Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier:          ZcNaAPz+jRI6ZjMrksgaBVVg1eS4LameBTYiAwnywh0=
Subject key identifier:   AD:E9:2F:1A:02:DD:C3:44:EB:CE:1A:F1:44:25:E7:93:D8:00:12:C8
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer:       /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial:       03DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number:          03D8
Signing time:             Thu 03 Apr 2025 02:10:20 +0000
Manifest this update:     Thu 03 Apr 2025 02:10:19 +0000
Manifest next update:     Sat 05 Apr 2025 02:10:19 +0000
Files and hashes:         1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: QmG23hkAun2KJCnL+lkD+jn7jVMuDSr/Au71mduWY3Q=)
                          2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
                          3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
                          4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
                          5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
                          6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
                          7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
                          8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 991 (0x3df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AF
        Validity
            Not Before: Apr  3 02:10:19 2025 GMT
            Not After : Apr  5 02:10:19 2025 GMT
        Subject: CN=67edee0c-4226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4d:a8:2a:63:35:b6:33:23:7d:1c:ae:e3:4e:
                    e7:f6:1e:93:07:06:fb:5d:e8:cd:2e:0b:06:05:45:
                    1b:f8:65:81:72:40:2e:09:fe:c9:43:08:9e:99:5f:
                    8b:76:e1:c5:34:03:10:a0:34:84:51:35:fc:8b:b5:
                    78:d3:f0:2b:82:27:c3:cb:f8:7f:c1:d1:fd:1e:ea:
                    6b:15:bc:87:92:22:61:f6:65:63:84:f3:84:7a:64:
                    3f:f4:41:42:e4:d6:0c:f0:f7:b0:c9:7d:cf:79:ff:
                    68:98:53:ad:e3:4d:55:90:6b:70:6c:15:9d:17:d5:
                    8c:a0:e1:8b:7f:c6:16:c8:aa:2c:fd:24:10:c5:6f:
                    2c:f9:2e:2f:16:be:76:84:62:9e:42:f5:d9:74:43:
                    51:52:cb:03:2e:d0:58:a8:3e:ea:ca:72:f1:ce:52:
                    20:7b:61:b2:d6:8c:93:5c:63:6e:68:4d:a7:b8:be:
                    ee:ac:42:fd:e1:c9:b3:48:eb:dd:46:08:59:f4:17:
                    f1:3f:fe:91:81:8c:ab:a8:f0:05:38:cd:cb:f3:89:
                    a9:2e:cb:df:0b:40:f2:b5:95:35:79:e7:2c:3f:d5:
                    4c:d1:e2:b0:44:77:8a:c2:4b:1f:bd:14:b2:f4:fb:
                    68:17:6b:a4:88:97:08:85:7d:0b:d4:b9:03:93:3a:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E9:2F:1A:02:DD:C3:44:EB:CE:1A:F1:44:25:E7:93:D8:00:12:C8
            X509v3 Authority Key Identifier:
                keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:63:41:3b:b6:45:09:d3:cc:27:6f:fe:ce:4f:1f:ec:ce:62:
         03:17:3b:e9:9a:10:4e:29:5d:c0:e5:60:2f:98:57:90:e7:a6:
         d2:24:c3:ec:f7:ed:d7:63:0d:99:5b:91:0a:b2:30:c7:9f:91:
         be:33:75:bc:20:02:af:67:ff:9e:f9:0c:d3:77:a8:fe:65:48:
         9f:7e:66:67:bb:65:30:b7:19:d0:87:63:3c:09:95:94:84:f0:
         e5:a2:e9:4a:7e:c9:81:bf:04:02:f1:29:23:61:5b:95:6d:3e:
         58:df:05:d6:12:76:3a:d8:77:7f:f2:70:ef:3e:84:fe:f3:ff:
         3b:fb:5c:55:5c:20:31:0e:97:dd:0f:9a:e8:0e:a8:68:25:e1:
         01:99:04:32:8a:98:5c:bf:5c:0e:c7:98:a6:87:59:40:cd:cf:
         9c:8c:69:4b:78:c6:57:8a:7e:b3:2e:be:d7:0d:9b:3c:01:6f:
         9d:ea:05:3c:03:4f:ee:df:8c:df:94:b4:67:3a:6c:5a:4e:7e:
         6e:c1:9d:86:c5:e5:73:c9:3e:a0:f3:43:4e:fb:d3:95:91:92:
         f4:1a:51:4f:95:49:60:46:54:9f:a0:03:28:ab:76:3a:de:93:
         55:d5:56:16:79:9b:61:ef:79:94:f3:91:da:36:23:2a:8f:0a:
         78:a4:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:29:43 2025 by rpki-client