feb  5 03:22:02 2025 GMT
            Not After : Feb  7 03:22:02 2025 GMT
        Subject: CN=67a2d95b-6786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:25:d6:91:0e:4b:ca:e9:95:29:4a:f4:d4:
                    d2:9f:55:e4:64:ab:4e:40:2a:d4:ac:d7:b8:25:d0:
                    b4:db:6f:64:f1:65:01:08:3a:c0:61:f3:a8:37:6b:
                    cc:77:16:74:91:de:d0:59:9a:08:54:8f:09:4d:21:
                    9b:a4:d4:9d:34:fc:94:61:a9:6e:35:3a:7f:c0:ef:
                    a5:6c:d0:cb:77:bd:c1:b7:0d:26:cb:db:7a:3c:10:
                    13:ed:81:ca:b2:33:48:6c:f1:21:c7:ad:6a:ed:08:
                    6b:f3:5e:61:ef:80:6d:8c:7b:48:02:44:e5:af:42:
                    e1:c9:3c:94:46:24:ae:af:23:1a:2f:cf:94:b4:5e:
                    13:75:cd:7b:0a:66:d4:07:32:7f:08:66:22:7b:6c:
                    59:ce:23:ea:c9:5d:9d:eb:1e:e9:36:1b:87:15:89:
                    5e:5c:5c:30:ca:7a:20:46:01:67:48:88:78:d7:35:
                    65:95:b7:00:8c:17:71:ff:98:2b:f7:7b:08:db:92:
                    b0:ea:7a:4d:bd:8e:96:e1:f3:0a:74:97:a7:89:d4:
                    c7:83:86:01:f4:f6:e5:06:66:6e:ca:fd:29:6f:d4:
                    0c:ea:06:1e:d2:9a:80:0b:90:b2:ec:f7:ce:3b:3a:
                    a1:39:c7:37:92:c0:8c:ad:07:0a:e8:d8:d1:17:82:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:00:31:68:EF:22:17:96:64:A2:B8:CB:48:29:5E:EB:1A:B0:12:5D
            X509v3 Authority Key Identifier:
                keyid:D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:cb:37:2b:d2:fc:cd:e5:16:c8:da:7d:38:14:3d:4f:79:60:
         c6:f3:90:77:cb:d4:36:15:4c:2a:61:cb:b6:ee:8a:c8:d7:1f:
         7c:20:da:9c:f2:63:cd:cf:8c:62:26:aa:29:32:07:7c:7f:5a:
         8f:26:db:e1:f4:d3:f9:3b:04:b3:8a:ab:88:7e:8b:62:75:8d:
         27:ab:25:59:87:79:d4:c5:90:e4:8b:42:82:05:27:9c:15:5e:
         b8:e4:7d:1f:f8:1d:8c:ff:cf:3d:5b:1d:3d:e4:d2:c2:35:29:
         00:a2:b5:48:22:8a:5c:9b:f8:51:23:ac:e3:90:0c:9e:f4:b4:
         66:53:56:8a:80:21:d7:a6:5e:29:d5:da:90:7e:b4:80:30:b0:
         1e:fe:56:d0:d4:13:c8:bd:21:e5:18:30:e1:c2:7b:e3:7c:7e:
         80:d5:73:98:3c:79:13:e8:35:44:e4:df:b7:24:f4:9e:84:e1:
         cf:3f:5c:87:ca:f7:46:67:b0:64:5e:46:d9:73:91:74:d4:34:
         f4:10:8b:17:a1:e6:3d:c8:95:45:be:21:59:19:6c:2c:30:fa:
         89:39:2a:ab:bd:72:25:c3:62:57:f5:50:59:74:15:01:74:9f:
         b5:5e:e4:e8:0a:e5:67:3d:fd:74:90:3d:c8:19:d1:62:92:62:
         86:47:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:01:29 2025 by rpki-client