Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
File:                     5VXdlA8xUBhdWRwtquKfKOrq9XU.mft (raw, json)
Hash identifier:          nojaFYPQhz4vfxPpFoOuX0/Bh7cTzRFj+rsXaT1lyeI=
Subject key identifier:   C5:2A:C9:03:5B:43:FD:77:06:88:44:61:39:1E:94:D5:EF:E0:F8:E5
Authority key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Certificate issuer:       /CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Certificate serial:       0D39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
Manifest number:          0D31
Signing time:             Thu 10 Apr 2025 00:56:41 +0000
Manifest this update:     Thu 10 Apr 2025 00:56:40 +0000
Manifest next update:     Sat 12 Apr 2025 00:56:40 +0000
Files and hashes:         1: 5VXdlA8xUBhdWRwtquKfKOrq9XU.crl (hash: ce2quauyFMc+EBaSoKLgrBQ70ee5bJEskbu441nb5Fg=)
                          2: E8DE0D8E3D8911ED8B8D47C8F1222468.roa (hash: 0zFAuBmeEnXNJJd7TsaHijdXotZ0h58i4YSoZ+ZY9H4=)
                          3: 9F8D736E78F411E68FF6A770F8AEA228.roa (hash: 7ziUZKYlHAOXobhxVsVrZSIl0QBZlFH2TqS8HbjPf4c=)
                          4: 47FF373C78F311E6ABE5CF6EF8AEA228.roa (hash: PMUGcMSEGkK5VwbD/ElC2WVLlNF/LkvKddQXhWr3/S0=)
                          5: FC8B2EBE78F211E6870F9E6EF8AEA228.roa (hash: hEoaYDq5s+p9BJGFFQ8BOIdkwXKomCvKjmMvCCfXKFU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Apr 2025 00:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3385 (0xd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651254AF
        Validity
            Not Before: Apr 10 00:56:40 2025 GMT
            Not After : Apr 12 00:56:40 2025 GMT
        Subject: CN=67f71748-53a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:2e:b4:be:c5:70:ae:33:af:b2:f0:4b:7e:
                    50:82:52:ef:0c:9b:c0:76:ab:08:fc:fd:e8:9b:1f:
                    2e:64:f9:23:a0:c8:5c:66:eb:14:0d:82:5e:04:dc:
                    e3:7f:ca:0c:ba:30:39:b6:f2:e6:bb:32:5e:3e:e1:
                    64:59:dc:a2:48:4e:1f:03:77:4c:3d:82:7c:13:5a:
                    05:bd:e8:ed:62:bb:e0:78:a6:4e:77:22:54:0b:d8:
                    49:86:c9:fb:c0:b6:8d:d4:17:fb:31:42:fa:ff:9a:
                    76:b1:c3:5f:de:bd:db:cc:83:64:d8:4a:40:2f:d3:
                    f9:6d:93:67:e6:88:b4:f0:ba:bc:d7:c5:d8:54:f2:
                    51:a8:24:d5:dc:b2:a1:fe:30:a8:f1:bd:d9:f0:76:
                    e1:25:b0:36:37:d1:3e:49:b2:91:14:bc:46:7d:fe:
                    b1:60:8a:47:2b:a6:ec:0a:20:1a:f2:67:4c:da:4d:
                    ba:b6:0c:8e:aa:c3:5c:3a:7e:82:d2:2a:75:f5:a9:
                    c5:a4:7a:79:ab:ed:22:26:dc:e7:d8:18:ce:11:0c:
                    59:aa:c4:91:6d:46:5b:65:64:48:de:fb:41:ff:b9:
                    38:51:6d:f8:32:b6:00:f9:82:12:a8:9f:2d:7c:e7:
                    71:55:4c:bc:66:39:d7:e1:85:04:68:9b:85:54:d0:
                    b8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2A:C9:03:5B:43:FD:77:06:88:44:61:39:1E:94:D5:EF:E0:F8:E5
            X509v3 Authority Key Identifier:
                keyid:E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f2:81:b4:3b:a0:9b:40:4f:5c:73:ae:e4:af:d9:16:8f:cf:
         18:27:0a:41:3f:26:fa:33:26:66:8a:cd:f6:94:a1:12:f9:92:
         e5:31:12:79:20:cf:db:8b:5c:dd:26:ae:56:72:e2:4b:7b:84:
         e9:78:3c:9c:ea:60:21:56:95:00:aa:4c:91:26:87:11:d9:5f:
         bf:a9:9f:74:b2:c3:5c:03:4c:04:85:2c:75:82:77:1f:f0:04:
         54:da:36:df:43:b6:83:7b:5b:cd:96:25:1e:25:92:19:29:ee:
         e5:83:a6:af:46:04:8e:bd:cb:a0:17:cb:cd:4b:02:95:10:49:
         5a:4f:3a:52:49:e8:d2:1c:5d:14:3b:cb:a8:6e:83:63:c3:2d:
         3a:0f:f0:78:6a:de:c9:26:47:67:03:99:02:1d:f8:09:d9:e6:
         76:af:24:75:e0:2c:ec:be:bf:f3:03:87:30:26:a8:75:06:4d:
         3e:ff:76:7b:f6:89:7d:74:c5:5c:d5:d6:d1:66:f6:4d:77:be:
         42:bd:be:70:04:b7:0b:9b:cb:d7:dc:a4:8d:5a:90:0a:1e:cb:
         f3:4f:b8:41:83:04:10:c7:f5:91:0c:0c:0d:0f:14:ce:13:df:
         a5:3f:d6:dd:87:78:b8:f0:64:65:d2:90:e9:65:75:23:9b:42:
         1f:5e:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:17:45 2025 by rpki-client