Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
File:                     yS6IWCfGdhnhMXVwMBfERC3f6s8.mft (raw, json)
Hash identifier:          YOBA8Hz5ELc8uYMLyCUaCreVfNAee5SouL8lgqcxRQc=
Subject key identifier:   62:F9:A1:72:95:C2:36:D0:71:19:90:35:14:5E:E8:AD:4D:C5:3B:75
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Certificate issuer:       /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial:       08D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
Manifest number:          08D4
Signing time:             Thu 03 Apr 2025 01:08:05 +0000
Manifest this update:     Thu 03 Apr 2025 01:08:05 +0000
Manifest next update:     Sat 05 Apr 2025 01:08:05 +0000
Files and hashes:         1: yS6IWCfGdhnhMXVwMBfERC3f6s8.crl (hash: mE8BVDrXDlLtwjPnnp1dEPjaz7vnpRZ7nrgKR6mq7P8=)
                          2: F3961630123611EF80C92C51017001B1.roa (hash: P7zmLDBytjro0KKIgTEyZppS7BdxrGwBEJ1mm2r94Gc=)
                          3: 25843EB0123711EFB5C1A851017001B1.roa (hash: 5Dbg0It6Gnjot6cZHpwak5GthbHzIipbWJ6mhVVl1e8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265 (0x8d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AF
        Validity
            Not Before: Apr  3 01:08:05 2025 GMT
            Not After : Apr  5 01:08:05 2025 GMT
        Subject: CN=67eddf75-f7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ac:31:6e:7c:e2:e4:11:ef:a5:c1:cc:2c:7c:
                    88:0b:ba:f1:e7:45:54:31:d2:27:3d:14:45:a2:e0:
                    d8:ae:4e:61:0c:f4:12:fa:c1:68:b3:88:e8:64:6c:
                    41:74:b5:9e:f6:be:a5:94:08:a3:fb:d6:85:fb:46:
                    2d:d6:9d:f3:fc:2c:92:45:f4:1f:45:a5:3f:79:9b:
                    e9:c9:44:42:35:8e:19:7f:54:ea:88:c8:68:ed:ae:
                    90:e4:0d:d4:eb:0a:ff:a1:99:bd:5f:80:a1:24:ed:
                    53:b3:73:60:41:4e:9d:4f:14:bb:05:4e:28:ab:59:
                    1b:bf:a7:15:90:53:3f:86:43:d4:81:6a:ea:e1:f8:
                    8c:d9:32:16:f1:a0:d7:b8:9b:ac:cc:4f:35:cb:ad:
                    df:58:ad:04:15:0a:e4:11:7a:07:b5:71:c6:6e:89:
                    21:62:58:b5:cb:7a:c0:1e:12:fb:b9:cb:12:a1:89:
                    12:87:04:16:6e:95:f2:f4:31:a7:74:35:3b:aa:2b:
                    a9:4a:71:ba:37:ea:f7:51:f6:3e:4b:e9:97:54:3c:
                    34:ea:9d:51:a5:5b:14:6a:40:63:c6:81:93:82:98:
                    75:73:3c:4b:34:c8:bd:52:67:d1:ff:ec:7f:3b:41:
                    86:e5:30:01:e3:91:26:ce:c4:95:16:11:7a:24:e9:
                    3f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F9:A1:72:95:C2:36:D0:71:19:90:35:14:5E:E8:AD:4D:C5:3B:75
            X509v3 Authority Key Identifier:
                keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:02:82:d8:4c:d7:13:6b:f2:e6:f2:f7:de:b0:26:00:14:f7:
         61:cd:98:08:26:87:03:75:6c:ed:b7:a6:40:e2:23:eb:79:d0:
         eb:f6:48:e8:68:ed:06:23:20:3a:b8:f6:82:de:67:82:48:2c:
         d0:98:9c:eb:fd:c8:ba:19:27:6f:e3:b0:b5:eb:dd:dd:b2:7d:
         c6:fe:8c:57:bc:2f:f3:ec:ac:0a:ac:6d:b5:18:70:37:8d:e2:
         94:21:4e:99:bc:87:d0:db:31:90:8c:c6:f4:aa:01:b9:b4:53:
         3e:60:a8:63:f1:f9:df:d0:e4:2c:b5:4a:a1:41:98:74:bb:b3:
         82:f2:03:b3:6b:b5:07:f6:da:5f:0b:61:e4:13:f3:34:ea:fc:
         df:fd:39:41:c2:7f:97:61:58:86:60:77:88:48:85:4e:00:bd:
         f8:be:f4:99:c7:a7:cf:d8:d1:b5:1b:d7:22:36:b7:ac:62:38:
         45:01:d0:fe:24:24:c6:f7:dc:86:df:fc:4a:c6:59:3c:1a:30:
         bc:c9:14:9c:97:71:08:6c:00:ed:e2:8a:31:b1:b2:f4:03:59:
         f7:16:6b:f2:16:a4:42:84:92:05:d0:41:14:9d:ad:e9:55:2e:
         d8:a9:4c:e0:ac:de:12:ac:99:50:cc:14:90:be:c7:23:c8:66:
         e0:f9:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:28:46 2025 by rpki-client