Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          NSkPdbeqPfvaVd0/MUdkhk9zONhUDjmrJOY5q3qLzcU=
Subject key identifier:   73:F3:39:0A:3C:66:33:E4:BE:61:34:43:53:8D:E5:79:73:A6:BC:75
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       0190
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          018E
Signing time:             Thu 03 Apr 2025 02:58:34 +0000
Manifest this update:     Thu 03 Apr 2025 02:58:34 +0000
Manifest next update:     Sat 05 Apr 2025 02:58:34 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: JRP5gFkZm1f4+Xa4qgXPRqsbB0SLZKn5hN/ssX7s7WM=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF
        Validity
            Not Before: Apr  3 02:58:34 2025 GMT
            Not After : Apr  5 02:58:34 2025 GMT
        Subject: CN=67edf95a-13f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:d1:16:17:7e:62:83:5e:1e:eb:cf:48:aa:
                    64:36:16:b6:b6:81:c7:b7:4d:ce:45:9a:b5:5a:c9:
                    8f:e4:46:65:7c:c2:ff:27:12:94:f1:00:ad:4b:6e:
                    20:7c:7e:ce:9d:0b:4a:ef:ee:ce:7f:6b:03:2c:4d:
                    ed:09:4f:82:ec:f2:c2:da:ee:80:cb:34:ff:a0:87:
                    c5:2f:88:64:be:04:0e:aa:d9:da:33:0d:cf:54:3b:
                    5a:fc:91:cf:43:33:fa:c0:be:d4:a2:de:b2:7f:b1:
                    15:df:12:03:a7:ff:8f:a7:2f:c9:1c:e3:3e:1f:f3:
                    75:1a:02:73:93:66:ec:a9:c6:4a:ba:ce:8b:6d:c7:
                    cb:70:c4:95:b5:94:9e:ac:27:49:2a:fa:f4:d5:d6:
                    48:df:11:ae:c2:f0:0c:0c:88:dc:54:12:ae:57:8b:
                    51:76:60:08:ef:24:92:ae:9a:94:b5:21:ea:2b:d7:
                    ab:2c:de:60:75:bd:3f:29:59:26:52:0f:32:7b:c1:
                    07:75:19:50:9a:05:a5:54:a6:f9:f6:05:16:0d:ea:
                    ec:77:66:1a:33:95:fb:6e:a7:4f:4d:f3:0b:69:0a:
                    a3:b2:a3:28:7d:90:6a:55:3e:61:e5:a5:e1:03:7c:
                    58:56:25:f9:33:31:fb:48:af:45:21:f1:79:cf:eb:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F3:39:0A:3C:66:33:E4:BE:61:34:43:53:8D:E5:79:73:A6:BC:75
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:58:e7:4f:3f:6b:b8:e5:f4:e1:15:81:93:a7:43:b0:13:9e:
         40:fd:11:73:78:51:b8:f9:c6:ff:b1:97:79:8f:92:dd:d0:b4:
         35:e1:d3:98:96:95:c1:82:35:c3:37:eb:14:43:0f:fe:6f:28:
         14:fb:1a:50:12:46:5d:d1:02:18:bc:7c:d8:21:b8:20:a5:c8:
         0f:ee:e3:f3:aa:58:06:dd:26:9b:4d:1a:68:95:f1:63:29:52:
         b2:ff:95:d5:cc:dc:7d:03:ff:1b:1c:c9:24:c7:41:e6:35:15:
         00:1a:e5:39:ae:6b:15:65:52:35:a1:bf:7f:e2:17:39:79:14:
         91:d4:91:a5:e7:05:1a:93:c6:5c:39:d9:d3:6d:7f:f4:b7:fa:
         fc:b8:b5:85:b4:93:2e:85:4b:56:7b:2f:25:df:db:65:94:1b:
         01:8a:31:08:fc:93:63:45:19:50:e9:fc:41:05:6e:4b:e1:da:
         d7:26:a6:62:1a:90:ea:3e:f8:33:c3:23:40:5e:3d:2c:9f:66:
         79:04:5d:a8:b4:1c:b0:9d:d5:82:bf:27:14:48:1a:be:81:47:
         3b:ae:5c:6b:db:b0:23:bf:c2:01:11:51:6a:ac:db:0a:aa:6d:
         db:8f:5b:6d:70:a4:7b:16:2d:ef:af:74:53:4e:fc:65:d8:b8:
         8b:ca:a1:83
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk2ODBBRjExMC8GA1UEBRMoQkEyRkZENUNFMzdDMDFDNkVEOTRGQjk1QzM1OEQ3
MEEyOThEQzk3NDAeFw0yNTA0MDMwMjU4MzRaFw0yNTA0MDUwMjU4MzRaMBgxFjAU
BgNVBAMTDTY3ZWRmOTVhLTEzZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUYtEWF35ig14e689IqmQ2Fra2gce3Tc5FmrVayY/kRmV8wv8nEpTxAK1L
biB8fs6dC0rv7s5/awMsTe0JT4Ls8sLa7oDLNP+gh8UviGS+BA6q2dozDc9UO1r8
kc9DM/rAvtSi3rJ/sRXfEgOn/4+nL8kc4z4f83UaAnOTZuypxkq6zottx8twxJW1
lJ6sJ0kq+vTV1kjfEa7C8AwMiNxUEq5Xi1F2YAjvJJKumpS1Ieor16ss3mB1vT8p
WSZSDzJ7wQd1GVCaBaVUpvn2BRYN6ux3Zhozlftup09N8wtpCqOyoyh9kGpVPmHl
peEDfFhWJfkzMftIr0Uh8XnP6/O1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUc/M5
CjxmM+S+YTRDU43leXOmvHUwHwYDVR0jBBgwFoAUui/9XON8AcbtlPuVw1jXCimN
yXQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NjgwLzY3MTAxRjUwRTI5MTExRUVCQzlBNzI1ODc3NTQxMkU2L3VpXzlY
T044QWNidGxQdVZ3MWpYQ2ltTnlYUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VpXzlYT044QWNidGxQdVZ3MWpYQ2ltTnlYUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzk2ODAvNjcxMDFGNTBFMjkxMTFFRUJDOUE3MjU4Nzc1
NDEyRTYvdWlfOVhPTjhBY2J0bFB1VncxalhDaW1OeVhRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhWOdPP2u45fThFYGTp0OwE55A/RFz
eFG4+cb/sZd5j5Ld0LQ14dOYlpXBgjXDN+sUQw/+bygU+xpQEkZd0QIYvHzYIbgg
pcgP7uPzqlgG3SabTRpolfFjKVKy/5XVzNx9A/8bHMkkx0HmNRUAGuU5rmsVZVI1
ob9/4hc5eRSR1JGl5wUak8ZcOdnTbX/0t/r8uLWFtJMuhUtWey8l39tllBsBijEI
/JNjRRlQ6fxBBW5L4drXJqZiGpDqPvgzwyNAXj0sn2Z5BF2otBywndWCvycUSBq+
gUc7rlxr27Ajv8IBEVFqrNsKqm3bj1ttcKR7Fi3vr3RTTvxl2LiLyqGD
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:38:52 2025 by rpki-client