Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
File:                     9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft (raw, json)
Hash identifier:          k7ERnowMdgyCpChfhUg/6fyDEGYzJng7L3aUMJX5IxY=
Subject key identifier:   A0:49:D3:A5:2C:11:99:27:B1:44:70:7B:70:E6:13:3B:49:D0:B3:30
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Certificate issuer:       /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial:       01F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
Manifest number:          01E5
Signing time:             Sun 16 Feb 2025 02:48:26 +0000
Manifest this update:     Sun 16 Feb 2025 02:48:25 +0000
Manifest next update:     Tue 18 Feb 2025 02:48:25 +0000
Files and hashes:         1: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl (hash: iUpnvErFXDP16jrCO6unppvQByAWMFuqltKi5byprUQ=)
                          2: 771608343F6511EFB9F4EABA762E951A.roa (hash: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=)
                          3: 5A705AB83F6511EFB113C3BA762E951A.roa (hash: 46y6LOxfLG2hpzs8KqldDqb+T4CZAqoGN7kv9ge6l2Q=)
                          4: C37677449B4211EE97C01A0BD25BE465.roa (hash: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=)
                          5: 9C2FB4D49B4211EE82B8CF0AD25BE465.roa (hash: RKm1ONyaKM8MZ2trCs9RLFoAoaY0CDYQpfQjdSvu7io=)
                          6: D91B9FD2905311EF97DBC8B6762E951A.roa (hash: //pQLXl186UK+YngQ4Oqc4YBM5xFv+Ww/aM3Yp8J0R4=)
                          7: ACB50F14905311EF9F4DCCB4762E951A.roa (hash: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=)
                          8: 5AA6ED769BE611EE88684334D25BE465.roa (hash: J9soXt+A2SzJz6ium1VPFEErWV44KnKWZA3DTIrB3Z8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656BB8AF
        Validity
            Not Before: Feb 16 02:48:25 2025 GMT
            Not After : Feb 18 02:48:25 2025 GMT
        Subject: CN=67b151fa-2640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:c0:14:d2:84:23:46:2e:bb:9c:fb:4e:ee:
                    9a:02:8f:41:e1:b5:7e:34:48:81:66:7e:61:6b:1e:
                    d4:e9:16:0d:af:1c:ed:e0:f6:8c:da:0c:dd:2d:d6:
                    2b:39:14:97:42:0c:e9:08:8c:79:02:18:4e:f2:a5:
                    46:73:92:80:b2:ec:f1:cc:ce:54:8d:17:27:76:c0:
                    fa:33:09:ca:71:7a:3a:2c:7b:36:b9:b5:ac:f1:e3:
                    3f:5f:44:d9:07:5d:ec:da:4f:44:9f:2c:15:3f:4d:
                    eb:fd:62:63:53:8e:40:27:76:e4:1d:e0:43:dc:b2:
                    be:71:58:e7:86:bc:15:fd:fd:d0:27:a7:bf:90:3b:
                    f4:a1:31:b2:a8:2b:3f:12:16:8c:8c:33:e7:b7:b5:
                    c0:b3:db:5d:65:1f:66:b8:88:3f:58:34:36:cf:ee:
                    61:1e:91:87:ec:5f:2a:40:c3:9b:34:6e:b8:ba:bf:
                    4b:89:7d:99:4e:cf:fe:d0:d4:56:f6:8b:34:b4:27:
                    bf:9c:40:95:63:90:bf:42:59:8c:1d:72:da:91:d0:
                    91:b1:77:a2:70:f0:58:7d:50:c1:38:45:d2:4c:b6:
                    15:c3:11:b4:00:a2:6e:48:3e:dc:7c:6e:d0:bb:a9:
                    bb:68:aa:56:b8:4d:af:a4:d2:e4:8f:e7:04:58:e7:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:49:D3:A5:2C:11:99:27:B1:44:70:7B:70:E6:13:3B:49:D0:B3:30
            X509v3 Authority Key Identifier:
                keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:4f:6e:03:aa:4b:85:26:d6:80:25:e2:a4:42:79:e9:3d:5a:
         e2:03:c8:e5:53:66:69:06:a2:c3:78:be:47:db:dc:44:ed:aa:
         ae:c0:2e:9f:e8:c4:5b:90:c8:e2:11:09:65:5c:e3:31:82:9d:
         a1:ba:b9:f8:c6:96:0a:a1:17:f6:51:60:f2:b6:2b:0d:ab:13:
         c2:d0:31:67:63:64:8f:44:58:97:10:6c:05:1d:4e:5e:3c:60:
         b8:3e:d3:a3:b5:56:a4:16:f0:ba:ed:8d:20:92:5d:f5:c0:e1:
         62:2d:58:74:04:19:a1:10:5e:fc:5d:c8:a4:56:41:ad:7e:49:
         5d:0c:f1:58:12:4c:ec:66:e8:bd:43:0b:0c:4c:99:6f:9d:dd:
         f7:e8:0a:af:6e:09:ff:d1:b6:49:77:dc:24:b1:26:f8:08:cb:
         98:f8:68:e0:d4:2a:4d:ba:dd:2e:b2:2b:fa:82:71:e9:56:f6:
         7e:4b:df:29:e7:f4:30:77:9b:0c:b6:d5:72:b1:41:00:25:a7:
         b3:c4:6c:64:1d:35:87:3c:5b:82:11:05:99:9b:96:b9:c7:80:
         1d:22:d7:bc:69:37:2e:81:29:7e:c3:3e:e8:a0:87:90:58:12:
         3b:8c:28:f7:42:ce:58:23:06:b5:32:fe:11:5a:9c:9a:68:10:
         74:eb:fd:b2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTZCQjhBRjExMC8GA1UEBRMoRjY3MDY2NDM5QUNEOUVBRkQ0ODk5RkM2OEM2MDc1
QzcwQ0UzOUFENTAeFw0yNTAyMTYwMjQ4MjVaFw0yNTAyMTgwMjQ4MjVaMBgxFjAU
BgNVBAMTDTY3YjE1MWZhLTI2NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOZcAU0oQjRi67nPtO7poCj0HhtX40SIFmfmFrHtTpFg2vHO3g9ozaDN0t
1is5FJdCDOkIjHkCGE7ypUZzkoCy7PHMzlSNFyd2wPozCcpxejoseza5tazx4z9f
RNkHXezaT0SfLBU/Tev9YmNTjkAnduQd4EPcsr5xWOeGvBX9/dAnp7+QO/ShMbKo
Kz8SFoyMM+e3tcCz211lH2a4iD9YNDbP7mEekYfsXypAw5s0bri6v0uJfZlOz/7Q
1Fb2izS0J7+cQJVjkL9CWYwdctqR0JGxd6Jw8Fh9UME4RdJMthXDEbQAom5IPtx8
btC7qbtoqla4Ta+k0uSP5wRY5+5bAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUoEnT
pSwRmSexRHB7cOYTO0nQszAwHwYDVR0jBBgwFoAU9nBmQ5rNnq/UiZ/GjGB1xwzj
mtUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2QkI4L0Q3OUVFQjk0ODkxQzExRUVBRjY1Qzc2MDRBRDlFNkZDLzluQm1R
NXJObnFfVWlaX0dqR0IxeHd6am10VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzluQm1RNXJObnFfVWlaX0dqR0IxeHd6am10VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTZCQjgvRDc5RUVCOTQ4OTFDMTFFRUFGNjVDNzYwNEFE
OUU2RkMvOW5CbVE1ck5ucV9VaVpfR2pHQjF4d3pqbXRVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6T24DqkuFJtaAJeKkQnnpPVriA8jl
U2ZpBqLDeL5H29xE7aquwC6f6MRbkMjiEQllXOMxgp2hurn4xpYKoRf2UWDytisN
qxPC0DFnY2SPRFiXEGwFHU5ePGC4PtOjtVakFvC67Y0gkl31wOFiLVh0BBmhEF78
XcikVkGtfkldDPFYEkzsZui9QwsMTJlvnd336Aqvbgn/0bZJd9wksSb4CMuY+Gjg
1CpNut0usiv6gnHpVvZ+S98p5/Qwd5sMttVysUEAJaezxGxkHTWHPFuCEQWZm5a5
x4AdIte8aTcugSl+wz7ooIeQWBI7jCj3Qs5YIwa1Mv4RWpyaaBB06/2y
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:40 2025 by rpki-client