Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
File:                     2pwGSilziJ8Q063Z_fEqiDYTZL8.mft (raw, json)
Hash identifier:          ib7na5wUxJ7C1BZuFhZe2UrZS/sBna/VeCMfu2sTqeU=
Subject key identifier:   84:05:6C:AA:CB:BB:38:DC:1E:32:0C:98:3B:21:5D:40:86:43:99:E0
Authority key identifier: DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF
Certificate issuer:       /CN=F3654E24AF/serialNumber=DA9C064A2973889F10D3ADD9FDF12A88361364BF
Certificate serial:       0467
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
Manifest number:          0466
Signing time:             Sun 16 Feb 2025 02:00:54 +0000
Manifest this update:     Sun 16 Feb 2025 02:00:53 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:53 +0000
Files and hashes:         1: 2pwGSilziJ8Q063Z_fEqiDYTZL8.crl (hash: rAS8/14qVmIngJjC5zZC0JlAlujpkZYGQmGFbKdcEGo=)
                          2: 58BE8A3A92FD11EC9A66148E5A40D577.roa (hash: p/Nwn6WbMbiqBh52brLCSrPTezSi2w7+mCvrJxVr0pE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654E24AF
        Validity
            Not Before: Feb 16 02:00:53 2025 GMT
            Not After : Feb 18 02:00:53 2025 GMT
        Subject: CN=67b146d6-be46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:04:d9:de:7c:51:72:49:84:57:4f:e9:eb:
                    b7:4d:f2:6b:08:fb:5e:1a:eb:b9:91:09:d9:54:e4:
                    01:f3:ea:c9:cb:10:eb:e7:f3:ac:0c:01:8e:15:40:
                    58:ac:4e:3c:d0:c2:10:e0:7c:6e:c9:bd:3d:7b:4e:
                    29:a5:26:fd:77:93:cc:a8:80:4a:d1:92:db:5b:2a:
                    62:c4:b2:9b:23:da:c3:9d:38:dd:78:cf:6b:67:87:
                    4f:16:e7:60:98:3d:73:b3:50:ab:ec:22:89:f9:2e:
                    59:e3:6f:b5:2c:f5:60:7f:05:38:e7:13:f7:48:e0:
                    84:fe:3d:d8:70:cb:02:74:31:65:39:56:3c:0d:5c:
                    9f:30:63:0a:22:6b:8c:db:68:33:06:77:e6:81:b9:
                    71:16:95:02:d6:ac:bd:bd:14:68:ac:1d:59:4f:61:
                    fd:09:55:14:91:2f:7c:38:e4:7c:13:9d:c7:b7:98:
                    aa:00:ea:d4:0b:76:26:b6:a5:0a:a4:fd:37:cb:bf:
                    73:5c:ca:49:25:85:3a:d8:0f:4d:a5:15:cd:65:08:
                    3d:30:b2:d6:43:33:8a:e5:09:ba:49:34:ae:f9:6d:
                    46:2a:5b:bf:d8:f1:50:77:7a:a0:27:c4:12:14:c6:
                    57:52:ac:cc:16:df:6b:ff:df:db:58:a1:e0:2f:9f:
                    ff:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:05:6C:AA:CB:BB:38:DC:1E:32:0C:98:3B:21:5D:40:86:43:99:E0
            X509v3 Authority Key Identifier:
                keyid:DA:9C:06:4A:29:73:88:9F:10:D3:AD:D9:FD:F1:2A:88:36:13:64:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2pwGSilziJ8Q063Z_fEqiDYTZL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654E24/A318A10892FB11ECA71411895A40D577/2pwGSilziJ8Q063Z_fEqiDYTZL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:29:a9:c8:e5:7c:1d:67:f0:44:c2:c9:52:f2:23:5d:1c:1a:
         e5:be:ff:4d:a8:d0:52:6d:7d:0c:26:59:c2:a6:9a:bc:8b:a5:
         da:d3:1b:12:d8:2b:a4:6d:03:69:c8:e4:7e:42:55:a7:77:e8:
         71:7d:c4:78:44:5a:be:81:88:31:bb:a0:61:5a:ce:65:55:c0:
         1c:a7:4d:bb:b1:d5:a4:0b:0a:34:b3:c6:86:28:c2:75:97:83:
         d2:bb:cf:75:36:92:76:d4:62:3b:b7:8b:a5:d1:81:fa:af:2e:
         c8:4d:0c:5d:93:aa:02:04:fa:23:cd:f8:b6:37:81:60:24:be:
         65:df:ce:66:d3:ab:40:bd:6f:a3:e8:a5:65:11:7c:e1:05:b3:
         40:bc:9c:a1:98:fb:01:d3:24:24:46:c7:0d:0f:4d:9a:d1:3b:
         6a:36:07:1d:5e:49:41:79:9e:87:df:79:0a:cf:b1:92:0b:0a:
         ad:19:79:84:10:c7:b6:3b:8f:26:cc:04:03:03:64:73:b2:0f:
         9a:05:23:ca:26:b7:e6:46:18:79:ea:7a:91:8a:66:fd:b2:ba:
         53:07:e1:8a:28:10:aa:89:91:1f:8f:30:34:e4:85:8c:df:ce:
         3b:c9:94:10:dd:dc:ab:90:c9:f5:c9:3b:a3:1c:6b:d4:45:a2:
         40:4e:25:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:13 2025 by rpki-client