Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
File:                     vujDtMU1w6-g9ubE9pxolZBF-RY.mft (raw, json)
Hash identifier:          T12ApHIvbW5Wu/nxDutvF7a8Ghlh38sp4qlOyvkBNwI=
Subject key identifier:   58:37:E6:9C:0F:57:02:B3:68:2F:D6:12:5D:68:0C:B4:0B:CB:22:8C
Authority key identifier: BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
Certificate issuer:       /CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Certificate serial:       C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
Manifest number:          BE
Signing time:             Thu 03 Apr 2025 03:17:05 +0000
Manifest this update:     Thu 03 Apr 2025 03:17:05 +0000
Manifest next update:     Sat 05 Apr 2025 03:17:05 +0000
Files and hashes:         1: vujDtMU1w6-g9ubE9pxolZBF-RY.crl (hash: NKBqy5i0dCkWvsh9lGTBM86BHKzvf6ac3lh6gb0d5e4=)
                          2: D3A052DE8C5011EF962EB66B762E951A.roa (hash: 7F3ZZIsrdZCw76gUa9ufWVDJqlOoOPIvRQ+47HnEl7c=)
                          3: 620994148C5011EF94268569762E951A.roa (hash: 9V4bZYCHudK+iK9UuvGM5Ummg+j57Il9EjuvcaUWhiI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36311EEAF
        Validity
            Not Before: Apr  3 03:17:05 2025 GMT
            Not After : Apr  5 03:17:05 2025 GMT
        Subject: CN=67edfdb1-4816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:f0:1d:30:fb:a0:28:58:fe:c1:6d:c2:46:
                    07:da:af:56:2c:69:52:48:c8:a3:ae:58:7f:1f:cc:
                    90:98:39:f7:27:bf:81:a1:e2:a2:f9:21:3b:d1:05:
                    1d:0c:58:41:f5:d2:64:48:b5:2b:d3:4d:2e:e7:ad:
                    33:55:99:21:2f:11:c5:d0:62:44:91:a7:9d:dc:71:
                    dc:2e:e7:0f:7a:44:1d:cd:1e:f1:20:5e:99:57:07:
                    d0:b9:f8:dc:09:fe:3a:ff:bc:ae:4a:57:f9:4f:af:
                    c2:2a:d8:53:ac:bd:13:2c:65:7b:99:18:0a:d3:9e:
                    17:83:91:c6:07:c4:84:fd:1e:f2:50:41:bd:d2:6b:
                    cc:bc:f3:1d:46:14:fc:03:f9:40:7f:1d:fe:76:25:
                    23:be:d2:09:09:f2:1e:91:f8:a3:e3:16:2a:3a:5e:
                    e7:31:a2:24:87:ae:c1:3d:78:f6:07:e9:a0:5a:f6:
                    ef:5e:ee:75:10:52:dd:c7:2b:c1:1d:d4:0d:00:04:
                    f6:19:c2:d9:8b:15:7d:19:8c:66:ff:24:72:e0:06:
                    74:a2:15:dc:da:8d:a6:21:49:54:1f:0e:15:ff:74:
                    db:46:f1:60:c8:a8:3b:60:20:b1:c7:44:5b:55:f6:
                    ad:47:cc:55:83:05:51:a5:26:c3:5a:67:e3:80:2e:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:37:E6:9C:0F:57:02:B3:68:2F:D6:12:5D:68:0C:B4:0B:CB:22:8C
            X509v3 Authority Key Identifier:
                keyid:BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4f:15:d0:62:2f:42:36:6e:42:46:e8:80:ee:9c:3e:40:d8:
         be:92:a3:ac:fc:42:66:e3:f6:e3:f3:d2:8f:4a:56:4d:df:6c:
         5e:b0:a4:c0:2e:2a:03:be:f8:2b:68:ce:c5:42:22:52:26:1d:
         b9:fc:71:4d:d4:cb:ea:7a:04:c3:40:7d:b7:01:93:01:6c:b5:
         0a:59:ce:27:20:80:58:9a:1f:40:12:0b:28:50:34:15:53:8d:
         e7:26:6e:50:13:f2:41:3b:fc:2b:19:8b:55:d9:a5:23:c8:36:
         7d:af:88:89:24:e0:ca:a2:cf:3a:88:6f:2b:b5:a2:0e:b3:31:
         3c:e4:4b:ce:e6:9d:b2:f9:0f:19:92:ce:ac:c0:f0:24:49:42:
         ed:b6:ba:59:d3:e8:56:e6:7f:2a:78:bc:62:2b:33:3e:c3:8e:
         47:0d:f7:19:88:06:af:2e:c6:06:af:2a:da:46:a9:26:67:cf:
         9b:09:74:54:92:b1:d9:ed:71:12:19:c1:a8:87:e0:dd:33:c2:
         d6:dd:d6:46:6c:b1:b4:88:54:8a:53:8c:ed:b7:f7:88:78:62:
         76:74:7c:e1:ae:6c:8a:2e:12:3e:8a:88:63:74:37:33:21:1d:
         96:e2:73:d3:d4:63:86:57:20:13:9f:6e:1d:27:fe:4f:28:2c:
         0a:5d:aa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:37:33 2025 by rpki-client