Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft
File:                     bP0IdUOMviDDICpMU82sI8ThNz8.mft (raw, json)
Hash identifier:          lSCMGuJkuOHY+UiiKmDM3s50LgekbHvDiSLbLbI5qpM=
Subject key identifier:   DE:50:A8:EA:3A:F9:7A:53:95:83:D7:86:11:0D:0D:16:63:A4:D7:C6
Authority key identifier: 6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
Certificate issuer:       /CN=F362CE41AF/serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Certificate serial:       02FA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft
Manifest number:          02F5
Signing time:             Fri 04 Apr 2025 02:28:16 +0000
Manifest this update:     Fri 04 Apr 2025 02:28:15 +0000
Manifest next update:     Sun 06 Apr 2025 02:28:15 +0000
Files and hashes:         1: bP0IdUOMviDDICpMU82sI8ThNz8.crl (hash: Zx8cTz7+GhJRol3B/ocHsVHVAuAp33bcZTJwBgkUaZ0=)
                          2: 5A2E307A36A511EF9A374E85762E951A.roa (hash: 1bOt+FhFIXXisYLPLzrSXRkpo4OkPSIicQ17PtfC3mM=)
                          3: D069072436A511EFBA32B687762E951A.roa (hash: 03lNPTQwQftJf1QznRhoeaQyTujbp87gcHKQeK6kkpA=)
                          4: 919DA40036A511EFBF337885762E951A.roa (hash: YDoNSbdRbwVpvrX6CYt8JW+3OLrJQPRThugqNM9/C8w=)
                          5: FB2709E836A511EFB1B3CC89762E951A.roa (hash: gX6zzhnOMfXGJzs+U/OImYW4B+DHtOuToVDG/O96rSg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Apr 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362CE41AF
        Validity
            Not Before: Apr  4 02:28:15 2025 GMT
            Not After : Apr  6 02:28:15 2025 GMT
        Subject: CN=67ef43bf-7d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:55:30:4b:00:ed:b9:cf:ab:52:c6:2b:66:
                    31:07:28:57:3f:bd:0f:fc:48:10:54:39:92:d0:8d:
                    be:2a:d0:14:e6:23:bf:a1:d3:11:1e:e8:ef:66:c6:
                    b3:9e:d9:9c:56:3b:88:b9:0b:75:ed:9f:20:53:14:
                    d1:e7:21:e8:c4:82:9b:66:c8:8e:31:e1:bc:d4:8e:
                    49:bc:74:52:e7:ce:cd:99:d0:07:87:e5:df:7c:63:
                    12:86:3b:71:7f:06:d0:d6:4c:a0:a3:17:e3:73:c9:
                    71:e5:a1:6d:73:d4:31:60:2e:5c:d0:40:e9:61:51:
                    e0:ec:dd:ed:6a:a8:e2:43:67:95:9f:6f:cc:12:72:
                    3c:73:99:c9:ed:5a:47:85:69:96:35:8a:7f:f8:cd:
                    8b:43:0e:a8:12:63:d1:4e:d2:e1:f8:34:13:21:48:
                    f1:8d:ff:0b:b7:81:d8:8d:e3:b9:0d:a3:3c:a7:fe:
                    8b:d2:36:d2:60:d1:b5:95:8f:56:ee:d3:0e:e4:e1:
                    19:ad:a7:25:20:35:a2:a1:ee:1b:8d:eb:e3:79:43:
                    dd:bf:82:d8:8d:90:b7:2a:a6:1a:af:26:0d:1f:0f:
                    b2:58:33:89:ac:ff:7a:16:d6:de:be:61:59:48:c7:
                    8f:4e:1b:30:b0:61:8c:35:f6:d5:b0:d2:81:ca:f6:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:50:A8:EA:3A:F9:7A:53:95:83:D7:86:11:0D:0D:16:63:A4:D7:C6
            X509v3 Authority Key Identifier:
                keyid:6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9c:df:56:8f:5a:4e:db:ab:94:1f:45:5d:f9:be:d9:2f:29:
         3f:7a:6c:47:b7:e5:78:29:30:d2:c4:33:25:78:8f:5b:6d:77:
         8d:fc:d5:ae:1c:e5:7d:b3:2d:6a:d6:5b:16:e8:e9:13:72:fe:
         d4:93:7e:02:8b:b5:e8:8e:24:a4:86:f8:c7:ca:7b:8d:38:15:
         02:0d:60:2e:c6:9c:5a:53:6c:0f:22:db:00:c9:90:4b:fc:1f:
         f9:53:ae:b8:53:8a:10:26:2d:24:53:bc:31:3b:53:a5:92:da:
         84:aa:6e:e1:21:6c:e1:b4:a7:12:cc:c8:12:03:de:c0:25:71:
         58:ba:ba:61:53:f3:1f:28:90:97:5a:f1:90:78:19:f4:61:9a:
         0e:14:d8:3a:6e:60:c1:c6:8a:c7:fd:a2:ba:98:60:9b:10:e3:
         0b:57:2d:34:ca:11:ba:4f:65:94:8d:ce:8d:45:ff:2f:80:e2:
         58:08:f4:ae:b6:a8:44:94:8b:18:1f:79:7a:0b:1e:b4:f1:ba:
         f6:ed:4d:0e:18:39:7b:07:10:1e:8b:31:1b:8f:10:1b:82:22:
         85:2c:fa:81:2d:ca:34:47:08:e6:72:ab:cc:c8:45:26:92:e0:
         0b:a4:90:49:c1:cc:70:1b:b2:b3:68:ad:04:ae:3d:c4:a7:54:
         a0:95:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:19:19 2025 by rpki-client