Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
File:                     h4TuSgLa-JcmVvEkUr8npJEcNik.mft (raw, json)
Hash identifier:          uEJKi5zUIO4/ZKooA71tqdhx0yWO1V64MGUOHnt8S4A=
Subject key identifier:   03:4E:69:F7:44:28:70:84:30:5C:14:EF:0E:1E:A5:F2:9D:1D:93:41
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Certificate issuer:       /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial:       0C94
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
Manifest number:          0C90
Signing time:             Thu 03 Apr 2025 00:58:23 +0000
Manifest this update:     Thu 03 Apr 2025 00:58:22 +0000
Manifest next update:     Sat 05 Apr 2025 00:58:22 +0000
Files and hashes:         1: h4TuSgLa-JcmVvEkUr8npJEcNik.crl (hash: XflMCS98saWVRGrn7O/0LeJSbY26yntVnIsy+6VZVC0=)
                          2: D6B61570F80D11EF99734852762E951A.roa (hash: tfdDcGbQMsee5OOm9EW60V6hc91lxofJEctKITYoU8M=)
                          3: F9EF37C6A9A011EAB3F8E035F8AEA228.roa (hash: hv8nqq5P9PSxsiqqebiaxojUmKUtWuVUeKogAVthKqk=)
                          4: 322E59C89B8511ECA6E8B6A05A40D577.roa (hash: BnWYJ3FTlStYEMUn5ujbi/xmcBESttAp1iVk0y8JFFk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3220 (0xc94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AF
        Validity
            Not Before: Apr  3 00:58:22 2025 GMT
            Not After : Apr  5 00:58:22 2025 GMT
        Subject: CN=67eddd2f-d09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:dd:79:ac:84:f3:e4:20:75:8f:65:77:0a:
                    dc:fa:a4:ef:b3:8c:8f:f1:57:ad:2c:ce:5b:27:6d:
                    79:0b:b8:c2:52:36:41:95:be:c1:c5:77:27:9e:34:
                    69:75:69:44:2d:b5:0c:5e:aa:5f:bc:9f:45:5f:0d:
                    2a:18:7b:e8:ff:23:49:12:06:e8:9f:d5:9e:1f:4d:
                    7a:4c:92:17:45:3f:9c:d6:fb:82:80:ff:31:bc:9f:
                    39:b6:28:7a:5a:98:59:b3:0e:73:87:15:09:b8:b7:
                    78:1d:8e:0e:cd:09:4d:94:54:71:ec:6d:40:c2:49:
                    5e:81:ee:7e:b7:3e:42:91:e7:a8:86:24:22:34:ac:
                    87:2f:5d:57:44:e1:2d:3d:d2:91:af:f6:c7:a0:9d:
                    23:ff:34:5b:1a:13:68:1f:1d:55:47:e7:1e:d6:38:
                    0b:0d:9e:08:65:c6:4e:94:30:e4:5a:52:ee:04:3d:
                    c4:0b:cf:ee:5f:0b:9a:08:4b:7f:18:20:2e:2f:7f:
                    be:7a:72:02:3a:31:8f:6c:75:e0:73:19:53:86:11:
                    0f:d6:4e:2a:fe:84:76:fa:12:66:ac:11:69:a8:01:
                    ea:02:00:60:25:ab:b0:4a:56:4b:e3:fb:af:23:c2:
                    d8:43:8a:89:3b:6d:a2:7f:14:ae:62:43:66:aa:fc:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4E:69:F7:44:28:70:84:30:5C:14:EF:0E:1E:A5:F2:9D:1D:93:41
            X509v3 Authority Key Identifier:
                keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f5:51:0f:72:b8:b2:c5:85:68:14:70:a8:cc:aa:8c:e5:74:
         90:f2:7e:00:88:2b:0d:db:38:50:76:79:ac:00:1a:2f:45:ff:
         76:b4:39:c7:68:c1:0b:2c:c9:72:9b:32:f3:ba:cf:ac:de:a5:
         ab:c7:ac:9d:d3:8f:96:63:a0:89:45:75:f4:b3:a3:4d:87:ce:
         25:73:c8:d1:5c:b2:25:01:87:f4:54:e8:b4:8b:b3:14:79:da:
         50:00:31:df:be:0c:2a:5c:34:47:77:3f:d4:c5:9f:b8:16:2f:
         0b:ca:2b:06:c2:ee:f0:c7:75:a0:67:b8:f6:49:b1:0c:36:95:
         f6:d1:a6:d5:24:20:24:fc:a7:3a:d1:c8:3d:3a:01:32:c5:6b:
         18:38:4f:89:13:6c:c3:7a:d6:51:6b:58:52:67:a9:dd:ec:f0:
         ae:28:5f:be:cf:59:0c:53:bb:f8:cf:1c:77:96:32:cf:77:e1:
         99:66:3c:4e:27:c9:b5:ae:42:d7:03:ac:27:ba:34:0a:f0:81:
         ec:f9:32:6b:3a:fd:db:19:2d:d8:aa:ec:13:f5:90:b1:3b:fd:
         55:86:26:82:f3:f3:79:20:85:8c:04:d5:b9:6c:ee:18:2b:47:
         30:8e:23:48:8e:cb:2b:da:a9:a2:c5:0e:08:aa:86:40:d9:f8:
         d7:40:5e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:23:07 2025 by rpki-client