Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
File:                     On6mEjuyi5myrc0qWftjiY7momU.mft (raw, json)
Hash identifier:          G3ucZ9cU5aSANfZkyYbL0NA8fYeq7nxDcLBPAEHh9+I=
Subject key identifier:   7E:FD:EF:6F:06:D6:09:EA:E9:CA:B9:61:28:F3:CF:B5:9F:62:D4:0F
Authority key identifier: 3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65
Certificate issuer:       /CN=F36A0B3BAF/serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
Certificate serial:       41
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
Manifest number:          40
Signing time:             Thu 03 Apr 2025 03:24:07 +0000
Manifest this update:     Thu 03 Apr 2025 03:24:07 +0000
Manifest next update:     Sat 05 Apr 2025 03:24:07 +0000
Files and hashes:         1: On6mEjuyi5myrc0qWftjiY7momU.crl (hash: SGXbRwfYe1CsdfCe/GxzF8StVsZUd6gsGQiPZCjLwEY=)
                          2: 8500AAA4DFA511EFA4A0995A762E951A.roa (hash: vzRjRuX2GZhGU/X4T8gnBdvjxS1YirPqGZKLuKJg1+Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A0B3BAF
        Validity
            Not Before: Apr  3 03:24:07 2025 GMT
            Not After : Apr  5 03:24:07 2025 GMT
        Subject: CN=67edff57-f0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:65:36:31:86:f3:cd:0e:52:67:ee:eb:ad:
                    94:88:f5:6a:19:29:af:c6:68:a0:62:14:13:1c:08:
                    4c:3b:56:c9:97:1c:68:c8:11:0a:3b:4b:7c:74:a4:
                    cf:57:30:ea:71:a9:bc:b4:23:f2:0c:74:29:56:f5:
                    55:83:a0:2a:bb:be:1c:75:5e:8d:c9:b1:21:9a:e0:
                    79:08:1b:da:90:51:55:ba:bf:98:67:15:30:56:8c:
                    c6:e9:e8:b1:65:1f:e9:2d:a6:d0:ae:44:ac:2d:b2:
                    1a:ac:05:95:4b:5c:a3:07:91:d6:be:fc:fa:9c:ad:
                    a4:0f:f7:36:25:ed:26:dd:33:95:19:f1:d3:34:a9:
                    5e:58:27:91:4c:2e:9c:76:ae:8c:ab:ab:5b:f4:c1:
                    d1:f6:1d:f5:ee:a7:fb:c8:65:34:40:32:b3:a1:6d:
                    17:26:50:09:4e:64:3b:dd:75:2c:c5:b9:44:b3:9a:
                    95:a1:3f:8e:b8:9c:b2:80:03:38:87:d6:86:89:ff:
                    6a:b7:6c:fa:f9:4d:9f:a3:d3:a7:a4:f2:5c:69:1c:
                    49:b5:61:a6:21:0f:42:3a:28:13:0a:a6:45:81:a4:
                    02:fb:34:15:6d:ac:be:5c:e9:cc:15:52:28:58:10:
                    c4:64:a5:d6:7a:46:fa:5c:a6:65:29:b5:30:6c:07:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FD:EF:6F:06:D6:09:EA:E9:CA:B9:61:28:F3:CF:B5:9F:62:D4:0F
            X509v3 Authority Key Identifier:
                keyid:3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:08:e3:d4:59:a9:b7:a5:43:05:3b:78:6d:02:ed:f5:c8:87:
         4d:33:96:00:03:6c:e4:f5:09:78:bc:9e:7c:a3:be:3c:5d:ca:
         f1:5a:c5:e8:c0:85:42:9c:e4:a6:18:29:5a:c0:6c:f4:76:0a:
         40:bc:29:0c:d3:5f:f0:01:c5:05:ed:ab:d9:8d:fa:37:28:4c:
         42:92:e9:91:63:66:bd:44:e7:c3:79:bf:34:a5:0d:b8:85:50:
         84:2a:93:20:4f:d9:53:36:51:9f:a9:6d:38:be:b4:c0:3a:83:
         b5:69:4a:36:c6:6e:17:ff:0c:49:21:05:2d:41:ce:b8:e4:9b:
         9e:6d:8d:69:d6:13:4a:66:72:00:af:34:a1:1a:39:58:08:d4:
         e1:b0:66:f2:37:e3:a8:9c:d7:73:35:36:86:3c:22:f8:6e:0e:
         05:a3:3e:b9:b4:5c:38:90:62:c3:a4:c5:a2:e9:23:16:79:7b:
         36:67:2b:b0:b6:23:70:95:dd:b0:00:e6:56:fd:d6:1f:9a:27:
         f9:7e:d1:c1:e2:1e:84:ff:cd:2d:a4:7a:3b:ee:ed:2e:b7:63:
         28:a2:2f:bb:dc:b8:b9:34:28:e0:64:c0:c4:d1:24:22:4d:a4:
         62:b1:77:34:f0:2d:21:55:83:00:e8:bc:26:6a:23:ba:96:4a:
         7f:63:08:b9
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBQTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
MEIzQkFGMTEwLwYDVQQFEygzQTdFQTYxMjNCQjI4Qjk5QjJBRENEMkE1OUZCNjM4
OThFRTZBMjY1MB4XDTI1MDQwMzAzMjQwN1oXDTI1MDQwNTAzMjQwN1owGDEWMBQG
A1UEAxMNNjdlZGZmNTctZjBlYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKb4ZTYxhvPNDlJn7uutlIj1ahkpr8ZooGIUExwITDtWyZccaMgRCjtLfHSk
z1cw6nGpvLQj8gx0KVb1VYOgKru+HHVejcmxIZrgeQgb2pBRVbq/mGcVMFaMxuno
sWUf6S2m0K5ErC2yGqwFlUtcoweR1r78+pytpA/3NiXtJt0zlRnx0zSpXlgnkUwu
nHaujKurW/TB0fYd9e6n+8hlNEAys6FtFyZQCU5kO911LMW5RLOalaE/jricsoAD
OIfWhon/ards+vlNn6PTp6TyXGkcSbVhpiEPQjooEwqmRYGkAvs0FW2svlzpzBVS
KFgQxGSl1npG+lymZSm1MGwH7oUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBR+/e9v
BtYJ6unKuWEo88+1n2LUDzAfBgNVHSMEGDAWgBQ6fqYSO7KLmbKtzSpZ+2OJjuai
ZTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTBCM0IvRUM2OTI4MTJERkEzMTFFRkE3QTkwQzRFNzYyRTk1MUEvT242bUVq
dXlpNW15cmMwcVdmdGppWTdtb21VLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvT242bUVqdXlpNW15cmMwcVdmdGppWTdtb21VLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZBMEIzQi9FQzY5MjgxMkRGQTMxMUVGQTdBOTBDNEU3NjJF
OTUxQS9PbjZtRWp1eWk1bXlyYzBxV2Z0amlZN21vbVUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIwI49RZqbelQwU7eG0C7fXIh00zlgAD
bOT1CXi8nnyjvjxdyvFaxejAhUKc5KYYKVrAbPR2CkC8KQzTX/ABxQXtq9mN+jco
TEKS6ZFjZr1E58N5vzSlDbiFUIQqkyBP2VM2UZ+pbTi+tMA6g7VpSjbGbhf/DEkh
BS1Bzrjkm55tjWnWE0pmcgCvNKEaOVgI1OGwZvI346ic13M1NoY8IvhuDgWjPrm0
XDiQYsOkxaLpIxZ5ezZnK7C2I3CV3bAA5lb91h+aJ/l+0cHiHoT/zS2kejvu7S63
YyiiL7vcuLk0KOBkwMTRJCJNpGKxdzTwLSFVgwDovCZqI7qWSn9jCLk=
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:51:21 2025 by rpki-client