Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
File:                     TiZQ4qujZbOc_hWOyk20jWQs22U.mft (raw, json)
Hash identifier:          4zbly4l0VKdm5A440fZFuzxGma79/1+a+tOE5JKKGac=
Subject key identifier:   BA:5E:78:D1:CE:3A:17:C3:AC:67:4E:93:D8:E0:A4:F7:FE:13:C3:D3
Authority key identifier: 4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65
Certificate issuer:       /CN=F369942EAF/serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
Certificate serial:       097D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
Manifest number:          097C
Signing time:             Sun 08 Jun 2025 01:19:29 +0000
Manifest this update:     Sun 08 Jun 2025 01:19:29 +0000
Manifest next update:     Tue 10 Jun 2025 01:19:29 +0000
Files and hashes:         1: TiZQ4qujZbOc_hWOyk20jWQs22U.crl (hash: Zg1RyNL7NERVq8edDHoFogwhWaFie5fFkIDwlcFC+/Q=)
                          2: 234EC302FF0211E8A910092BF8AEA228.roa (hash: NOa5khrVmkhCUl9lhv8WYW52PgfD6O4eOvTJHt2DcIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2429 (0x97d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369942EAF, serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
        Validity
            Not Before: Jun  8 01:19:29 2025 GMT
            Not After : Jun 10 01:19:29 2025 GMT
        Subject: CN=6844e521-5eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9d:73:c5:56:23:7d:4f:bc:36:0e:e2:39:20:
                    52:2c:70:ba:eb:29:ae:44:2f:67:f9:2d:5f:4e:2c:
                    2d:a5:a2:1f:63:c3:af:66:80:e2:56:94:00:c9:4e:
                    37:98:c0:bd:50:29:b7:56:10:ca:64:da:0c:c5:9b:
                    47:f8:69:60:e7:15:01:f5:ff:22:e7:6f:0b:a4:23:
                    c8:e9:0a:d8:69:61:21:93:97:d6:18:db:d6:a5:ab:
                    31:49:b7:b7:4e:5c:b1:c1:a8:97:db:ef:29:7f:72:
                    3a:2e:9e:b8:e8:c2:42:5d:08:6f:76:f8:ac:6f:0f:
                    f7:17:f0:3b:82:12:c3:7b:90:9e:3a:65:e2:3e:ad:
                    56:15:db:8a:54:cb:e9:1c:47:8e:36:09:04:1e:c7:
                    60:c3:62:1a:f2:79:86:29:91:d9:2c:76:ca:e2:94:
                    a5:2d:46:53:4b:95:26:bf:f4:b7:c2:71:f2:66:05:
                    ea:0c:03:63:f7:73:3b:f0:c6:6a:0a:57:24:fa:b4:
                    14:f2:da:68:7c:45:2f:e7:ff:2a:ec:4e:74:93:96:
                    d3:34:3e:b9:a5:b2:b1:b1:04:3f:e2:fd:df:0e:bb:
                    41:dc:6a:a4:9b:87:29:6c:31:63:65:8f:d7:df:e9:
                    d5:c2:a9:b6:f3:e2:49:9e:e4:95:96:f5:63:f5:df:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5E:78:D1:CE:3A:17:C3:AC:67:4E:93:D8:E0:A4:F7:FE:13:C3:D3
            X509v3 Authority Key Identifier:
                keyid:4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:6d:d1:08:33:bc:86:6c:69:3b:a3:83:96:0d:c1:ee:aa:
         eb:d4:ac:b6:a8:38:7b:17:ce:e4:e3:29:55:60:93:c0:74:e5:
         40:4a:45:89:47:71:11:e5:b0:9c:e2:87:ce:7d:cc:4a:f7:50:
         5b:38:6c:08:bc:a1:5e:cf:fd:c4:61:5c:7b:1b:97:c2:85:05:
         c0:14:fe:f6:5f:0f:db:0c:d2:15:f1:5f:f7:25:96:eb:40:03:
         cc:ac:f6:48:4d:ba:77:d8:37:6d:29:dc:76:0b:34:44:92:e7:
         9e:c5:2b:8f:30:9d:a6:09:17:6a:ea:05:79:ef:f1:30:7c:71:
         55:d5:70:97:56:65:d4:d2:e6:1f:2c:fc:ad:7b:de:f2:81:27:
         cf:e8:0d:cd:03:34:0b:bb:0d:e2:e3:15:30:a8:e5:80:09:aa:
         33:18:1f:e5:0e:42:a6:27:8d:85:5e:67:a3:b2:f0:32:89:6b:
         31:82:22:ce:30:06:5e:5d:64:1f:b3:f1:93:3d:20:17:e6:48:
         cf:ef:1c:e7:0e:49:bb:ab:bb:2e:95:b3:b1:f5:dc:0e:fb:b7:
         d2:2f:7d:64:56:8b:a4:a5:a2:67:b1:04:e0:16:fe:57:ad:cd:
         59:34:0c:d4:70:91:4b:97:46:4c:31:3b:a1:40:46:65:0a:67:
         20:9d:1c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:08:23 2025 by rpki-client