Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
File:                     8F9eT4U_K8znmCtaZOAuRn1NY3k.mft (raw, json)
Hash identifier:          5a42L0ItW3taxLXh+sfPwTYneQDLumwhNLnhg9k3tHM=
Subject key identifier:   57:11:9D:33:F2:5D:3B:FF:54:5E:DC:9E:05:40:31:A5:18:E2:FE:3F
Authority key identifier: F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
Certificate issuer:       /CN=F368CD07AF/serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Certificate serial:       B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
Manifest number:          B4
Signing time:             Thu 03 Apr 2025 03:16:58 +0000
Manifest this update:     Thu 03 Apr 2025 03:16:58 +0000
Manifest next update:     Sat 05 Apr 2025 03:16:58 +0000
Files and hashes:         1: 8F9eT4U_K8znmCtaZOAuRn1NY3k.crl (hash: K4gmp0IRck6HtSyRm2OEXLuxvn2MEBKJaT1kTQysIzM=)
                          2: 0587256289A811EF93AD2A50762E951A.roa (hash: 6JhA3S1UqVY6eY/SMX4lyeIJmn8FI+S8y3sFftIT63s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CD07AF
        Validity
            Not Before: Apr  3 03:16:58 2025 GMT
            Not After : Apr  5 03:16:58 2025 GMT
        Subject: CN=67edfdaa-136e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:6b:30:e6:57:49:8b:5a:34:e5:e7:94:eb:
                    a4:c0:03:71:04:db:bb:72:00:fa:d6:4e:fa:2e:ac:
                    e4:26:1e:e6:1f:b9:5a:26:0e:ad:57:d3:91:3f:96:
                    56:3a:47:96:07:f5:c6:03:4e:2e:3c:27:90:fe:79:
                    d1:4c:bf:4c:c5:5c:74:84:7c:43:c2:b5:0e:8b:4f:
                    14:76:5b:eb:0c:b9:1d:23:55:c0:e1:65:12:58:39:
                    91:7d:7f:b1:2a:00:3d:98:d0:61:01:53:4f:c3:d4:
                    fe:f0:d5:75:9d:f3:37:44:53:9f:01:97:68:42:83:
                    1a:02:ff:52:a7:10:fc:30:a5:e3:3f:92:ca:c2:a0:
                    fa:76:5d:7c:d4:3d:a9:05:03:45:0f:26:dc:7b:7a:
                    7e:52:5d:dc:e8:ea:ba:fe:fe:0f:2f:77:e6:46:24:
                    c4:2f:5c:f4:ab:bc:a5:ae:17:9b:f4:0b:18:b0:ee:
                    a8:a3:84:84:dc:df:c8:ee:1e:ce:80:0e:e7:bd:fd:
                    5b:9d:e0:e4:f4:f8:41:a4:4c:78:c8:31:39:6c:d6:
                    b9:1a:5f:3b:f5:18:5d:d1:6c:f6:fa:42:74:f9:f2:
                    1a:c9:29:36:c3:85:21:df:f5:68:cb:db:13:a9:2f:
                    6a:1c:66:82:8a:0f:3b:63:2c:02:bb:a8:6b:78:0a:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:11:9D:33:F2:5D:3B:FF:54:5E:DC:9E:05:40:31:A5:18:E2:FE:3F
            X509v3 Authority Key Identifier:
                keyid:F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:96:c3:e2:02:04:7a:5d:14:70:aa:3a:b2:5b:74:09:4b:3c:
         c1:b2:e4:fc:8b:ce:07:44:21:39:6e:9d:ac:79:7f:3f:1f:18:
         73:d6:e0:ab:0b:e7:c7:4b:c0:1f:1c:28:bf:0c:c4:89:42:a5:
         06:f4:02:15:0f:a3:5f:8b:81:0a:29:b5:d0:17:89:71:ec:4d:
         0f:bf:01:af:ff:67:19:44:8b:d4:0f:ca:29:a2:ad:72:c3:01:
         96:0b:47:68:9e:2f:bb:9b:7e:74:e3:8b:9c:87:e0:f3:7a:d3:
         dd:2f:73:95:ff:11:a8:40:00:a1:6b:fa:2b:ec:65:fe:7c:a2:
         6d:5f:87:5d:7c:2c:97:38:77:01:37:a4:11:6b:cb:61:e0:e2:
         07:a7:e5:0a:45:b8:27:af:d9:a5:e0:69:2e:49:04:aa:d2:cc:
         e0:10:d7:07:03:1c:ae:4f:0a:c5:2a:30:b0:dd:aa:85:39:6f:
         b1:c8:cd:6f:88:22:cc:bd:34:49:b5:be:c3:52:89:e1:24:8f:
         0b:cf:7e:d0:5e:81:5b:b0:f1:82:2c:aa:0a:e4:b7:3f:e0:d2:
         53:b9:1b:1c:a3:d1:67:5c:10:81:f7:f4:b8:7b:d6:2e:28:e9:
         ad:66:e7:a9:32:66:fa:5f:83:e2:85:c2:05:fd:3a:bf:58:c8:
         5f:4b:65:8c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICALUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OENEMDdBRjExMC8GA1UEBRMoRjA1RjVFNEY4NTNGMkJDQ0U3OTgyQjVBNjRFMDJF
NDY3RDRENjM3OTAeFw0yNTA0MDMwMzE2NThaFw0yNTA0MDUwMzE2NThaMBgxFjAU
BgNVBAMTDTY3ZWRmZGFhLTEzNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQfmsw5ldJi1o05eeU66TAA3EE27tyAPrWTvourOQmHuYfuVomDq1X05E/
llY6R5YH9cYDTi48J5D+edFMv0zFXHSEfEPCtQ6LTxR2W+sMuR0jVcDhZRJYOZF9
f7EqAD2Y0GEBU0/D1P7w1XWd8zdEU58Bl2hCgxoC/1KnEPwwpeM/ksrCoPp2XXzU
PakFA0UPJtx7en5SXdzo6rr+/g8vd+ZGJMQvXPSrvKWuF5v0Cxiw7qijhITc38ju
Hs6ADue9/Vud4OT0+EGkTHjIMTls1rkaXzv1GF3RbPb6QnT58hrJKTbDhSHf9WjL
2xOpL2ocZoKKDztjLAK7qGt4CjkXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVxGd
M/JdO/9UXtyeBUAxpRji/j8wHwYDVR0jBBgwFoAU8F9eT4U/K8znmCtaZOAuRn1N
Y3kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhDRDA3LzRDNkREREI0ODk3MDExRUZCQjE5M0E4Mjc2MkU5NTFBLzhGOWVU
NFVfSzh6bm1DdGFaT0F1Um4xTlkzay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhGOWVUNFVfSzh6bm1DdGFaT0F1Um4xTlkzay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OENEMDcvNEM2REREQjQ4OTcwMTFFRkJCMTkzQTgyNzYy
RTk1MUEvOEY5ZVQ0VV9LOHpubUN0YVpPQXVSbjFOWTNrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDJlsPiAgR6XRRwqjqyW3QJSzzBsuT8
i84HRCE5bp2seX8/Hxhz1uCrC+fHS8AfHCi/DMSJQqUG9AIVD6Nfi4EKKbXQF4lx
7E0PvwGv/2cZRIvUD8opoq1ywwGWC0doni+7m35044uch+DzetPdL3OV/xGoQACh
a/or7GX+fKJtX4ddfCyXOHcBN6QRa8th4OIHp+UKRbgnr9ml4GkuSQSq0szgENcH
AxyuTwrFKjCw3aqFOW+xyM1viCLMvTRJtb7DUonhJI8Lz37QXoFbsPGCLKoK5Lc/
4NJTuRsco9FnXBCB9/S4e9YuKOmtZuepMmb6X4PihcIF/Tq/WMhfS2WM
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:40:15 2025 by rpki-client