Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
File:                     MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft (raw, json)
Hash identifier:          +Dr5L5VES6IWVeWky4uew+AdD/Sp3aaHnSla0hUVjvQ=
Subject key identifier:   60:6A:20:9A:D5:E9:02:07:C2:BC:EF:8C:29:77:6E:2A:72:09:F8:87
Authority key identifier: 31:3C:BF:EF:72:A4:26:B0:47:88:4E:07:4B:B1:BB:0B:02:FC:56:49
Certificate issuer:       /CN=F362412ERI/serialNumber=313CBFEF72A426B047884E074BB1BB0B02FC5649
Certificate serial:       2B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
Manifest number:          29
Signing time:             Fri 11 Apr 2025 03:27:35 +0000
Manifest this update:     Fri 11 Apr 2025 03:27:35 +0000
Manifest next update:     Sun 13 Apr 2025 03:27:35 +0000
Files and hashes:         1: MTy_73KkJrBHiE4HS7G7CwL8Vkk.crl (hash: PnRfWODJFb7vufpk4CXbP5I15IBMCYFG5c8B4nf2Mcg=)
                          2: 26CEAFEEF9C211EF8BFA8A60762E951A.roa (hash: N5WFGVxirsRLfwzk7wqVUbAA2T7zj2v/qiYQhs/x+7c=)
                          3: 50A88FD8F9C211EF95A2B360762E951A.roa (hash: cr88gzng9AlrJw+Jt+AIyLDrpQJLkgx8iB8swVH4qZ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
                          rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362412ERI
        Validity
            Not Before: Apr 11 03:27:35 2025 GMT
            Not After : Apr 13 03:27:35 2025 GMT
        Subject: CN=67f88c27-c2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:f4:ec:f3:c8:fe:bf:24:b1:d3:b0:42:1d:
                    ca:0d:bf:d0:ae:c8:f4:5a:ad:d7:f7:7b:0b:07:94:
                    e6:5c:ef:93:40:ea:0d:e5:49:0e:7d:23:62:15:91:
                    42:1e:58:46:21:88:85:09:f9:a2:df:64:00:8d:35:
                    e0:72:3d:cf:ab:01:ad:07:47:43:97:16:c8:b2:f8:
                    68:12:f8:b6:87:1a:96:c2:13:db:00:ee:29:d4:5c:
                    8e:72:1c:0f:09:96:e4:d6:1f:27:16:47:e9:86:45:
                    51:04:ad:3f:31:43:f5:8d:6d:85:3b:5b:ca:98:b8:
                    a0:c7:32:fb:f9:45:b6:02:33:25:65:1d:70:95:61:
                    d2:1f:77:08:b9:07:0b:9c:ce:6d:93:b1:ce:2a:d3:
                    6a:36:33:65:31:59:5b:47:df:ea:90:1d:52:a8:e3:
                    12:f0:5e:9a:ce:9b:e8:ea:59:61:fb:97:cd:d8:12:
                    a6:d1:c2:70:20:de:3b:d2:67:36:64:b0:31:21:64:
                    ec:ff:d4:77:94:65:6d:7a:7c:00:e4:bd:46:4c:fe:
                    7e:0a:90:73:6e:f8:7a:35:a3:44:95:f5:44:32:7b:
                    83:d0:e6:f0:e8:06:0d:44:58:68:6a:ac:02:d2:17:
                    e0:07:d1:12:ab:58:e2:7b:c2:d8:f2:66:eb:73:43:
                    45:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6A:20:9A:D5:E9:02:07:C2:BC:EF:8C:29:77:6E:2A:72:09:F8:87
            X509v3 Authority Key Identifier:
                keyid:31:3C:BF:EF:72:A4:26:B0:47:88:4E:07:4B:B1:BB:0B:02:FC:56:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7c:37:f4:83:eb:b2:ea:9a:15:b4:5d:d9:4e:2c:6a:96:92:
         03:70:62:64:ba:6c:60:da:f0:8d:fd:ce:49:5c:be:58:38:6a:
         20:49:4a:08:f2:12:61:a8:a2:10:53:5e:b2:fe:ab:77:2a:9a:
         fd:e3:d7:b7:7e:2c:0e:f7:24:2a:64:26:dd:82:f1:0d:d1:a8:
         d3:62:8a:66:c5:c6:f7:81:5e:1f:69:c0:ee:ae:11:2b:15:01:
         13:ef:54:2b:7c:69:e6:6d:16:89:0b:06:a8:75:a1:5e:7b:e0:
         0c:74:95:33:4c:7b:40:fe:16:e9:c2:9b:9d:38:28:b1:be:08:
         b6:4b:27:c2:5d:c9:62:8b:a8:36:bd:56:58:9f:5d:9e:23:87:
         0f:60:06:bd:6c:2c:02:99:fe:4f:ed:51:c5:5e:d2:44:57:2d:
         86:58:c5:0d:c4:b3:86:11:9c:0e:e5:ab:fd:83:21:68:6d:65:
         54:9f:f8:11:57:76:09:3a:ea:79:95:48:fd:a6:93:2a:90:ab:
         c1:cc:a9:29:26:ac:e6:4a:d3:c4:02:84:3e:70:6a:48:f3:2a:
         1f:ed:02:67:09:28:f2:22:6b:71:5c:1a:ad:33:63:8d:06:42:
         a4:6c:5c:7c:2b:98:19:26:19:ec:11:02:b5:c4:0d:e3:fa:06:
         5e:69:45:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:24:46 2025 by rpki-client