Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
File:                     uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft (raw, json)
Hash identifier:          +UDV9NJF/9ejCiTFpsJtBAgOiZTYhs/kvUlRiBWXSJs=
Subject key identifier:   45:2C:52:3E:A3:54:22:59:91:23:97:6F:3C:96:90:1C:3D:20:51:F3
Authority key identifier: B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
Certificate issuer:       /CN=F3686B65AF/serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
Certificate serial:       020C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
Manifest number:          0203
Signing time:             Thu 03 Apr 2025 02:46:09 +0000
Manifest this update:     Thu 03 Apr 2025 02:46:08 +0000
Manifest next update:     Sat 05 Apr 2025 02:46:08 +0000
Files and hashes:         1: uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl (hash: DEse0OGlJbl+Uu6nVE4/f5AHqJIHapN9AdvdzpKAuYQ=)
                          2: 41353ABCC22111EEB2919A95775412E6.roa (hash: oXcQymFlE/krOOEr4NVVaSaifs3aMH0vQz8dpJbk6Hw=)
                          3: 8E74FB4879B211EF8A6E278A762E951A.roa (hash: HVgCoNFWTE1lwq+yr47vjP6O5PwPrCMNfBORofraa3A=)
                          4: 431E183C79EE11EFAA7EEE76762E951A.roa (hash: 7aSukpXTBzkjxwef0CwTrreS0uSqRQoE76LmOrIjIRE=)
                          5: 59BC8CC8704211EF9670AC4C762E951A.roa (hash: YHGbrYfTK/XykaZGHLmnPu2OovDDz4Wf7WXTsS/BDLI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3686B65AF
        Validity
            Not Before: Apr  3 02:46:08 2025 GMT
            Not After : Apr  5 02:46:08 2025 GMT
        Subject: CN=67edf671-e11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:57:1b:bc:57:ec:cf:50:68:c4:0d:59:44:
                    68:de:f0:e2:e4:29:8b:16:ec:03:6c:31:36:9d:fd:
                    d9:33:0e:c3:70:35:4e:3b:e0:ba:38:f7:7d:fd:a3:
                    5f:f3:75:b2:7d:0e:4b:e8:a5:e8:e8:64:d5:45:f0:
                    3e:ce:81:ea:27:c2:7e:08:98:40:6e:fc:f2:22:cc:
                    97:ba:b0:39:35:3a:43:fd:7a:de:6c:65:65:a2:9e:
                    7f:73:92:cd:bb:1a:e5:8a:a7:ea:48:35:f4:a4:d9:
                    51:74:65:dc:b7:ac:51:dc:dd:e0:85:34:f2:99:1c:
                    a0:60:04:3b:81:db:08:4b:53:31:59:59:c2:6d:ac:
                    cf:81:e8:c7:fe:14:a4:d1:91:86:0c:df:53:a2:4b:
                    3d:3c:65:9c:f0:cc:ec:35:e6:3c:4a:7b:dc:9c:7e:
                    5e:a5:dd:52:d2:a2:89:21:6c:61:dd:48:48:80:fb:
                    b7:a3:dd:ee:42:13:47:38:51:14:78:4c:a7:a8:86:
                    6c:9b:86:2c:1d:02:3e:5a:78:f8:f6:d0:91:82:5b:
                    97:c9:0a:06:3b:5d:79:88:e5:a1:c2:0f:48:8a:17:
                    ff:2a:e7:86:c4:63:c1:e9:0b:00:a7:5b:39:dd:60:
                    ea:70:f0:b9:57:b0:db:80:b7:0f:1c:f1:87:53:b2:
                    97:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2C:52:3E:A3:54:22:59:91:23:97:6F:3C:96:90:1C:3D:20:51:F3
            X509v3 Authority Key Identifier:
                keyid:B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:a3:c9:ef:ca:1b:4e:0b:c7:12:c9:4d:68:95:8d:f9:18:93:
         9b:af:56:7b:dd:47:61:23:47:a5:ae:eb:47:a7:c2:be:ab:c2:
         3d:e5:d2:7f:56:c7:fe:c6:67:04:41:f6:70:b3:e0:6e:0e:d6:
         18:52:ec:90:10:0d:9a:9c:26:9a:87:ce:a9:fa:22:ee:27:d3:
         33:c1:aa:df:45:4e:a8:ed:dc:16:85:60:98:46:b4:ed:a5:81:
         d7:2d:f1:63:b9:b8:e8:a6:69:af:31:df:7a:dd:e2:94:f8:3a:
         2e:d3:98:d1:45:c5:63:88:6d:4a:65:c8:9a:b1:0c:4d:90:61:
         09:1d:98:e9:9f:44:7c:7b:a0:ea:75:9b:39:b6:21:0b:d3:79:
         9f:eb:42:3c:e1:cb:01:1b:08:16:ef:5e:6f:9a:20:36:22:07:
         28:6e:b1:d3:da:18:2d:7d:33:a7:c3:25:5b:56:8e:89:fa:c4:
         ca:3b:81:14:08:c8:6d:6c:a1:26:7d:94:46:9e:0e:9e:83:a3:
         37:57:f6:6a:06:23:78:76:f2:12:e1:f3:77:2e:c7:d2:74:75:
         74:5e:2f:aa:6c:21:71:af:2e:3e:a0:93:fd:43:f8:e6:dc:42:
         71:11:99:7e:ff:79:ac:27:75:df:a8:c4:79:b4:ac:fa:e7:2b:
         a6:14:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:48:16 2025 by rpki-client