Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
File:                     TwSz--IMFQm6-aos_oN2Xy6WnK4.mft (raw, json)
Hash identifier:          8zpM2KKNXBEg5Ret2yokeHlef5rAEA0+7ruRaHvdoPU=
Subject key identifier:   D3:C3:F4:B3:9B:9C:7E:5A:F8:F8:25:75:52:29:C1:7E:22:D7:43:75
Authority key identifier: 4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE
Certificate issuer:       /CN=F368BE0BAF/serialNumber=4F04B3FBE20C1509BAF9AA2CFE83765F2E969CAE
Certificate serial:       D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
Manifest number:          CF
Signing time:             Thu 03 Apr 2025 03:14:38 +0000
Manifest this update:     Thu 03 Apr 2025 03:14:37 +0000
Manifest next update:     Sat 05 Apr 2025 03:14:37 +0000
Files and hashes:         1: TwSz--IMFQm6-aos_oN2Xy6WnK4.crl (hash: zb2NcBHRffg7ADkDt8qPSC4TH4lFG4haPxn48kmkzyQ=)
                          2: 60B3D914750111EFA5E0E087762E951A.roa (hash: UtfppmUEN5RqKXCtw1VeKzrsyq6Tj8yeIDmUGAHWijE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BE0BAF
        Validity
            Not Before: Apr  3 03:14:37 2025 GMT
            Not After : Apr  5 03:14:37 2025 GMT
        Subject: CN=67edfd1e-cf94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:c2:ac:d0:de:7e:74:b7:49:05:60:ed:0e:
                    65:89:dc:70:2b:7d:01:42:df:f8:49:4a:e3:2e:b7:
                    8a:36:98:72:39:04:b2:48:f2:c3:6b:30:3e:c9:62:
                    f3:01:67:eb:45:fb:d6:9f:2b:44:b3:24:fd:dc:dc:
                    b6:70:1e:b6:1f:12:53:7e:1b:cf:eb:2a:89:fd:fe:
                    97:55:48:48:88:c6:99:5b:1c:4c:16:35:bc:6b:20:
                    f8:72:de:f3:44:c9:c3:a2:ad:70:39:70:10:2f:e9:
                    6e:a9:01:bd:cd:77:08:d4:bd:9f:33:a2:82:c8:47:
                    8e:12:1e:02:ce:cc:a6:55:7f:bb:5c:0a:b3:db:05:
                    51:f2:63:69:15:dd:48:50:fa:3c:b9:81:b7:6a:d7:
                    10:dc:d3:97:a2:6b:97:7f:27:8f:c0:dc:70:7c:1d:
                    74:13:1c:9f:d2:79:cc:ff:d8:11:ef:a8:7b:28:fb:
                    df:b2:c8:b5:21:ff:1b:84:96:aa:86:b3:0a:40:fe:
                    e1:09:be:1c:c4:d6:c7:ff:e5:cf:28:36:11:94:bd:
                    7b:2d:78:22:ed:ba:11:a9:ec:65:0c:25:c2:36:a5:
                    88:06:fc:fb:47:fb:be:ac:ff:32:23:5e:24:62:92:
                    49:6f:84:47:c5:ef:ea:d5:6b:2f:12:d1:7a:26:c9:
                    ad:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C3:F4:B3:9B:9C:7E:5A:F8:F8:25:75:52:29:C1:7E:22:D7:43:75
            X509v3 Authority Key Identifier:
                keyid:4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:15:25:e3:62:72:26:7d:87:f9:6d:ad:32:a5:4b:d4:29:20:
         3b:13:7c:ca:81:7c:50:dd:01:88:76:d3:23:b1:b0:13:fa:27:
         3d:50:69:0a:3b:8e:37:eb:31:11:1d:e7:a9:55:62:57:f9:5d:
         b1:aa:9c:62:95:cc:f1:05:80:fe:28:9f:17:af:5c:6d:15:ce:
         0b:4c:b9:9b:54:bd:e1:e3:f5:77:20:0a:0f:3d:2a:65:70:6d:
         4e:c4:75:a8:e9:97:c6:1d:55:06:00:91:73:3e:c7:e4:f4:99:
         03:89:d0:0c:87:a7:22:ff:c6:9d:42:10:eb:a6:bb:50:26:ff:
         f6:9e:82:bf:44:55:4c:89:67:ee:bd:6e:89:da:ca:58:b3:6f:
         bf:59:93:00:71:ce:ad:4e:a6:30:0c:99:1c:2e:a5:51:12:b9:
         ef:d1:b0:0f:94:17:0b:b1:af:b2:ba:9d:88:b3:ab:8c:4e:45:
         46:a1:d1:26:d3:d5:f3:c0:58:bd:2b:92:c3:49:4e:03:b8:5b:
         e7:ba:6d:1b:6e:87:db:45:2d:d8:c5:37:78:fc:3f:09:1b:e4:
         81:c4:8f:d6:58:f5:42:e8:05:34:c9:54:15:43:01:f5:ab:7f:
         90:37:05:26:6a:db:5e:a2:1f:99:59:0c:62:65:58:fe:34:a2:
         6c:5c:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:44:42 2025 by rpki-client