Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
File:                     qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json)
Hash identifier:          V/jSEcGhLzsDkrH19/cHykv44wVq1c9bRNbAW6T5+pc=
Subject key identifier:   63:61:D6:85:7A:82:7E:5E:1D:27:C0:D4:59:2F:1D:86:9F:70:44:84
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Certificate issuer:       /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial:       04AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
Manifest number:          04AB
Signing time:             Sat 05 Apr 2025 01:57:27 +0000
Manifest this update:     Sat 05 Apr 2025 01:57:26 +0000
Manifest next update:     Mon 07 Apr 2025 01:57:26 +0000
Files and hashes:         1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: DINnGeMbcoEVOI9JIPNZEZFWARIJHMElhy6XdgINBIM=)
                          2: B4CDDFBA096511F09EE29CA4762E951A.roa (hash: AGjlXws4tctUuB4WUyHecSclAJY+HCC3k/CqmlHphvQ=)
                          3: 4A7BCEDE833411ECA330C8B25A40D577.roa (hash: w7j8NF07MRPRcWLZHO+fmpCs8k7Jimz6EpCqZnbOkz8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Apr 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197 (0x4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628E9AF
        Validity
            Not Before: Apr  5 01:57:26 2025 GMT
            Not After : Apr  7 01:57:26 2025 GMT
        Subject: CN=67f08e07-9a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:60:b1:da:4d:e0:9e:2a:be:f2:58:ff:de:
                    cf:45:15:6a:bc:51:da:9f:c5:84:b4:7c:8d:9d:c6:
                    85:b3:cb:15:13:71:a2:57:be:52:28:76:a8:e8:d9:
                    6c:cb:f0:50:bd:2b:b5:21:07:7c:d5:ff:d9:47:dd:
                    6a:9a:dd:69:6a:be:e7:d9:f7:ac:a2:00:e6:e6:2b:
                    79:5f:b8:37:af:36:63:34:3d:b7:f4:ac:3d:1a:82:
                    d6:33:0a:47:ac:0f:1f:ea:2d:42:92:26:e6:e0:75:
                    28:d4:47:3c:fe:50:3d:ad:b1:98:74:89:bc:e2:b0:
                    09:c5:38:30:10:c2:8c:ba:45:32:0b:8e:1f:fd:87:
                    f6:3e:fa:ad:71:12:05:5a:ad:b1:0e:b2:27:30:12:
                    58:5f:ca:b2:a5:1a:60:55:f3:88:4d:3d:55:a5:41:
                    f5:65:c8:0a:76:eb:a1:38:18:ba:6d:82:ee:3f:1c:
                    63:2f:7e:d6:c5:58:8a:87:7f:0f:d9:09:8d:cc:99:
                    db:24:83:31:5b:71:b9:a4:97:7f:2a:ad:4a:f1:fa:
                    83:d2:91:25:73:35:eb:4d:9d:b8:cd:23:fd:5b:e4:
                    3c:f9:2f:ac:be:ed:90:0f:95:22:d5:ff:c5:61:75:
                    38:43:94:9f:f8:4b:a7:cb:db:81:09:59:73:8c:91:
                    ba:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:61:D6:85:7A:82:7E:5E:1D:27:C0:D4:59:2F:1D:86:9F:70:44:84
            X509v3 Authority Key Identifier:
                keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:15:33:64:60:7d:2b:da:0e:3d:cc:3c:c3:90:b4:11:7c:f4:
         36:bd:54:a2:8c:5b:26:0a:ce:fb:98:82:09:0b:d9:20:89:d2:
         d4:da:f2:e8:25:a2:6e:61:65:1f:98:89:1e:d1:dc:b7:54:d3:
         9c:de:16:24:81:bb:60:68:f2:45:f2:f8:a4:8f:9e:cd:c9:33:
         bd:77:ba:ae:86:ba:2c:66:f1:0f:86:9b:9f:15:ff:3e:81:76:
         64:1a:05:45:7b:6e:36:b0:4b:e2:3d:7d:d1:1b:52:0e:e0:24:
         39:1d:0f:e3:5a:1a:7a:42:ad:f8:75:5e:9d:18:1e:19:4f:24:
         60:77:e3:93:fa:35:1b:07:ec:9f:e4:64:97:55:78:8f:de:c6:
         1f:8b:8a:bf:32:8f:1f:64:68:a5:bf:e5:c1:d1:b2:4f:ed:53:
         91:dc:49:b8:8f:eb:ea:04:2f:b0:fc:5e:12:b1:36:79:47:62:
         0f:7a:2a:d8:b1:8b:a1:db:9f:74:a4:f7:d5:b6:2c:22:94:b3:
         28:8c:ac:a9:87:80:76:99:0b:8e:a3:2d:72:b2:53:c6:6b:e1:
         07:17:66:19:de:78:15:32:43:d3:3f:38:ca:dd:f4:8c:99:0a:
         d5:fd:96:a4:cc:39:14:d3:56:86:b1:67:5d:82:0a:11:98:43:
         7e:2c:cc:c7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjI4RTlBRjExMC8GA1UEBRMoQThFRDlGREM5NzY5RUY2RDM3NDFCOUREQUU3MjNE
MzE4MTY1RTc1MDAeFw0yNTA0MDUwMTU3MjZaFw0yNTA0MDcwMTU3MjZaMBgxFjAU
BgNVBAMTDTY3ZjA4ZTA3LTlhMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAimCx2k3gniq+8lj/3s9FFWq8UdqfxYS0fI2dxoWzyxUTcaJXvlIodqjo
2WzL8FC9K7UhB3zV/9lH3Wqa3WlqvufZ96yiAObmK3lfuDevNmM0Pbf0rD0agtYz
CkesDx/qLUKSJubgdSjURzz+UD2tsZh0ibzisAnFODAQwoy6RTILjh/9h/Y++q1x
EgVarbEOsicwElhfyrKlGmBV84hNPVWlQfVlyAp266E4GLptgu4/HGMvftbFWIqH
fw/ZCY3MmdskgzFbcbmkl38qrUrx+oPSkSVzNetNnbjNI/1b5Dz5L6y+7ZAPlSLV
/8VhdThDlJ/4S6fL24EJWXOMkbo/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUY2HW
hXqCfl4dJ8DUWS8dhp9wRIQwHwYDVR0jBBgwFoAUqO2f3Jdp7203QbndrnI9MYFl
51AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyOEU5L0ZDRENEMTI0ODMzMjExRUM4OTBBMEJBRjVBNDBENTc3L3FPMmYz
SmRwNzIwM1FibmRybkk5TVlGbDUxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FPMmYzSmRwNzIwM1FibmRybkk5TVlGbDUxQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjI4RTkvRkNEQ0QxMjQ4MzMyMTFFQzg5MEEwQkFGNUE0
MEQ1NzcvcU8yZjNKZHA3MjAzUWJuZHJuSTlNWUZsNTFBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2FTNkYH0r2g49zDzDkLQRfPQ2vVSi
jFsmCs77mIIJC9kgidLU2vLoJaJuYWUfmIke0dy3VNOc3hYkgbtgaPJF8vikj57N
yTO9d7quhrosZvEPhpufFf8+gXZkGgVFe242sEviPX3RG1IO4CQ5HQ/jWhp6Qq34
dV6dGB4ZTyRgd+OT+jUbB+yf5GSXVXiP3sYfi4q/Mo8fZGilv+XB0bJP7VOR3Em4
j+vqBC+w/F4SsTZ5R2IPeirYsYuh2590pPfVtiwilLMojKyph4B2mQuOoy1yslPG
a+EHF2YZ3ngVMkPTPzjK3fSMmQrV/ZakzDkU01aGsWddggoRmEN+LMzH
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:05 2025 by rpki-client