Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
File:                     M_vh3N40HGSYaNQWvz6gAALE3yA.mft (raw, json)
Hash identifier:          h042eM0Cb/vyyjUWiZXHejq4PUEJwktW/1tbRwLxi+k=
Subject key identifier:   B9:C9:DC:70:22:0F:EE:03:73:EE:EB:CA:A9:0E:64:9F:05:44:E1:DD
Authority key identifier: 33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
Certificate issuer:       /CN=F365C754AF/serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
Certificate serial:       02C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
Manifest number:          02C3
Signing time:             Sun 16 Feb 2025 02:29:32 +0000
Manifest this update:     Sun 16 Feb 2025 02:29:31 +0000
Manifest next update:     Tue 18 Feb 2025 02:29:31 +0000
Files and hashes:         1: M_vh3N40HGSYaNQWvz6gAALE3yA.crl (hash: 91L8V+yckOcc55t/d+6GeSihDC5+GORVW/ewPJ+rIhY=)
                          2: F72FE338F00A11EDA449686A4AD9E6FC.roa (hash: zdUQrVCgr9IHSfzR+iEYqQqzZ0KyEV2I7xjU8CSngKw=)
                          3: 075325AADB9211ED8863A90D306D8C1D.roa (hash: ewcEqd/aLYGXXQy74ilhbCeN4Nnp4H8VCOE78vyhRHg=)
                          4: B2D10BBEEE9711ED894556814AD9E6FC.roa (hash: zNbAe2xA/Ij6zG9VyzzSkdlghaCmGF5y02GKaqBdNzE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C754AF
        Validity
            Not Before: Feb 16 02:29:31 2025 GMT
            Not After : Feb 18 02:29:31 2025 GMT
        Subject: CN=67b14d8b-285b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:7b:97:e6:9d:62:ab:be:34:d6:c5:b5:9b:
                    c8:08:a0:ea:6f:e1:6f:be:72:49:3a:64:f5:9d:36:
                    9d:3b:d5:cd:f6:0b:af:7c:e3:d4:a4:26:2e:85:30:
                    e7:bd:3a:d6:3d:18:1c:c0:72:b9:7a:92:34:13:da:
                    2b:44:44:18:f1:ea:96:8e:4f:6b:05:36:a1:16:e8:
                    c6:3e:06:04:f7:89:a8:5d:3a:2b:c5:ce:d1:d0:7d:
                    5c:cb:af:56:6d:5a:4f:73:63:4a:f5:16:d4:58:83:
                    d9:dd:a2:f8:7b:ae:33:36:57:2c:f6:1a:06:b4:3a:
                    c8:63:f2:13:4a:04:74:0d:1d:c0:b2:58:73:0f:52:
                    2f:e7:1a:6b:95:23:93:fb:d6:75:cf:9e:dc:d4:fd:
                    4c:2d:8e:62:64:6d:9a:5b:17:ef:e9:62:1a:c8:76:
                    3e:7a:c3:48:fb:5e:58:91:52:3b:28:09:ca:87:1e:
                    dd:28:36:bf:52:8a:2d:f9:b7:97:e1:b0:9e:87:fc:
                    5f:bb:71:e3:a3:55:8c:26:4e:f3:55:2c:9e:f9:5f:
                    cb:03:af:80:d1:c7:69:cb:09:9d:79:6c:fd:e8:59:
                    49:53:d0:9e:81:dd:fe:a9:80:3a:23:4a:37:33:fe:
                    cf:3d:39:84:3f:f2:11:ab:65:f7:fd:d3:b9:1b:2d:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C9:DC:70:22:0F:EE:03:73:EE:EB:CA:A9:0E:64:9F:05:44:E1:DD
            X509v3 Authority Key Identifier:
                keyid:33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:6d:95:72:74:23:73:93:ac:f1:e8:06:8e:ff:7a:4e:89:
         6b:76:7e:83:7d:89:9a:49:4b:9c:1b:68:00:93:57:28:ef:8e:
         e3:4c:a7:fe:5c:00:12:f3:69:03:c7:5c:3b:b6:46:05:8d:bd:
         08:84:7f:39:41:0b:a3:da:07:57:51:cb:a4:53:53:fa:a1:75:
         91:8a:c7:4d:f1:e3:0d:b7:ce:4d:20:f3:81:7c:6b:db:43:5f:
         aa:ba:7b:f2:a8:fd:d7:65:b6:49:aa:ee:06:d8:ec:30:61:1a:
         10:97:0e:08:f8:c7:11:77:ed:ed:7d:4f:99:52:eb:3c:5f:c6:
         24:03:45:60:bd:db:eb:d5:63:9b:f4:1f:76:e7:50:65:3f:76:
         47:8b:12:22:d8:e7:08:fb:03:69:67:30:d1:4c:9c:53:de:05:
         f0:04:9d:c6:b9:91:46:bc:8c:98:16:4c:82:12:cb:d7:4d:bf:
         37:4f:50:f5:7d:7c:49:10:97:3b:ac:6a:2b:f1:d1:5d:70:09:
         33:82:ec:a4:51:f1:c5:2b:26:f3:55:9a:b0:0b:c9:3d:af:d9:
         8d:95:b7:d4:13:89:0c:bf:31:ce:2c:fc:f5:2f:da:69:07:9d:
         52:77:8e:0b:45:31:2a:b5:f8:43:a2:04:53:29:bb:ce:cc:46:
         93:81:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:54 2025 by rpki-client