Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
File:                     IrcjfYpuI0VBundSql-48xqQzYA.mft (raw, json)
Hash identifier:          bO+sSwgFc5HD1Psrkg7ZTOB5VOTLz7vtFk2YwVBl18s=
Subject key identifier:   EB:D1:34:99:5B:10:21:07:82:95:97:7A:78:06:CE:A8:61:D9:B3:43
Authority key identifier: 22:B7:23:7D:8A:6E:23:45:41:BA:77:52:AA:5F:B8:F3:1A:90:CD:80
Certificate issuer:       /CN=F36AA888AF/serialNumber=22B7237D8A6E234541BA7752AA5FB8F31A90CD80
Certificate serial:       0865
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
Manifest number:          0862
Signing time:             Sun 16 Feb 2025 01:15:07 +0000
Manifest this update:     Sun 16 Feb 2025 01:15:06 +0000
Manifest next update:     Tue 18 Feb 2025 01:15:06 +0000
Files and hashes:         1: IrcjfYpuI0VBundSql-48xqQzYA.crl (hash: MhH3ZV8PqBvHH4esQrXeS+IVUl87ZjpQVaA9nX7MhWs=)
                          2: 548444FC886811E9ADF34468F8AEA228.roa (hash: 1UElPZRMsw/FlEPeVKGSteHH7UZ+xvNvTZQ/F+SkwW4=)
                          3: 06F644A2886211E9862C9963F8AEA228.roa (hash: UqbhxzZyJOFJyGBOr36sTmH2MV8pK2xrkgTJYiq0otE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AF
        Validity
            Not Before: Feb 16 01:15:06 2025 GMT
            Not After : Feb 18 01:15:06 2025 GMT
        Subject: CN=67b13c1b-543b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:76:bc:6b:88:b1:34:98:77:38:4d:21:e2:
                    89:89:2c:7b:48:89:22:f4:b5:c0:27:fa:47:ad:32:
                    87:d5:f4:ba:6a:e2:e3:d3:67:72:25:d3:44:dd:34:
                    b5:dc:0c:60:72:3b:97:53:df:25:29:29:6e:8b:16:
                    9f:ca:34:0b:75:e8:ba:02:40:f3:dc:09:38:5a:e0:
                    78:a7:56:85:98:32:05:3e:e5:ba:53:08:90:1b:88:
                    7c:98:42:e3:6e:fc:d2:d0:ad:df:86:56:6f:40:84:
                    ab:c7:8b:2d:85:e9:19:bc:58:b3:b1:98:4f:6d:34:
                    a0:00:7c:66:36:7b:90:f1:09:4a:ad:48:fc:16:0f:
                    3d:7f:ca:d4:9f:75:cc:4a:f7:40:50:17:ea:f8:62:
                    7e:98:a1:db:1c:01:f7:eb:9a:7f:ab:af:1f:83:6d:
                    73:bf:9b:f8:c5:6a:73:21:ca:88:f3:24:f3:96:a1:
                    bb:b1:84:78:50:48:5c:e2:57:23:9b:be:45:f1:2c:
                    69:e2:ca:26:7b:d9:ef:fd:fb:05:cf:33:cf:3d:3c:
                    1f:c8:7e:94:5f:41:26:c3:41:09:5c:e0:aa:79:26:
                    27:8a:bb:03:38:93:bc:b4:b8:8e:bc:c6:7e:e9:82:
                    5b:02:ad:ac:3a:50:9d:eb:fe:4f:7b:44:51:8f:14:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D1:34:99:5B:10:21:07:82:95:97:7A:78:06:CE:A8:61:D9:B3:43
            X509v3 Authority Key Identifier:
                keyid:22:B7:23:7D:8A:6E:23:45:41:BA:77:52:AA:5F:B8:F3:1A:90:CD:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:03:b4:9b:42:e9:f6:09:88:3c:fb:11:ea:4f:73:20:b8:60:
         37:a1:18:48:a3:40:8e:f3:9e:75:d3:b3:ee:7a:96:c9:16:f7:
         1e:1c:71:27:54:aa:2d:64:d7:a6:4e:b0:05:50:e2:94:c7:f5:
         9b:3e:92:87:9c:3a:da:43:f6:f9:43:90:fa:a4:db:9c:23:80:
         62:0a:28:3a:50:8b:6d:58:45:ae:5a:bf:d8:34:e0:de:2d:71:
         cd:3a:ef:b4:85:c2:b0:ae:29:9d:4e:d7:01:90:a3:50:4a:df:
         6b:6c:03:ca:39:f3:31:bb:5e:7d:71:b6:69:da:65:a2:3b:37:
         60:e2:da:e7:4c:02:88:10:88:91:dd:fb:0e:d7:c6:dc:29:f6:
         34:42:8c:43:38:07:88:34:df:b5:96:fa:e9:2f:fe:5f:ad:66:
         51:89:4e:e8:45:42:71:df:d9:5d:74:b9:e4:cd:b3:c4:5c:fb:
         3f:9c:75:68:a0:fc:f5:8b:27:fd:b9:4d:5f:d2:f9:fe:11:95:
         12:d6:4b:74:fd:15:b1:38:10:a7:81:14:6d:a8:7d:d7:47:11:
         53:fa:c4:b4:43:0f:aa:5b:5c:ec:63:42:ae:4e:76:90:1e:21:
         bf:b3:25:21:fe:18:35:73:f9:76:e4:93:de:fb:ff:c8:4d:bb:
         be:98:5a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:23 2025 by rpki-client