Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
File:                     dP2KmbmPfFmCclePXqFPEhiXqVs.mft (raw, json)
Hash identifier:          SPD1+styvwXZYI0Io3Jc760TK69uHCnKVfAZEu1AvwU=
Subject key identifier:   0A:A5:40:66:6E:FE:83:41:B6:B1:26:69:6B:E5:0D:A2:2F:47:3D:9A
Authority key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Certificate issuer:       /CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
Certificate serial:       06B5
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
Manifest number:          06B4
Signing time:             Sat 05 Apr 2025 01:30:25 +0000
Manifest this update:     Sat 05 Apr 2025 01:30:25 +0000
Manifest next update:     Mon 07 Apr 2025 01:30:25 +0000
Files and hashes:         1: dP2KmbmPfFmCclePXqFPEhiXqVs.crl (hash: Dq29daKpwO0A+cT/eUo7iE+K6MVK6YF4LlK+2nN9MVc=)
                          2: 315816DECF5F11ECA89077C9F1222468.roa (hash: nXuxmOxMY30f7U13vd8vjgc0lhwJby8Cd+gymuJClmU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                          rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1717 (0x6b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738RI
        Validity
            Not Before: Apr  5 01:30:25 2025 GMT
            Not After : Apr  7 01:30:25 2025 GMT
        Subject: CN=67f087b1-42d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:34:b1:a8:0b:a8:12:60:1a:fd:76:15:17:
                    f7:25:dd:46:7a:5d:be:d1:0e:6f:69:6b:31:3a:0c:
                    bc:ae:18:d3:b8:3a:88:19:7f:32:53:ac:6f:35:a6:
                    e0:9c:6e:3f:eb:72:e0:57:99:b4:7a:ff:7f:fb:24:
                    43:e8:68:06:1a:f4:14:28:ce:4f:8c:f0:d5:05:05:
                    ce:b3:46:20:6c:27:7f:51:de:bb:6b:eb:e8:70:42:
                    4b:73:d9:6a:10:7a:18:e2:d1:d3:4d:9e:59:05:bf:
                    23:e0:ae:92:6b:13:28:c3:82:d2:6f:f3:89:6b:55:
                    a1:e4:12:bd:66:f6:9a:a4:62:d7:35:f5:c9:68:c1:
                    8a:b5:26:65:b8:7a:33:73:74:b4:e5:17:6e:b9:4d:
                    5b:30:e6:a1:4b:60:b8:e7:b8:28:18:72:82:26:17:
                    62:aa:6e:f9:57:d5:fe:3d:6c:41:3b:b3:d6:66:56:
                    23:c5:ad:4b:91:ff:e1:63:59:64:0b:3b:5e:47:dd:
                    78:1f:d3:0c:04:df:09:2e:bb:58:26:5d:19:a8:6a:
                    52:9d:ae:e6:9c:b3:af:bc:f3:f7:ad:b0:23:65:05:
                    3a:c5:33:27:dd:74:2d:b7:95:0c:b0:48:c2:5e:3d:
                    34:aa:e8:b5:69:a6:3e:80:b0:39:a6:c3:22:21:56:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A5:40:66:6E:FE:83:41:B6:B1:26:69:6B:E5:0D:A2:2F:47:3D:9A
            X509v3 Authority Key Identifier:
                keyid:74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cb:6a:cf:b2:ca:e2:fa:a0:e0:68:9c:ac:62:44:0f:ab:5a:
         e6:81:0c:48:d3:cf:b2:15:08:93:f8:e4:74:5c:59:15:a4:e7:
         fe:2d:1f:98:78:29:d0:c1:95:83:95:bb:28:fb:48:c6:d5:3c:
         f5:9a:65:9d:c9:76:6e:47:f9:2d:c1:28:54:60:bd:61:08:5e:
         96:a1:43:9c:68:cc:3a:7a:88:f9:f0:eb:f4:46:28:cc:76:c7:
         10:38:54:b5:fc:c5:0b:30:f9:2c:c5:7a:93:00:30:55:d6:de:
         67:10:80:7f:21:ff:d0:52:49:55:14:c6:fb:8b:cc:87:0b:96:
         1d:6f:ca:b1:e8:81:9a:cc:7d:a4:aa:75:3b:05:54:06:c8:50:
         18:73:91:df:99:e4:42:4a:bf:2e:a1:48:1d:a0:88:e9:bd:f8:
         a9:12:c9:9a:c2:e8:01:e5:9b:0f:01:bb:ce:4c:c9:07:a7:8c:
         6e:5b:b2:82:2c:22:15:05:34:08:40:ad:15:b0:12:13:f3:d5:
         1c:1e:9a:98:47:6f:20:05:66:b2:f9:ab:83:0e:0c:a4:23:14:
         37:bd:c1:57:a2:8a:1e:f7:1e:79:7c:8e:1f:75:ea:91:89:d7:
         11:02:e5:ee:fa:88:5c:46:bd:4e:66:e9:6d:48:df:d2:4d:92:
         04:85:bb:0e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUM3MzhSSTExMC8GA1UEBRMoNzRGRDhBOTlCOThGN0M1OTgyNzI1NzhGNUVBMTRG
MTIxODk3QTk1QjAeFw0yNTA0MDUwMTMwMjVaFw0yNTA0MDcwMTMwMjVaMBgxFjAU
BgNVBAMTDTY3ZjA4N2IxLTQyZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCSojSxqAuoEmAa/XYVF/cl3UZ6Xb7RDm9pazE6DLyuGNO4OogZfzJTrG81
puCcbj/rcuBXmbR6/3/7JEPoaAYa9BQozk+M8NUFBc6zRiBsJ39R3rtr6+hwQktz
2WoQehji0dNNnlkFvyPgrpJrEyjDgtJv84lrVaHkEr1m9pqkYtc19clowYq1JmW4
ejNzdLTlF265TVsw5qFLYLjnuCgYcoImF2KqbvlX1f49bEE7s9ZmViPFrUuR/+Fj
WWQLO15H3Xgf0wwE3wkuu1gmXRmoalKdruacs6+88/etsCNlBTrFMyfddC23lQyw
SMJePTSq6LVppj6AsDmmwyIhVtNnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUCqVA
Zm7+g0G2sSZpa+UNoi9HPZowHwYDVR0jBBgwFoAUdP2KmbmPfFmCclePXqFPEhiX
qVswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDNzM4Lzg5NkJFNzhBRUVBOTExRUE4RkRDRkIxQkY4QUVBMjI4L2RQMktt
Ym1QZkZtQ2NsZVBYcUZQRWhpWHFWcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2RQMkttYm1QZkZtQ2NsZVBYcUZQRWhpWHFWcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OUM3MzgvODk2QkU3OEFFRUE5MTFFQThGRENGQjFCRjhBRUEy
MjgvZFAyS21ibVBmRm1DY2xlUFhxRlBFaGlYcVZzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9y2rPssri+qDgaJysYkQPq1rmgQxI08+y
FQiT+OR0XFkVpOf+LR+YeCnQwZWDlbso+0jG1Tz1mmWdyXZuR/ktwShUYL1hCF6W
oUOcaMw6eoj58Ov0RijMdscQOFS1/MULMPksxXqTADBV1t5nEIB/If/QUklVFMb7
i8yHC5Ydb8qx6IGazH2kqnU7BVQGyFAYc5HfmeRCSr8uoUgdoIjpvfipEsmawugB
5ZsPAbvOTMkHp4xuW7KCLCIVBTQIQK0VsBIT89UcHpqYR28gBWay+auDDgykIxQ3
vcFXoooe9x55fI4fdeqRidcRAuXu+ohcRr1OZultSN/STZIEhbsO
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:29 2025 by rpki-client