Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
File:                     g2HVptDz1JxnYMDqaGxnxBSd1t8.mft (raw, json)
Hash identifier:          kj0yB9fSPdSdX+bgIGDFg5ZlYPw5dXSYcO/t6xBrcF4=
Subject key identifier:   56:29:B3:51:54:DD:58:EC:74:C7:9A:9C:1F:4E:6A:5E:81:1E:58:B1
Authority key identifier: 83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF
Certificate issuer:       /CN=F36580B0AF/serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
Certificate serial:       02AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
Manifest number:          02A7
Signing time:             Wed 04 Jun 2025 03:59:16 +0000
Manifest this update:     Wed 04 Jun 2025 03:59:15 +0000
Manifest next update:     Fri 06 Jun 2025 03:59:15 +0000
Files and hashes:         1: g2HVptDz1JxnYMDqaGxnxBSd1t8.crl (hash: X/ezOGPgXJLwO3uGpPCrFt/dyGDm49rGVO118M5JVC0=)
                          2: 1C32F8941A4511F0A5CA51D56DB8BCC6.roa (hash: KQ8ojeNuY+CC6+HeJZiLg2NTwLb/0OvPStW386IgOFQ=)
                          3: 5CA7913C41CF11EEABA50B154AD9E6FC.roa (hash: mPw4RDOXZXo/bpdC9fVPFx1LHe7Ee57R4RWVqSxmsVQ=)
                          4: F6014E24370D11F0A9AE9EC6DAE4EC9C.roa (hash: /c4sEFV6yDMdPKbHf6tAF/ORJg3oZvCxiMncTFmAdSI=)
                          5: 1E76759CB6E311EFB3CF7A44762E951A.roa (hash: W/c0Kk3I+J2yYg1lYlt6Jh0twnCYr8+m8FqL7jZfB8o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36580B0AF, serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
        Validity
            Not Before: Jun  4 03:59:15 2025 GMT
            Not After : Jun  6 03:59:15 2025 GMT
        Subject: CN=683fc494-ab04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:11:a8:1c:9c:ce:d7:0b:16:a8:fa:fb:c6:
                    34:cb:a6:aa:17:d0:02:f7:a0:07:85:3f:af:02:b5:
                    5d:5d:08:20:f8:d3:50:84:6f:e9:f6:c3:20:e4:36:
                    3d:3d:4d:dd:ba:3d:7f:bf:f5:49:4a:08:b6:fa:8f:
                    0e:d1:6d:dc:f6:2b:22:f4:5b:f4:0d:03:4f:a1:88:
                    ae:2c:4d:50:d6:c4:98:bd:eb:78:7e:98:de:4d:17:
                    50:2d:2d:6e:a0:0b:8d:de:01:bf:ef:b9:87:62:bb:
                    a0:04:18:f7:7b:2f:b4:c2:bf:93:9a:11:4f:46:05:
                    76:b6:29:bb:a4:a1:1c:af:be:9a:26:3e:c3:89:72:
                    cc:8c:7c:5b:8b:b9:bb:05:3d:21:15:0f:c8:a7:28:
                    e8:69:5b:ac:e6:77:f2:d8:fc:22:f9:f8:3d:3c:07:
                    a5:c0:8a:5f:c1:5f:56:50:ab:b8:e0:6b:4a:78:4b:
                    a1:56:fa:aa:3e:7d:c8:cf:4e:2b:8f:61:f6:4f:1a:
                    e8:9a:56:8b:25:94:e4:3b:0a:03:ec:49:be:af:33:
                    ff:45:21:c6:58:6a:64:c2:3d:b1:1a:69:33:a3:0e:
                    f9:e5:a7:a9:f5:59:00:20:b5:31:90:8c:3c:0a:8e:
                    59:e0:44:d5:74:4c:49:c9:a1:e6:9a:c6:90:0c:bc:
                    b1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:29:B3:51:54:DD:58:EC:74:C7:9A:9C:1F:4E:6A:5E:81:1E:58:B1
            X509v3 Authority Key Identifier:
                keyid:83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:cf:a8:9f:0a:ca:23:75:5e:b6:d7:71:9a:df:56:80:aa:
         e5:d9:b6:f8:70:a6:18:40:28:4a:e3:55:cf:7f:bd:83:43:2b:
         1f:ad:84:3a:e3:0f:09:d8:8b:62:c0:d3:aa:9f:09:bb:3f:dc:
         6e:2f:3f:34:6d:9e:c9:cb:e5:0e:7e:ff:2b:93:5c:b4:cb:23:
         ea:f6:be:32:49:80:8c:84:45:99:10:29:28:f3:d6:59:3f:6c:
         66:d6:e9:53:2d:33:3d:f3:37:fb:b2:e7:68:8a:18:8a:07:f3:
         6c:d3:f1:ea:dd:7d:01:ee:20:7b:6d:76:91:5a:bc:be:94:37:
         96:91:84:d8:ae:2d:62:d9:33:91:92:c4:5b:1e:8e:68:e1:2b:
         29:e6:d5:1d:db:f3:f9:53:98:7d:ba:d8:08:5a:85:69:62:46:
         a5:19:ae:22:17:02:1e:78:fb:27:30:7f:f4:8f:e4:7e:fa:ba:
         05:30:35:91:ae:d0:7a:7d:02:e4:fa:5c:e9:75:af:b6:12:de:
         4e:1d:eb:e4:8f:3d:a7:ba:03:1a:99:e4:f5:5d:c7:bc:a8:b0:
         6a:a1:27:f6:d6:69:ea:df:08:89:08:8a:10:29:65:a6:62:b1:
         dc:a2:a1:47:d1:e4:bd:1e:dd:63:37:67:43:36:0f:7c:fa:f9:
         a3:3e:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:39:01 2025 by rpki-client