Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
File:                     5IF89uPaBQJQGf_Vqru3g4R18ps.mft (raw, json)
Hash identifier:          IO2juZjjaShE0Ej177GJpHao0STlmjDmy9dJnNGNpgc=
Subject key identifier:   02:FE:90:5D:7A:D4:6B:71:C2:A6:1A:33:AD:B6:3C:F4:99:76:4B:2C
Authority key identifier: E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B
Certificate issuer:       /CN=F3695C0AAF/serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B
Certificate serial:       0334
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
Manifest number:          0333
Signing time:             Sat 12 Apr 2025 02:23:43 +0000
Manifest this update:     Sat 12 Apr 2025 02:23:42 +0000
Manifest next update:     Mon 14 Apr 2025 02:23:42 +0000
Files and hashes:         1: 5IF89uPaBQJQGf_Vqru3g4R18ps.crl (hash: ZIL7kFQQ/e+oVnJ/l3SkhJQiEflVn34NNnFFrqdSiqY=)
                          2: CBC1D6C0BD9211EDB6D226DDF1222468.roa (hash: qTwXULSySx53cW1Nc4h52dh7OSZyRV1CiS+RYF1a1tQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Apr 2025 00:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695C0AAF, serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B
        Validity
            Not Before: Apr 12 02:23:42 2025 GMT
            Not After : Apr 14 02:23:42 2025 GMT
        Subject: CN=67f9ceae-3351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:74:03:75:a5:9e:66:da:63:b9:bf:20:23:
                    91:8c:f7:d6:3a:f6:f2:80:ea:3f:0d:df:c6:53:07:
                    22:f3:46:8b:0a:e2:6e:25:ef:bd:6e:da:55:c8:fb:
                    7e:1d:08:70:0e:27:d9:88:d3:da:a4:79:fa:db:78:
                    77:b4:65:fb:82:d6:d9:6c:36:86:91:e5:21:d9:ca:
                    47:85:2e:6f:d4:1c:ed:88:cc:cd:21:94:e8:ce:09:
                    13:d8:e5:a0:87:ef:28:1b:5b:18:8f:24:50:10:ae:
                    99:3d:3e:26:0b:c6:6f:00:56:fb:76:76:bb:50:e5:
                    5a:0f:5f:e6:5f:82:33:92:fd:ce:5b:60:40:39:80:
                    20:0d:ca:61:e0:ea:a2:91:69:00:34:34:2b:cf:80:
                    f2:90:40:4d:fd:7c:83:86:98:89:d8:e2:83:ab:71:
                    ca:f8:20:f4:26:25:15:48:5f:62:d9:a1:f5:a6:76:
                    79:c7:ad:9b:7c:25:c1:4f:ba:cb:cd:a0:ed:f8:30:
                    69:28:03:65:48:fa:b0:fd:dd:b4:53:94:ac:ef:e0:
                    b5:56:df:ef:26:e1:16:d8:3c:52:8b:0d:54:3d:6e:
                    09:66:87:01:a3:ef:99:93:70:51:2a:97:85:c8:e0:
                    b6:91:59:82:03:6a:fc:01:0d:cf:77:14:16:42:c8:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FE:90:5D:7A:D4:6B:71:C2:A6:1A:33:AD:B6:3C:F4:99:76:4B:2C
            X509v3 Authority Key Identifier:
                keyid:E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a8:3e:36:64:7f:de:31:d9:3f:13:ab:c5:c0:49:44:22:a3:
         ac:af:15:6a:9b:0e:84:42:8d:0a:bf:aa:8e:1c:8b:2d:d7:6e:
         ea:03:22:e2:2b:3c:be:ac:0c:09:dd:8f:03:ca:8b:b2:42:87:
         5a:1e:ac:d2:e3:29:3a:43:62:e9:e4:2e:2f:ae:fb:3f:cf:77:
         0b:76:29:6c:14:f0:0c:a1:1f:1c:41:bf:93:be:e5:88:22:ca:
         b1:13:a9:f4:e2:b1:34:4a:b7:3f:bf:cc:ef:83:06:14:9d:2a:
         5d:9c:a4:7a:a7:44:29:b9:1d:4d:fd:71:bf:32:7c:2d:02:a0:
         6d:59:58:44:c6:3b:e1:a3:2a:38:a5:b8:f5:74:bc:57:84:56:
         0a:16:34:86:a7:a0:9e:00:f0:05:8f:57:b0:76:d3:eb:5a:21:
         d5:77:b0:c0:4d:18:c9:80:c2:2b:e4:c0:79:2d:2b:72:f8:5d:
         55:2e:5d:41:b1:b3:ea:8b:bf:a3:7f:32:b5:6f:13:54:ca:b0:
         33:62:0a:16:f0:10:a0:5e:30:00:0b:34:fb:77:fa:ce:64:8f:
         14:40:79:dd:90:93:c1:fa:9f:71:c4:f8:09:f8:ee:1e:fb:cf:
         68:2a:49:55:33:3f:46:e8:e6:16:db:50:2f:93:1b:f6:c8:41:
         42:4b:70:83
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVDMEFBRjExMC8GA1UEBRMoRTQ4MTdDRjZFM0RBMDUwMjUwMTlGRkQ1QUFCQkI3
ODM4NDc1RjI5QjAeFw0yNTA0MTIwMjIzNDJaFw0yNTA0MTQwMjIzNDJaMBgxFjAU
BgNVBAMTDTY3ZjljZWFlLTMzNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8rnQDdaWeZtpjub8gI5GM99Y69vKA6j8N38ZTByLzRosK4m4l771u2lXI
+34dCHAOJ9mI09qkefrbeHe0ZfuC1tlsNoaR5SHZykeFLm/UHO2IzM0hlOjOCRPY
5aCH7ygbWxiPJFAQrpk9PiYLxm8AVvt2drtQ5VoPX+ZfgjOS/c5bYEA5gCANymHg
6qKRaQA0NCvPgPKQQE39fIOGmInY4oOrccr4IPQmJRVIX2LZofWmdnnHrZt8JcFP
usvNoO34MGkoA2VI+rD93bRTlKzv4LVW3+8m4RbYPFKLDVQ9bglmhwGj75mTcFEq
l4XI4LaRWYIDavwBDc93FBZCyEivAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAv6Q
XXrUa3HCphozrbY89Jl2SywwHwYDVR0jBBgwFoAU5IF89uPaBQJQGf/Vqru3g4R1
8pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1QzBBLzRGNTU2RkVBQUI3NTExRUQ5M0U2NTZBRkYxMjIyNDY4LzVJRjg5
dVBhQlFKUUdmX1ZxcnUzZzRSMThwcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVJRjg5dVBhQlFKUUdmX1ZxcnUzZzRSMThwcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTVDMEEvNEY1NTZGRUFBQjc1MTFFRDkzRTY1NkFGRjEy
MjI0NjgvNUlGODl1UGFCUUpRR2ZfVnFydTNnNFIxOHBzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnqD42ZH/eMdk/E6vFwElEIqOsrxVq
mw6EQo0Kv6qOHIst127qAyLiKzy+rAwJ3Y8DyouyQodaHqzS4yk6Q2Lp5C4vrvs/
z3cLdilsFPAMoR8cQb+TvuWIIsqxE6n04rE0Src/v8zvgwYUnSpdnKR6p0QpuR1N
/XG/MnwtAqBtWVhExjvhoyo4pbj1dLxXhFYKFjSGp6CeAPAFj1ewdtPrWiHVd7DA
TRjJgMIr5MB5LSty+F1VLl1BsbPqi7+jfzK1bxNUyrAzYgoW8BCgXjAACzT7d/rO
ZI8UQHndkJPB+p9xxPgJ+O4e+89oKklVMz9G6OYW21Avkxv2yEFCS3CD
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:41:57 2025 by rpki-client