Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
File:                     C9AISPg4_ZC5ntw3aQcglV-wCQY.mft (raw, json)
Hash identifier:          iF1jHrjtyfzmN1M9hkt3zVG2+SgTSuCUI5xS4V4tBYo=
Subject key identifier:   DB:93:AD:CF:99:E0:59:F4:B6:D2:D9:EC:89:C6:46:BA:26:69:B3:91
Authority key identifier: 0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
Certificate issuer:       /CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Certificate serial:       045B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
Manifest number:          0452
Signing time:             Sun 08 Jun 2025 03:04:11 +0000
Manifest this update:     Sun 08 Jun 2025 03:04:10 +0000
Manifest next update:     Tue 10 Jun 2025 03:04:10 +0000
Files and hashes:         1: C9AISPg4_ZC5ntw3aQcglV-wCQY.crl (hash: NsGdO52r0WgA18h3ppKjrPUo1e4TZVUQyo0/Z4ptI3Q=)
                          2: D183ECC8085B11EFB55C9B09017001B1.roa (hash: 0wIzN3h+rbMY0RCClFPjyEoqaeNOqCrB7nmVrP7H1cQ=)
                          3: 034B4056317011F0960BB9BBDAE4EC9C.roa (hash: 8EdsfqrdTyiR6sjIsfm2OCwX3gpoE6Lu3uWVDJVedCo=)
                          4: E6DF30E4F82B11EFA5C0E79C762E951A.roa (hash: XT/378XgrexD0cGPoUkpGHpC1ayYncJAvh9qFOMCnmA=)
                          5: 72363EB671BE11EF838644A0762E951A.roa (hash: PA/h5ekoPNUQiLuqHkxlB+THQPCIzkVE47Cb2Ae6PV4=)
                          6: D6C5DD44697011ED921888E1F1222468.roa (hash: 6qobUBR5lY4TVVfXDdQHOyj3miAJRqZDg8CWZOUWKVs=)
                          7: 40DDBBD0697011ED9FF1D1DFF1222468.roa (hash: 9yUPzierdn2O592kHymHo5qeiCIOptKnSJWBFxxbCyk=)
                          8: F651CEB6579011EE8A5472724AD9E6FC.roa (hash: 5bXimLkE8Qqx3GSG77JS4WMgm65eY1+wSpVGQZoXe9k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662367AF, serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
        Validity
            Not Before: Jun  8 03:04:10 2025 GMT
            Not After : Jun 10 03:04:10 2025 GMT
        Subject: CN=6844fdab-4be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:22:dd:be:69:f2:1b:27:08:f0:03:fa:25:
                    cf:19:c3:08:e0:3e:56:b2:9e:41:12:94:d5:80:8b:
                    dc:54:45:55:32:77:14:2f:50:ee:9c:b6:bb:b6:81:
                    34:52:5d:8d:66:fa:4d:33:d1:a0:d5:75:ab:49:97:
                    7d:b8:f6:2c:55:f7:83:d9:f1:53:ac:dc:a6:b2:2f:
                    e1:68:a0:c1:f6:e1:e7:bc:44:69:af:90:74:88:f6:
                    1d:9e:63:ec:0e:96:ed:a7:ec:e2:0a:19:6d:2c:2c:
                    cc:5d:01:26:36:13:28:07:60:3c:c6:6c:94:61:40:
                    dd:50:8e:68:96:8b:83:cd:2a:85:e9:f5:cf:c7:43:
                    d7:7f:ec:7c:0c:ee:74:c7:da:fc:3f:a9:c3:c1:36:
                    3f:80:1b:6f:f5:1b:96:85:62:b3:d0:e1:47:26:5b:
                    bd:ae:a2:53:a8:c6:53:22:d9:bd:68:df:1b:2f:1b:
                    f9:60:f9:b1:1f:ed:91:ab:6b:95:c0:e3:30:19:48:
                    df:db:13:4a:82:b8:54:b7:27:70:cb:5f:21:91:6d:
                    59:2b:94:d0:e7:cb:33:b2:22:85:db:5b:63:a2:d4:
                    fd:3d:f2:db:31:36:76:ca:10:40:95:0d:5d:07:04:
                    01:ab:93:da:b2:9a:f3:86:91:37:ec:37:8a:ed:02:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:93:AD:CF:99:E0:59:F4:B6:D2:D9:EC:89:C6:46:BA:26:69:B3:91
            X509v3 Authority Key Identifier:
                keyid:0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e7:f3:f9:44:b1:ac:7d:d5:b4:d4:2b:0b:d7:82:d2:8b:33:
         1a:ad:58:a5:d8:a7:0b:19:6f:07:6f:ed:2b:51:8c:a3:0c:45:
         f9:73:74:ed:ee:da:e3:e6:71:49:aa:40:f4:ff:45:48:12:26:
         86:ff:4f:85:07:c7:9a:ac:b5:0c:b7:22:dc:e4:17:32:92:a9:
         7f:ca:08:03:cd:34:ec:3f:b5:bc:a6:0d:54:29:ca:b1:14:0f:
         7f:a9:16:28:3d:d6:a1:e2:3e:56:54:ba:f7:78:21:3d:b2:d7:
         bb:f9:e2:44:06:3e:56:5d:85:00:02:22:1d:2b:a7:43:46:a2:
         fe:eb:20:5b:cb:a1:b2:a2:58:07:94:7e:f8:12:2e:68:9f:db:
         3d:79:f3:7d:5f:e9:95:02:7d:70:d0:7b:a8:fb:e2:6b:52:99:
         c4:a5:6f:89:cb:0e:21:7c:79:3c:84:bf:c5:f6:b4:0b:1f:8d:
         67:59:93:ce:61:74:fe:7f:2f:b3:f8:f6:2c:5f:31:c1:17:e6:
         e2:b8:61:c3:9a:5f:a9:41:6f:e5:0c:0f:dc:d6:8f:e3:b6:a3:
         45:07:ce:17:29:75:01:8d:8b:5d:7d:68:ec:76:38:39:d2:82:
         c0:55:54:58:60:95:bc:48:2a:cb:3e:c5:d9:d9:c0:23:3a:5b:
         85:64:b7:0f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjIzNjdBRjExMC8GA1UEBRMoMEJEMDA4NDhGODM4RkQ5MEI5OUVEQzM3NjkwNzIw
OTU1RkIwMDkwNjAeFw0yNTA2MDgwMzA0MTBaFw0yNTA2MTAwMzA0MTBaMBgxFjAU
BgNVBAMTDTY4NDRmZGFiLTRiZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWMiLdvmnyGycI8AP6Jc8ZwwjgPlaynkESlNWAi9xURVUydxQvUO6ctru2
gTRSXY1m+k0z0aDVdatJl3249ixV94PZ8VOs3KayL+FooMH24ee8RGmvkHSI9h2e
Y+wOlu2n7OIKGW0sLMxdASY2EygHYDzGbJRhQN1QjmiWi4PNKoXp9c/HQ9d/7HwM
7nTH2vw/qcPBNj+AG2/1G5aFYrPQ4UcmW72uolOoxlMi2b1o3xsvG/lg+bEf7ZGr
a5XA4zAZSN/bE0qCuFS3J3DLXyGRbVkrlNDnyzOyIoXbW2Oi1P098tsxNnbKEECV
DV0HBAGrk9qymvOGkTfsN4rtAuh7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU25Ot
z5ngWfS20tnsicZGuiZps5EwHwYDVR0jBBgwFoAUC9AISPg4/ZC5ntw3aQcglV+w
CQYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyMzY3L0I0NTA4Q0U4MDgyMDExRUQ4Mjg1ODhGN0YxMjIyNDY4L0M5QUlT
UGc0X1pDNW50dzNhUWNnbFYtd0NRWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0M5QUlTUGc0X1pDNW50dzNhUWNnbFYtd0NRWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjIzNjcvQjQ1MDhDRTgwODIwMTFFRDgyODU4OEY3RjEy
MjI0NjgvQzlBSVNQZzRfWkM1bnR3M2FRY2dsVi13Q1FZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCb5/P5RLGsfdW01CsL14LSizMarVil
2KcLGW8Hb+0rUYyjDEX5c3Tt7trj5nFJqkD0/0VIEiaG/0+FB8earLUMtyLc5Bcy
kql/yggDzTTsP7W8pg1UKcqxFA9/qRYoPdah4j5WVLr3eCE9ste7+eJEBj5WXYUA
AiIdK6dDRqL+6yBby6GyolgHlH74Ei5on9s9efN9X+mVAn1w0Huo++JrUpnEpW+J
yw4hfHk8hL/F9rQLH41nWZPOYXT+fy+z+PYsXzHBF+biuGHDml+pQW/lDA/c1o/j
tqNFB84XKXUBjYtdfWjsdjg50oLAVVRYYJW8SCrLPsXZ2cAjOluFZLcP
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:44:36 2025 by rpki-client