Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
File:                     S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft (raw, json)
Hash identifier:          8NqXJBONB7LhS2/k9Kwcj7zno1ZITtj/za2oUWYg+EA=
Subject key identifier:   7F:A9:A6:3C:67:0E:30:BF:FC:B4:08:7F:EB:AC:35:A7:06:93:FC:68
Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
Certificate issuer:       /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Certificate serial:       014C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
Manifest number:          0141
Signing time:             Sun 16 Feb 2025 02:59:56 +0000
Manifest this update:     Sun 16 Feb 2025 02:59:55 +0000
Manifest next update:     Tue 18 Feb 2025 02:59:55 +0000
Files and hashes:         1: S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl (hash: 0p7r8TViYNyiSN6cdFTMD1k0zTVtI+HbwYM7iKvUVAY=)
                          2: 13E45E1C0E8911EF82A4F35A017001B1.roa (hash: eSu/uNHefvRDyXuPd6bFN5AOugU7elsPo3xlxIjj8Jg=)
                          3: 8A38C304166411EFB6DD9865017001B1.roa (hash: BNl8LzAAIi2V4u4Uq6J4OERouFI7xdVKsG2qa+DYXuM=)
                          4: 5386CFDE0B8A11EF94113C6D017001B1.roa (hash: +ksSk336SAPxQuepQDqlYfI3yCwLjxok4/1qF910PT0=)
                          5: 67A273EE166411EFBD7C3965017001B1.roa (hash: XYlnou7kQfD138NpOpxfEa0ALGHIsAR97sWZnC83Ikk=)
                          6: 2342ECF6166411EF86A28464017001B1.roa (hash: LAeP18nBFk8e55lig13p1FU7erjKKZ2bUOy7MssyCfI=)
                          7: 10F75FE0166511EF9BA89F6A017001B1.roa (hash: tQ6IcNtYg4Q1dSfQDi4FIUeQKLa90qMyIm8jTAnmXuE=)
                          8: C37E4A0E166311EFB9A5E45F017001B1.roa (hash: Qp36Juuigfj3IghvTSmzrtpde3+TFB8XRGmUObCG6Jw=)
                          9: 258EC7AC02E911EF84DA781F017001B1.roa (hash: MKLHz01B1hcRnrm1BW8ZdbgoDIWCXXjJPB+3zMRkn5k=)
                          10: 45A131960E8911EFB58ADB5E017001B1.roa (hash: h14yox0jQvTPprZRCXkBDOwPFxmyJDOyS+ltHOkYJCY=)
                          11: ED324F4E166311EF80A74E60017001B1.roa (hash: yLMrRx31o9f3857chkGq2HGPGPmxnmeZmw24iYDHkdE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A7021AF
        Validity
            Not Before: Feb 16 02:59:55 2025 GMT
            Not After : Feb 18 02:59:55 2025 GMT
        Subject: CN=67b154ac-49ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:6a:c1:9b:07:a4:3e:3d:2c:67:b5:bb:f1:
                    bc:44:a4:39:bb:44:ab:05:3b:7f:10:d9:36:c3:e2:
                    bd:44:37:fa:84:f9:12:c7:cb:4d:8f:e7:ee:26:0b:
                    bf:ad:1d:e4:b3:80:1c:60:38:da:14:c6:39:68:ce:
                    94:23:14:69:43:45:d9:f6:40:32:3e:56:b2:a5:d6:
                    7a:c7:46:48:ea:2d:da:30:c7:29:41:48:75:b0:68:
                    7e:01:c2:8a:92:1e:09:dc:55:29:c2:7f:8d:9d:68:
                    79:10:49:6c:c8:1a:11:59:28:d8:70:75:02:c9:d1:
                    f4:8e:95:ef:82:8f:cd:a6:38:2c:a0:df:11:3c:b9:
                    39:7a:12:f2:5e:07:27:77:30:54:d8:f0:73:6a:68:
                    c7:66:8a:bb:f1:a0:dc:90:72:cc:1b:56:4f:a9:63:
                    01:37:65:4e:d5:dd:ec:7b:9e:1c:8d:2b:99:b9:ed:
                    95:22:54:99:be:01:97:cc:89:e3:03:02:bc:b5:43:
                    49:af:7a:48:2b:4e:42:14:03:ed:02:e5:22:da:57:
                    7f:a5:c4:5a:49:00:ba:10:d1:16:c2:10:55:16:86:
                    e0:89:d5:1b:01:c5:d7:c4:a8:95:39:e7:a5:a1:f4:
                    6a:7d:ff:e2:97:16:dd:66:eb:a5:58:de:0f:64:3a:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A9:A6:3C:67:0E:30:BF:FC:B4:08:7F:EB:AC:35:A7:06:93:FC:68
            X509v3 Authority Key Identifier:
                keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:16:db:ff:c1:a4:1a:f3:32:a3:ae:ff:4c:b6:1c:dd:bb:19:
         62:eb:41:0d:6f:01:be:ae:2d:e9:96:9a:f3:4c:8c:a0:78:af:
         97:31:d1:cb:ec:5a:e4:20:83:bf:8d:bd:f7:77:b2:1b:da:4e:
         56:52:00:a1:d8:ca:d4:31:ae:e2:49:ca:40:28:19:f0:b0:eb:
         f7:9a:e7:f2:5f:4b:75:d4:b5:fa:00:15:14:c5:40:b6:b7:8c:
         43:51:95:f3:36:bc:f3:e6:79:22:30:bf:00:33:66:de:6f:e0:
         81:5b:16:32:2b:b5:cb:41:80:96:9e:bf:12:ab:ce:04:a0:df:
         53:dc:0b:b1:e7:fa:52:f5:93:ae:fd:46:7f:03:13:15:33:8a:
         d0:fc:36:e0:90:93:58:1b:bc:ad:67:cb:08:58:18:76:9b:46:
         c2:22:b2:23:1b:68:a3:fa:e2:4a:82:65:7f:84:09:e9:c6:e9:
         b8:22:60:e2:0d:14:65:b2:c7:dc:01:40:af:c2:19:94:a9:2b:
         ec:80:b4:f0:48:f2:b5:05:a7:b2:ea:3a:16:aa:a8:15:21:ea:
         85:02:07:0f:a1:56:a7:f7:b7:95:a3:ff:b2:38:19:4d:77:57:
         d1:41:94:20:5e:27:f6:59:0b:a0:ac:6f:0f:aa:f9:8f:03:3e:
         c7:12:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:50 2025 by rpki-client