Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
File:                     2pwGSilziJ8Q063Z_fEqiDYTZL8.mft (raw, json)
Hash identifier:          yxMQxIo6SS8BBQ+GZqq9nd7POKcywFKVxMeM6Xd/Vy0=
Subject key identifier:   BE:19:40:35:7B:6D:12:9A:3F:F2:E6:DD:91:82:8A:95:2D:51:6A:4F
Authority key identifier: DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
Certificate issuer:       /CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Certificate serial:       04D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
Manifest number:          04D3
Signing time:             Wed 04 Jun 2025 02:47:50 +0000
Manifest this update:     Wed 04 Jun 2025 02:47:50 +0000
Manifest next update:     Fri 06 Jun 2025 02:47:50 +0000
Files and hashes:         1: 2pwGSilziJ8Q063Z_fEqiDYTZL8.crl (hash: OK/qglW5xsql3nGiJUJ/A/0KrElaWGHbnNDcqEwG5dY=)
                          2: 58BE8A3A92FD11EC9A66148E5A40D577.roa (hash: p/Nwn6WbMbiqBh52brLCSrPTezSi2w7+mCvrJxVr0pE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1236 (0x4d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654E24AF, serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
        Validity
            Not Before: Jun  4 02:47:50 2025 GMT
            Not After : Jun  6 02:47:50 2025 GMT
        Subject: CN=683fb3d6-385c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:80:39:4e:83:64:ec:d7:5f:de:72:4d:68:
                    9c:22:a3:49:69:13:73:c7:5d:d6:32:6b:5f:80:79:
                    f8:f4:35:47:66:a9:b9:65:4c:6b:db:f6:dd:72:68:
                    c9:f4:41:0d:61:7c:e0:35:f7:d1:26:3b:88:b4:69:
                    31:c8:88:c2:ae:58:c4:75:b5:37:37:79:86:72:3b:
                    79:c9:df:e5:b2:09:3a:91:6e:fb:75:d7:de:54:a9:
                    5a:21:b8:f0:93:46:5d:81:f2:aa:00:1a:ec:17:23:
                    bc:3b:f2:71:2c:ef:19:80:9f:b1:68:d8:97:bd:c1:
                    51:66:a8:1c:67:07:28:ee:2e:2d:86:b1:07:2c:c7:
                    b1:6f:14:5a:0e:50:94:c3:c8:2e:f9:7a:d7:fb:93:
                    a3:38:fc:4f:43:22:e1:bc:46:00:87:5d:76:68:70:
                    72:0b:69:8e:16:68:8c:7a:77:04:77:6a:7d:14:d4:
                    fe:a0:03:5d:c6:ce:3e:2f:57:c5:06:ed:b1:e8:c2:
                    0f:04:0d:22:65:d4:48:ab:d5:78:4c:aa:73:77:40:
                    5e:f6:ab:94:d8:be:c1:1b:11:e1:25:a4:8f:e3:44:
                    8e:da:cb:bf:ee:b4:63:3a:d3:43:72:66:dc:73:dc:
                    05:04:4f:b4:b2:00:0a:b6:7e:25:f8:14:5b:14:66:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:19:40:35:7B:6D:12:9A:3F:F2:E6:DD:91:82:8A:95:2D:51:6A:4F
            X509v3 Authority Key Identifier:
                keyid:DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2e:0b:28:66:ef:03:f6:df:9a:e4:ab:eb:50:cf:be:5b:d9:
         b7:cc:e8:99:6c:c8:d0:ab:ee:dc:ee:3e:d3:c4:db:3f:5e:12:
         e9:50:88:d7:c2:a9:85:0b:bf:60:11:4a:d5:21:1c:9d:1c:8c:
         c3:f9:6d:f3:2c:27:09:25:c8:6e:2d:fa:47:2b:ae:dc:31:d3:
         3f:0a:d7:d8:92:cd:0f:60:7c:19:d8:bb:da:54:58:f1:d3:41:
         5e:04:99:3b:4e:00:88:b1:fb:c2:89:07:e5:dd:dd:40:f3:7e:
         42:ee:01:80:21:c3:ef:36:78:21:f8:96:9c:87:e7:2b:2d:3d:
         a5:02:e6:33:60:0e:a3:e4:e1:a2:e8:5c:6c:25:b4:aa:dd:45:
         00:83:7f:fc:0a:12:f1:74:bd:18:2b:78:cc:5c:be:80:b4:bd:
         42:9f:76:6f:b0:13:86:be:35:24:94:d1:1b:56:7d:85:55:92:
         8b:6a:e3:88:4e:16:92:c1:a2:76:0f:6f:40:de:e7:8f:b6:b9:
         30:3f:85:ee:cd:9e:41:8b:03:5f:ba:b8:6b:da:29:7a:4e:26:
         47:76:76:ba:98:f5:58:53:03:f4:aa:85:36:b5:d4:ed:b1:84:
         e0:c8:f5:6a:4b:b4:59:59:07:06:3a:6e:81:ee:a9:e6:0e:da:
         79:1e:72:b4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTRFMjRBRjExMC8GA1UEBRMoREE5QzA2NEEyOTczODg5RjEwRDNBREQ5RkRGMTJB
ODgzNjEzNjRCRjAeFw0yNTA2MDQwMjQ3NTBaFw0yNTA2MDYwMjQ3NTBaMBgxFjAU
BgNVBAMTDTY4M2ZiM2Q2LTM4NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC324A5ToNk7Ndf3nJNaJwio0lpE3PHXdYya1+Aefj0NUdmqbllTGvb9t1y
aMn0QQ1hfOA199EmO4i0aTHIiMKuWMR1tTc3eYZyO3nJ3+WyCTqRbvt1195UqVoh
uPCTRl2B8qoAGuwXI7w78nEs7xmAn7Fo2Je9wVFmqBxnByjuLi2GsQcsx7FvFFoO
UJTDyC75etf7k6M4/E9DIuG8RgCHXXZocHILaY4WaIx6dwR3an0U1P6gA13Gzj4v
V8UG7bHowg8EDSJl1Eir1XhMqnN3QF72q5TYvsEbEeElpI/jRI7ay7/utGM600Ny
Ztxz3AUET7SyAAq2fiX4FFsUZjmhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvhlA
NXttEpo/8ubdkYKKlS1Rak8wHwYDVR0jBBgwFoAU2pwGSilziJ8Q063Z/fEqiDYT
ZL8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0RTI0L0EzMThBMTA4OTJGQjExRUNBNzE0MTE4OTVBNDBENTc3LzJwd0dT
aWx6aUo4UTA2M1pfZkVxaURZVFpMOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJwd0dTaWx6aUo4UTA2M1pfZkVxaURZVFpMOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTRFMjQvQTMxOEExMDg5MkZCMTFFQ0E3MTQxMTg5NUE0
MEQ1NzcvMnB3R1NpbHppSjhRMDYzWl9mRXFpRFlUWkw4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTLgsoZu8D9t+a5KvrUM++W9m3zOiZ
bMjQq+7c7j7TxNs/XhLpUIjXwqmFC79gEUrVIRydHIzD+W3zLCcJJchuLfpHK67c
MdM/CtfYks0PYHwZ2LvaVFjx00FeBJk7TgCIsfvCiQfl3d1A835C7gGAIcPvNngh
+Jach+crLT2lAuYzYA6j5OGi6FxsJbSq3UUAg3/8ChLxdL0YK3jMXL6AtL1Cn3Zv
sBOGvjUklNEbVn2FVZKLauOIThaSwaJ2D29A3uePtrkwP4XuzZ5BiwNfurhr2il6
TiZHdna6mPVYUwP0qoU2tdTtsYTgyPVqS7RZWQcGOm6B7qnmDtp5HnK0
-----END CERTIFICATE-----
Generated at Wed Jun 4 12:19:00 2025 by rpki-client