Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
File:                     X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft (raw, json)
Hash identifier:          L2gErkoBUTdSWzIwnGAaouwYzlLqTAZC6wNk/CpYzUU=
Subject key identifier:   07:2A:44:42:CA:EB:F2:81:E3:2E:83:A3:BC:83:87:11:EB:9C:2C:1C
Authority key identifier: 5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
Certificate issuer:       /CN=F362A252AF/serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
Certificate serial:       03F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
Manifest number:          03F1
Signing time:             Thu 13 Mar 2025 02:08:36 +0000
Manifest this update:     Thu 13 Mar 2025 02:08:36 +0000
Manifest next update:     Sat 15 Mar 2025 02:08:36 +0000
Files and hashes:         1: X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl (hash: WK71kXtBqi72eANZ64leKPPiBcT/9hkDdOSg3K1azvw=)
                          2: 07EE873A020211EDAC199783F1222468.roa (hash: YfCMAg3Y9dxZRfFftpeSFNVqy74lmtcSUOaH6LHRzXE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Mar 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A252AF
        Validity
            Not Before: Mar 13 02:08:36 2025 GMT
            Not After : Mar 15 02:08:36 2025 GMT
        Subject: CN=67d23e24-4b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ed:75:d2:f9:0a:ba:36:12:02:8b:85:57:dc:
                    ae:81:6b:29:3d:64:be:26:40:8f:d6:c6:2e:76:99:
                    42:db:de:9b:f4:0a:74:0e:ec:f3:6b:22:0c:8a:cd:
                    1b:e3:fe:2b:c0:db:76:af:ec:58:c3:4b:ac:0e:17:
                    1a:a2:d0:2c:01:72:c8:a9:77:d2:81:39:6c:7e:67:
                    c0:ad:20:1b:c3:09:cb:5e:fe:6e:db:8b:bf:08:83:
                    bd:b2:05:71:a0:ca:60:60:f2:6b:46:83:b4:1b:2c:
                    09:51:40:aa:ee:ed:ac:20:45:dc:b7:0b:1e:c8:cb:
                    1e:f6:32:73:6c:5d:97:ba:ab:4d:6a:64:13:b5:ef:
                    27:f9:09:91:f3:7e:df:f6:05:11:0e:4a:49:19:e7:
                    91:61:25:e9:66:bc:19:fb:13:96:45:55:36:89:ff:
                    25:d4:44:e6:d0:02:2c:09:f4:ea:74:c0:74:bf:4b:
                    bd:b3:78:29:1c:24:bf:d2:50:66:36:74:7b:d4:04:
                    28:9f:0e:a4:85:22:a6:97:2c:a9:e8:21:d3:08:e0:
                    ec:b4:bd:80:ec:1a:3d:59:7a:2f:49:d8:20:dc:08:
                    01:17:7d:08:52:03:9c:bc:32:a4:44:bc:c1:1f:2e:
                    16:3a:b9:56:b2:d6:cc:fb:79:32:73:58:25:d6:66:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2A:44:42:CA:EB:F2:81:E3:2E:83:A3:BC:83:87:11:EB:9C:2C:1C
            X509v3 Authority Key Identifier:
                keyid:5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6c:63:97:e4:46:58:7a:85:2f:09:74:df:7d:d2:2b:43:10:
         0c:ae:39:c8:91:f3:3b:24:4e:83:da:0b:25:9c:9d:42:79:0e:
         6f:72:73:f1:49:f3:92:17:12:01:7c:ce:15:5d:3c:d9:d0:a6:
         20:15:b9:14:94:8d:80:c9:cd:24:a2:77:23:c8:7e:dd:84:dd:
         48:8b:7f:61:83:c5:12:a0:88:56:96:c5:b4:06:b9:86:6a:4e:
         31:f4:42:67:b8:0c:e1:24:f6:14:c3:97:0b:1d:3e:24:6d:c8:
         3c:29:ec:2f:7c:58:2c:8a:18:88:d5:a1:a6:01:09:bf:c4:bc:
         2e:b6:64:f5:96:99:4b:f8:29:3d:1c:7a:b9:21:ac:19:6c:6d:
         97:03:66:9b:ec:7d:6a:7e:05:1c:6b:91:33:c7:7d:66:f8:72:
         21:bb:69:4e:86:82:eb:6c:93:55:16:47:af:8a:19:a8:83:0b:
         e6:74:4d:6e:26:60:fd:3f:cd:79:32:25:3a:a2:81:3d:36:67:
         dc:ed:9f:4a:10:d3:aa:84:b4:b3:d8:11:12:c9:a0:78:84:b5:
         40:bb:cc:c5:c4:06:24:5d:a0:86:b9:7a:32:c1:a8:ee:d3:5e:
         e0:70:4c:bc:31:0a:13:5d:44:35:a2:51:d4:2e:a2:8f:fb:49:
         ae:64:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:52:49 2025 by rpki-client