Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
File:                     IrcjfYpuI0VBundSql-48xqQzYA.mft (raw, json)
Hash identifier:          pxkMuyqm+n5BrL6d22uqtP/zYy+pN7QHUxiZujsKQnk=
Subject key identifier:   2A:9E:53:06:C1:2B:FD:60:FD:F3:C6:71:2A:E1:43:FA:64:97:24:32
Authority key identifier: 22:B7:23:7D:8A:6E:23:45:41:BA:77:52:AA:5F:B8:F3:1A:90:CD:80
Certificate issuer:       /CN=F36AA888AF/serialNumber=22B7237D8A6E234541BA7752AA5FB8F31A90CD80
Certificate serial:       08A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
Manifest number:          08A3
Signing time:             Mon 21 Apr 2025 01:31:09 +0000
Manifest this update:     Mon 21 Apr 2025 01:31:08 +0000
Manifest next update:     Wed 23 Apr 2025 01:31:08 +0000
Files and hashes:         1: IrcjfYpuI0VBundSql-48xqQzYA.crl (hash: UMoHLy5l6K2yg8a3R6s4oLSQNNxFP5ByxMfwHhh/bnA=)
                          2: 548444FC886811E9ADF34468F8AEA228.roa (hash: 1UElPZRMsw/FlEPeVKGSteHH7UZ+xvNvTZQ/F+SkwW4=)
                          3: 06F644A2886211E9862C9963F8AEA228.roa (hash: UqbhxzZyJOFJyGBOr36sTmH2MV8pK2xrkgTJYiq0otE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Apr 2025 00:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2214 (0x8a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AF, serialNumber=22B7237D8A6E234541BA7752AA5FB8F31A90CD80
        Validity
            Not Before: Apr 21 01:31:08 2025 GMT
            Not After : Apr 23 01:31:08 2025 GMT
        Subject: CN=68059fdd-f15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:0e:ad:5a:37:f7:4d:d8:f0:d1:be:75:78:
                    99:7d:be:17:3e:00:27:7b:94:f9:6e:2f:51:7b:b7:
                    f7:70:ba:fc:7b:95:74:64:a2:b7:c0:06:5d:34:6d:
                    c8:d9:46:12:55:d3:4f:f4:0f:0b:7f:60:1a:66:54:
                    76:dc:7d:c7:99:9c:bd:8f:22:ca:0d:a9:17:57:dc:
                    bd:cc:91:78:d5:df:21:b7:11:4e:c4:c4:c9:7b:5c:
                    14:fa:fa:4e:01:67:a8:53:72:15:8b:46:6a:45:94:
                    ce:d3:b5:6f:a6:ba:2b:e1:2d:d0:3a:e0:af:bf:5f:
                    2c:3c:72:c8:72:26:81:61:e8:0c:48:24:7b:56:ba:
                    d6:ba:c8:f4:fb:8b:4b:b0:c8:86:4e:5b:35:c3:52:
                    18:ea:50:3d:03:8b:5d:bf:b3:bd:d5:5c:58:af:63:
                    75:9a:83:f7:df:bc:13:ab:e8:4c:7a:6c:f4:23:50:
                    59:5e:d0:7d:c2:7d:d9:85:dc:ff:d8:75:ef:e8:82:
                    07:40:0e:5d:9a:68:3e:ec:8b:fc:a2:31:ac:e2:78:
                    55:a3:ee:ae:83:92:6b:9a:af:df:f6:a1:85:6e:a2:
                    b9:aa:ad:9a:e0:8c:e8:d9:08:84:af:2d:e6:c6:39:
                    68:25:4b:46:0a:5d:e8:9f:4d:54:b7:ba:f4:8f:b4:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9E:53:06:C1:2B:FD:60:FD:F3:C6:71:2A:E1:43:FA:64:97:24:32
            X509v3 Authority Key Identifier:
                keyid:22:B7:23:7D:8A:6E:23:45:41:BA:77:52:AA:5F:B8:F3:1A:90:CD:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:80:0e:e8:36:3f:db:81:a3:e6:60:05:b1:76:cd:49:84:
         29:99:8e:4a:0a:95:15:a5:43:85:eb:39:61:79:44:01:89:bf:
         7a:00:79:4d:19:4c:4a:20:42:d7:d9:eb:43:ce:2b:a0:ba:3b:
         0a:11:61:7d:a1:e4:a0:f3:12:44:17:d9:03:5c:a8:1d:5a:f2:
         d8:39:8c:ba:4e:4e:53:c6:e9:ba:ee:3f:b7:43:4d:49:ec:ba:
         40:ab:e9:ed:83:43:3e:53:3a:a8:cf:11:57:ac:66:24:9e:06:
         10:11:c4:a9:43:cc:ef:5b:85:f2:42:2f:10:65:22:81:b2:00:
         a6:36:00:75:e7:39:4a:60:04:20:e8:50:9f:e2:5b:91:74:5d:
         92:35:67:6b:0e:2c:7c:bf:5e:c1:dc:55:75:81:16:bc:d3:23:
         ba:99:18:15:c3:ed:88:cf:b5:5c:f1:f9:7d:2e:b9:63:34:86:
         57:7c:b1:e9:e5:63:62:01:0c:43:31:55:e3:98:90:0a:ad:e5:
         0f:7d:2e:69:db:20:12:55:4e:31:6a:a9:08:ed:b2:7c:42:0c:
         e6:02:71:25:d9:e9:4d:3a:89:6b:17:8f:4e:45:5d:2d:94:bb:
         97:c4:e7:6f:c2:89:c1:93:d9:eb:2a:4f:b4:04:1c:81:2a:51:
         ec:dd:7a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:24 2025 by rpki-client