Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
File:                     LQAVTmAKZArDKjKF2c6fxQqUGrM.mft (raw, json)
Hash identifier:          oo7AdKXloCRbDR+oe3qDJ4vBDbvoJj0d2CN0ES+C63k=
Subject key identifier:   E7:6B:2F:9C:13:31:08:8D:0F:D8:03:4F:8D:3E:A2:CB:DC:21:B3:23
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       042A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
Manifest number:          0424
Signing time:             Sat 12 Apr 2025 02:07:47 +0000
Manifest this update:     Sat 12 Apr 2025 02:07:47 +0000
Manifest next update:     Mon 14 Apr 2025 02:07:47 +0000
Files and hashes:         1: LQAVTmAKZArDKjKF2c6fxQqUGrM.crl (hash: BLJ3MOIZfhPtr6pKS5UKu2pj0GlhL4Cd9h+0qRIYKAQ=)
                          2: 5AD2351EF62211ECA5384CCEF1222468.roa (hash: O2TbmJ0oluer0UrOj7dugRw2nzmfuIBjrJGzVgObtfc=)
                          3: 441FBD96F62211ECAEA706CEF1222468.roa (hash: eOgo72NBB1TzX9MDNE5guVogIR1WbLYMRiu06PhqwRs=)
                          4: AEB3FD70F61811ECA343ACAFF1222468.roa (hash: yr8c8nv1fl6R2/dpv4d+UEGlhaBD6Mc7GC6CbBKlwUE=)
                          5: 92592E3EF62211ECB1890ECFF1222468.roa (hash: r+2CApErk9WQshLvMZh/1Yeo8KK9DMqaF9+XKRWgW4w=)
                          6: 76C25FA6F62211ECA4A5A1CEF1222468.roa (hash: bltEFXn7G4T8us2DT/CcL4lO2ojz0kPAbTbNgBQhLGQ=)
                          7: C977373AF61811ECAE6C16B0F1222468.roa (hash: I6EVPppAZg4DBAMr2DMZolkT3ClI2lJdmUjSbTKJ71k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Apr 2025 00:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066 (0x42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Apr 12 02:07:47 2025 GMT
            Not After : Apr 14 02:07:47 2025 GMT
        Subject: CN=67f9caf3-a105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:4d:36:17:d5:13:be:df:2d:a5:9a:76:3e:
                    31:39:75:d5:3a:85:7a:76:8e:98:e2:df:1b:40:89:
                    de:f7:fe:eb:cb:e4:dd:98:b1:12:c2:13:49:36:08:
                    ab:d3:35:50:67:bf:3e:e1:29:77:4c:ec:09:42:ac:
                    05:9e:5f:e1:30:4e:af:1c:08:db:b7:b8:14:b9:88:
                    b2:6f:6f:05:69:28:be:96:f0:3a:01:e0:0a:cc:1f:
                    bb:74:62:bc:78:c4:f6:99:53:25:57:42:cf:ee:18:
                    72:c5:0e:e5:ca:c7:0d:c6:ac:e5:df:d6:c9:1a:2c:
                    71:05:17:ac:65:28:55:8f:49:d2:c8:d7:62:a2:ea:
                    9f:cd:0a:a5:cb:4f:f6:2e:07:48:bf:d1:54:85:09:
                    f6:c3:99:e1:e5:c7:68:82:06:2d:a3:5d:d4:9e:ed:
                    60:36:f0:9e:37:c4:0b:d6:a2:4a:19:8e:ea:79:33:
                    7d:86:8b:67:f1:1c:db:8b:9e:15:c9:b0:cb:c4:21:
                    11:60:ff:d3:58:96:da:16:a0:38:a2:79:e6:d4:7f:
                    e4:93:9d:ef:e5:c1:57:68:37:e5:a9:c0:ea:d2:98:
                    80:83:55:c4:60:a5:4b:d3:48:f2:17:2c:9b:2e:34:
                    21:78:8d:03:11:63:9c:fb:70:c1:3f:f0:ad:79:f2:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6B:2F:9C:13:31:08:8D:0F:D8:03:4F:8D:3E:A2:CB:DC:21:B3:23
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ff:5c:54:fd:f1:79:b4:96:68:72:16:6f:70:fe:0b:e8:0e:
         c4:7e:d3:08:85:93:4b:8e:ab:dd:d5:2f:f0:f6:bb:2b:31:2a:
         2f:53:3b:30:dc:f3:f3:9d:cc:40:5a:f8:35:94:1a:c9:f8:01:
         7d:00:bf:d2:e2:a7:ad:43:6e:6c:6d:c0:21:e1:4e:4f:1a:31:
         9f:3a:41:3a:e8:fc:5c:43:40:dc:54:81:45:54:08:2d:81:c1:
         65:3b:2c:19:7c:63:51:73:3b:e6:16:c2:1b:30:6a:3a:d6:07:
         a8:fa:68:9c:b9:79:5f:67:55:16:b0:cf:26:ac:48:a6:fb:5e:
         16:ee:46:db:82:6d:82:3e:e3:3d:95:7e:40:b3:47:e3:d5:a1:
         87:73:72:49:a8:b7:20:6b:ae:45:ec:14:e8:ed:bd:61:65:ab:
         dd:2a:6b:a9:a2:bf:7d:07:ed:eb:6a:e4:38:b2:24:2c:55:05:
         92:27:52:ff:0b:be:fe:1a:79:5a:52:0d:09:6f:ec:af:4b:90:
         68:3e:4b:84:c3:ba:ae:94:14:2e:02:d9:09:9f:2d:d3:94:ba:
         6d:10:c6:dd:47:73:6b:d2:65:45:b5:6f:96:2c:c3:a5:25:41:
         c9:c6:70:75:79:ed:9b:e5:19:96:70:0f:af:6b:8b:10:2e:8f:
         05:ef:86:b7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBCowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUJDNDRBRjExMC8GA1UEBRMoMkQwMDE1NEU2MDBBNjQwQUMzMkEzMjg1RDlDRTlG
QzUwQTk0MUFCMzAeFw0yNTA0MTIwMjA3NDdaFw0yNTA0MTQwMjA3NDdaMBgxFjAU
BgNVBAMTDTY3ZjljYWYzLWExMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsUE02F9UTvt8tpZp2PjE5ddU6hXp2jpji3xtAid73/uvL5N2YsRLCE0k2
CKvTNVBnvz7hKXdM7AlCrAWeX+EwTq8cCNu3uBS5iLJvbwVpKL6W8DoB4ArMH7t0
Yrx4xPaZUyVXQs/uGHLFDuXKxw3GrOXf1skaLHEFF6xlKFWPSdLI12Ki6p/NCqXL
T/YuB0i/0VSFCfbDmeHlx2iCBi2jXdSe7WA28J43xAvWokoZjup5M32Gi2fxHNuL
nhXJsMvEIRFg/9NYltoWoDiieebUf+STne/lwVdoN+WpwOrSmICDVcRgpUvTSPIX
LJsuNCF4jQMRY5z7cME/8K158vnHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU52sv
nBMxCI0P2ANPjT6iy9whsyMwHwYDVR0jBBgwFoAULQAVTmAKZArDKjKF2c6fxQqU
GrMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCQzQ0Lzg5MkQ0OUM2RjYxODExRUNCRTFCMzhBRkYxMjIyNDY4L0xRQVZU
bUFLWkFyREtqS0YyYzZmeFFxVUdyTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xRQVZUbUFLWkFyREtqS0YyYzZmeFFxVUdyTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUJDNDQvODkyRDQ5QzZGNjE4MTFFQ0JFMUIzOEFGRjEy
MjI0NjgvTFFBVlRtQUtaQXJES2pLRjJjNmZ4UXFVR3JNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCg/1xU/fF5tJZochZvcP4L6A7EftMI
hZNLjqvd1S/w9rsrMSovUzsw3PPzncxAWvg1lBrJ+AF9AL/S4qetQ25sbcAh4U5P
GjGfOkE66PxcQ0DcVIFFVAgtgcFlOywZfGNRczvmFsIbMGo61geo+micuXlfZ1UW
sM8mrEim+14W7kbbgm2CPuM9lX5As0fj1aGHc3JJqLcga65F7BTo7b1hZavdKmup
or99B+3rauQ4siQsVQWSJ1L/C77+GnlaUg0Jb+yvS5BoPkuEw7qulBQuAtkJny3T
lLptEMbdR3Nr0mVFtW+WLMOlJUHJxnB1ee2b5RmWcA+va4sQLo8F74a3
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:41:54 2025 by rpki-client