Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
File:                     gvHGYRo6FGfbPXikpf7VCgilexM.mft (raw, json)
Hash identifier:          CYNU0xPJhvR/UMOPUQaBDHnbkZydl8F4AWiWxrDIsZE=
Subject key identifier:   24:CD:8B:7F:46:40:35:86:86:FC:62:A4:B3:04:D3:79:5A:10:8F:20
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Certificate issuer:       /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial:       05DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
Manifest number:          05B9
Signing time:             Thu 17 Apr 2025 02:27:25 +0000
Manifest this update:     Thu 17 Apr 2025 02:27:24 +0000
Manifest next update:     Sat 19 Apr 2025 02:27:24 +0000
Files and hashes:         1: gvHGYRo6FGfbPXikpf7VCgilexM.crl (hash: zzFLzXc6Dyqxc8B0sHSiMjbQY7QZA7YMJ/7D3QGW2to=)
                          2: 8C266FAEC0BC11ECB6B937B8F1222468.roa (hash: LWvmdfRyuuShkSq5nvy5VVYhaFiedLSRZGh/sW4VoMQ=)
                          3: C02A73A2567E11ECA2238761D8A014CE.roa (hash: cFnUhnC13xlP5TD/7yV6xNwGQ5BruaAC4MIqLANVH3s=)
                          4: 9224A498414611ECB18B9C4AD8A014CE.roa (hash: XPzMQpRyXNj7tfbthuedXxw7eoOCCt4TWOt0ECkjiSw=)
                          5: FCFB2C46429311EF932F40BD762E951A.roa (hash: aj7dKtZkdlsVdxJmDsYKu4bL2W4gvGpRJEhdeSSyuFM=)
                          6: DD2ED276554811ED808E48E0F1222468.roa (hash: o9F5NASkXJeGRpOxZTi10DlR3PhpAb42z8vnQSf1W6Y=)
                          7: 56D48534366511ECAAF07024D8A014CE.roa (hash: 9qlP2hqRYd4Iy/H8X2UWaaYT/2UVtHIcp+5pW7Qt6Lk=)
                          8: 5634B5344B2D11EEB602566E4AD9E6FC.roa (hash: RXMYhudjIg+5B4S6A7PfziGVGL2i90FJjq9kDBWz4BY=)
                          9: 971C03BE6E9011EEBC47C1344AD9E6FC.roa (hash: FEtfb6h/Qjj5+1EDaqJAUTaRNW+izq+4MGEPVm7WQu4=)
                          10: 664C2930DBAA11EEBDCFF69B775412E6.roa (hash: jXvx3Rxn9FpNmCMQtH/GLTAUSkTFxeG70DHFMH0gCrs=)
                          11: C0F8837027AE11EEB3D5C11B4AD9E6FC.roa (hash: U9lrbioleJrfDazSStxWONg+gePpOFN84WZgOOuwefs=)
                          12: 4A88B5706B5211EDA0EA3F88F1222468.roa (hash: FO1Dj1s2/gzgT9jLou3n+Fly82D5SCTFYMrpFqZDnjk=)
                          13: B539B9C439CE11EDA2E2E4CCF1222468.roa (hash: L8tv2tXp84t94j7so0pE6pjeZqF4W79+avnFF/AtOjc=)
                          14: 09FAFAEA4FE911EFAC30AC4F762E951A.roa (hash: xrcP6Mtrc5qzAh2bF+djzR18bQ7En6DPKHoIPS7kqyo=)
                          15: 26AF521EA44F11ECAA08306F5A40D577.roa (hash: EcPn6/6HlIpqU2DVcgtdl0S9cxELvsIzT/v9a33Hhbc=)
                          16: AC4B6082210C11ECAD741215D8A014CE.roa (hash: AtxMUNLLrkxyey3dAGtkIWE+tCR3TEwc6YhmNlJxQio=)
                          17: 23D6AEEE13D911EDB46DE9BDF1222468.roa (hash: l28mywAfwN/N3mAJ5uusY3xTHQqgOweo5f2TzG8SlCU=)
                          18: 1530CE00EBE911ECAA0878D2F1222468.roa (hash: +MPXKqkSfw55uXv63KcDQA0uk/2t7djdRht6zW2wMbY=)
                          19: 094210AEC41411EE88C9EDA3775412E6.roa (hash: d6MjgYyVOT5Zjb/xnHtqT0+LbviGAM5BCPUU3e5A5oc=)
                          20: A398E3A0F13D11EBB63B911FD8A014CE.roa (hash: v/uCWtn5mJZb+o9+Q5aNz15BP+IXm6kUIIRfortJmRE=)
                          21: 38270294F36311EDBEFE48354AD9E6FC.roa (hash: JCpUwcLlyeyID1rok4mjUMaVBm5RDKXVOymn9hFwm98=)
                          22: 4BEC690082F511EEBBB42B674AD9E6FC.roa (hash: ASnfqkuhQSFv0giROiw8EEeT1sMeoGjHEd6cWLcq/WE=)
                          23: A4E1241E5FD211EF867BDA77762E951A.roa (hash: zKqkWjXQKLviduKuQs8CcF6kO9y5LGaxWQboRjofXP4=)
                          24: 8895C070E02811EC98F4E491F1222468.roa (hash: hD4lS4pjWF7aAeKADbA1StyEyHLEar0949VpnchH3NY=)
                          25: B2ABC5C08DA911EC804C33E45A40D577.roa (hash: IDD186STTmdWGeqHCysVf0QPkT7GBsIIrvPyxHmrdtc=)
                          26: 65989AD8BC3311ED9E2B88B5F1222468.roa (hash: xeuVwfGkXyt1z3GydC6wSInWF5cPlZls2ZzQPi+g8P0=)
                          27: 10E66CAA858011EFA65B285B762E951A.roa (hash: lCBqjCpnLebiZhdULUm/2pXJNsFL2JTGwIc/hckdIcU=)
                          28: 9E5D6708928111ED9F33B1E9F1222468.roa (hash: IFudCUkdHq1Zpz3PyDrq/xUDpQ0MHKE8CA1etAVXR0g=)
                          29: 4577EBD2124811ECB3765C5ED8A014CE.roa (hash: C6keONk5pX9vxi2GbZolDI5QMW6KdyBmAMv7Kf4uGPQ=)
                          30: 3D6F6E96F37711EBAC8D9D1AD8A014CE.roa (hash: 9VXniEQa7EvwyuNK+E+0ZuAUlWwrOJps+Bu2VlcENpI=)
                          31: 6AF017587A0811EDBFC04983F1222468.roa (hash: 2CrRYRu/rPDODQF+1u1w+NJEjDucfctIyM+OcrCAuXQ=)
                          32: D98A56900ACE11EEA9A723454AD9E6FC.roa (hash: EKbiex9REKFqFg3KeIAaHxBhBnGQAgLlrP3B5Rpt+ew=)
                          33: 11AC7B6A124811ECA010225ED8A014CE.roa (hash: NuKKPHhieBdz0VtTkdtt2pca0XP6l2AgJ2AAzjs2NuY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Apr 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
        Validity
            Not Before: Apr 17 02:27:24 2025 GMT
            Not After : Apr 19 02:27:24 2025 GMT
        Subject: CN=6800670c-3c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:59:56:69:0e:f0:0c:70:09:3c:75:6a:f3:
                    de:aa:5d:05:d6:27:f8:e2:76:c5:05:7e:e3:36:9c:
                    9d:c9:95:35:d5:ee:5d:2b:5b:12:52:a0:99:5a:b8:
                    7f:a3:04:a1:65:7f:b0:12:34:1e:7a:2b:85:fe:9e:
                    bb:da:45:93:47:44:dd:af:e4:7b:65:68:e0:2f:20:
                    58:7d:f3:fa:ea:19:ba:9b:2c:ca:d4:ed:45:76:d7:
                    71:44:67:d5:aa:21:16:ae:7f:e8:a0:56:d5:86:20:
                    16:00:3c:3a:f0:d1:c4:8b:7f:51:e2:48:d2:dc:b3:
                    44:be:0b:72:90:26:6e:85:c2:e9:61:7d:99:c6:f8:
                    3c:b0:d6:01:a8:9e:7c:7c:be:c2:7c:28:23:a4:3f:
                    e8:83:ea:d2:a2:fc:db:75:77:85:69:6e:3f:49:6e:
                    85:d8:ca:73:08:c3:54:11:ea:81:86:0b:1b:3b:5b:
                    52:0e:44:aa:59:5e:5c:73:46:bf:a9:a5:00:a4:ee:
                    42:69:17:50:89:1f:3d:00:c3:bc:42:2c:c3:b4:df:
                    d9:71:2f:13:b2:9c:af:40:b6:81:55:39:e5:43:e6:
                    e4:47:8f:3f:aa:39:aa:f3:93:d3:67:05:37:d3:5f:
                    89:b7:f2:14:09:e2:f4:09:a7:0c:3d:a2:d9:28:21:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CD:8B:7F:46:40:35:86:86:FC:62:A4:B3:04:D3:79:5A:10:8F:20
            X509v3 Authority Key Identifier:
                keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:31:c0:10:82:0e:17:0d:8d:83:3e:54:6d:d0:b2:ce:a8:8e:
         d5:d5:95:ff:34:52:6c:f6:9f:08:48:52:35:2a:98:52:9f:d2:
         81:21:db:cd:b6:4f:db:f8:27:bf:3a:70:b2:26:c4:4a:df:10:
         04:6d:1e:df:ff:4a:fc:50:51:dd:79:06:13:42:13:84:06:dc:
         7e:f7:fd:5a:b7:86:9b:29:0a:70:57:67:b9:b4:cd:18:4c:99:
         0a:3c:20:2d:b4:b5:73:a5:d8:48:d8:59:e9:03:20:75:15:43:
         25:08:3f:21:76:79:82:e6:99:c7:19:af:cb:3d:0c:5d:51:5c:
         a4:6f:cc:14:d8:bf:a5:69:d8:d8:4b:f4:5d:3d:3a:1b:ab:9e:
         d5:6b:e2:57:b8:e9:c8:32:87:b4:0d:8e:82:26:e4:47:c4:93:
         17:01:aa:63:d6:2c:04:31:94:ed:15:40:c2:50:49:fd:bd:3e:
         88:f5:77:5e:b1:99:89:c4:50:be:97:28:89:22:ad:84:24:d4:
         22:d1:6d:63:6d:46:9c:4b:95:d9:42:fa:9f:bb:58:fa:0b:88:
         d3:28:bd:11:1e:06:f2:97:e5:aa:dc:1c:db:31:da:ab:9d:1c:
         6a:3b:70:dc:fe:d3:75:14:38:8d:e9:9b:d2:44:2d:f5:6e:d2:
         3f:6f:e6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----