Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
File:                     79LD3jroxM6ee5PJ99RbqS6xTow.mft (raw, json)
Hash identifier:          htu2lKe+DXzg6rRwVeJm/+ajDTSsO6feVNV7CGn0AJE=
Subject key identifier:   EB:3B:0A:70:3D:67:4B:21:40:FC:46:FD:68:97:F0:C7:21:94:C2:1B
Authority key identifier: EF:D2:C3:DE:3A:E8:C4:CE:9E:7B:93:C9:F7:D4:5B:A9:2E:B1:4E:8C
Certificate issuer:       /CN=F3676EF0AF/serialNumber=EFD2C3DE3AE8C4CE9E7B93C9F7D45BA92EB14E8C
Certificate serial:       B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
Manifest number:          AF
Signing time:             Sun 16 Feb 2025 03:12:55 +0000
Manifest this update:     Sun 16 Feb 2025 03:12:54 +0000
Manifest next update:     Tue 18 Feb 2025 03:12:54 +0000
Files and hashes:         1: 79LD3jroxM6ee5PJ99RbqS6xTow.crl (hash: sKh29zdvYRHcsrD/m8woaZESxXn6V3X/7N9OfPGFy6s=)
                          2: 20A5B5426AAF11EF9EC3AA42762E951A.roa (hash: 0P+WY7UOiMY+YcWMWFMkGPCy9cUGpM29pOZMdtFlc64=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
                          rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AF
        Validity
            Not Before: Feb 16 03:12:54 2025 GMT
            Not After : Feb 18 03:12:54 2025 GMT
        Subject: CN=67b157b7-605d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:6d:a8:03:21:35:cd:58:ef:ed:db:db:c5:
                    53:72:e0:a0:a2:0c:7d:f5:87:d9:2c:2d:d5:73:7b:
                    74:8a:11:19:c6:e9:e5:0f:f1:58:67:ca:7f:58:b5:
                    ea:49:93:27:87:87:76:24:1e:aa:85:c1:9f:1d:36:
                    11:c5:a6:59:f3:01:8c:3d:a0:fb:2b:8d:4b:91:aa:
                    f3:23:a9:a8:ce:d1:a8:04:c5:f5:6a:ad:ba:f6:c0:
                    af:07:67:72:78:0a:2a:49:c5:ce:1d:f8:b3:bf:d1:
                    4f:85:15:d8:6f:b0:d3:25:85:aa:a1:7b:17:50:da:
                    0d:d5:51:e6:ab:d6:92:8c:14:d2:08:9b:57:16:7a:
                    ed:cb:a0:2a:51:59:bb:13:d3:e1:77:9d:dc:d8:52:
                    69:41:f9:6b:15:01:ce:39:80:dc:95:2c:1b:70:d3:
                    2c:c2:d3:d2:be:9a:ce:54:99:79:cf:82:6d:d3:0f:
                    03:80:ab:be:05:fc:ca:bd:e5:b3:38:ae:ae:c2:a0:
                    dc:9c:c6:78:79:f8:80:f5:86:b6:31:fd:71:f3:4d:
                    47:d1:d2:86:5f:dc:9c:34:3f:03:52:06:23:cb:29:
                    18:fa:fe:01:2f:93:37:20:4d:55:eb:07:2f:a7:f8:
                    4c:22:cb:68:9a:c2:d0:10:24:39:42:99:39:3a:32:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3B:0A:70:3D:67:4B:21:40:FC:46:FD:68:97:F0:C7:21:94:C2:1B
            X509v3 Authority Key Identifier:
                keyid:EF:D2:C3:DE:3A:E8:C4:CE:9E:7B:93:C9:F7:D4:5B:A9:2E:B1:4E:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9d:a1:a5:95:7a:5c:dd:01:66:61:b2:cf:5b:e9:8f:af:46:
         53:f1:bb:fb:d7:ea:10:89:b6:9a:90:b4:dc:6e:9a:96:13:83:
         74:27:24:55:e0:be:cc:c1:0c:e4:2e:d3:02:9c:d3:f6:31:84:
         b3:56:2a:85:b7:f0:f8:04:f4:49:ab:d4:9e:1a:0d:22:c7:af:
         bf:f6:a3:75:cf:39:94:9e:af:fa:47:6d:a8:b3:7d:0c:a5:e8:
         f5:ec:13:2c:55:dc:19:b7:3f:12:e5:a6:57:eb:24:39:7d:db:
         9e:c0:df:8e:5e:d2:f1:41:61:33:be:cc:1c:ed:27:3b:4a:e4:
         da:c3:50:70:c7:53:1b:c0:a2:76:93:de:10:be:f5:fe:72:a3:
         28:04:6f:a1:50:48:54:b9:38:97:be:76:21:59:b1:85:02:de:
         7f:80:7b:96:89:48:9c:8d:14:5c:30:13:fd:15:df:49:24:b1:
         23:9e:49:9a:52:e2:2d:58:e3:75:13:98:09:d1:00:3a:54:e6:
         66:63:84:d6:d5:9f:f4:1a:b3:13:d0:7a:93:2b:7f:c6:42:63:
         68:34:60:59:20:c0:aa:8e:37:4e:c9:e0:92:36:b0:38:8d:cd:
         75:60:94:4c:9f:05:f4:89:92:28:ba:f2:1c:ee:da:b2:b8:47:
         45:84:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:09 2025 by rpki-client