Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
File:                     EoXp9a6JDQnrah2cFSaY2CVpQXM.mft (raw, json)
Hash identifier:          NoDNnk6lT7WLkiGwtJpOQYqpwHjh/3hOqD0Xu6fLD0E=
Subject key identifier:   41:B7:00:BE:87:D1:5D:B7:2A:F5:58:DA:C6:D2:69:13:3B:F9:26:15
Authority key identifier: 12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
Certificate issuer:       /CN=F36B2D09AF/serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
Certificate serial:       0136
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
Manifest number:          0134
Signing time:             Thu 03 Apr 2025 03:03:48 +0000
Manifest this update:     Thu 03 Apr 2025 03:03:47 +0000
Manifest next update:     Sat 05 Apr 2025 03:03:47 +0000
Files and hashes:         1: EoXp9a6JDQnrah2cFSaY2CVpQXM.crl (hash: 1ZuozdRVCj8z+HMsCOf53iP2dxL/DMdT/QZZ3jsiyiY=)
                          2: 81A877024B1B11EF97889885762E951A.roa (hash: Jb7FsCfPieRiHewZHkBoyTfyXOoZ5GSQBgW72tN/jmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2D09AF
        Validity
            Not Before: Apr  3 03:03:47 2025 GMT
            Not After : Apr  5 03:03:47 2025 GMT
        Subject: CN=67edfa94-906b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:cb:d8:b3:d2:1e:01:af:d3:75:fa:2f:75:
                    a2:84:87:57:a0:f4:d0:c2:6a:0f:c3:28:b5:ee:13:
                    d7:5b:20:7e:3d:47:7f:4c:bb:c0:fb:37:31:35:de:
                    c6:f8:cb:c1:c8:9c:60:10:c0:a9:39:7c:ca:f7:a0:
                    6d:e2:65:28:55:52:4e:57:d7:68:a9:08:c0:96:4c:
                    13:9d:19:49:12:5b:bc:b3:4d:34:9e:9b:f6:a5:a1:
                    ff:23:cd:16:02:dc:c9:d4:03:ee:40:dd:54:26:17:
                    e6:65:37:ba:1d:17:bc:e2:94:77:48:83:49:82:d6:
                    d6:1c:3b:4a:88:af:65:51:30:ad:ac:bf:2f:0a:e2:
                    97:80:95:7f:71:28:a3:40:d6:7a:58:a0:2d:1a:be:
                    e8:0d:5c:80:c8:1f:2b:c1:9d:48:07:56:b1:fb:c5:
                    a3:c0:10:89:49:ec:ec:98:9a:07:57:bc:da:82:77:
                    0b:68:60:f2:bd:ec:26:77:8e:eb:57:2a:4b:84:41:
                    e0:fa:c5:99:1e:80:eb:2c:c5:16:2f:f1:ee:50:bb:
                    93:4b:a1:02:a0:c4:64:39:9a:e7:5b:5f:65:59:5c:
                    fb:7c:70:ff:1a:1f:e3:cc:6f:23:a4:f1:5e:15:f8:
                    66:41:de:c8:bb:61:a9:cd:48:e2:4f:94:f5:c2:64:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B7:00:BE:87:D1:5D:B7:2A:F5:58:DA:C6:D2:69:13:3B:F9:26:15
            X509v3 Authority Key Identifier:
                keyid:12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9f:ec:a4:d0:6e:e4:30:c1:5f:ff:97:98:a7:6b:59:d5:7d:
         53:a4:f2:30:f1:42:5c:8a:f9:cf:92:a4:98:55:fe:25:72:7e:
         09:d2:d1:6a:b5:30:d5:c6:ba:31:c2:ef:48:46:91:da:d4:9c:
         11:5e:9f:eb:74:b0:db:33:a2:b9:9b:34:2c:28:9d:2f:e0:b0:
         b9:83:85:6c:40:89:1d:85:be:d0:23:16:6c:be:fc:1f:63:c1:
         d5:23:76:b5:1c:b2:2e:2a:b8:2f:6f:15:a2:d6:d1:5c:13:98:
         56:98:b4:fa:ff:cd:05:37:65:d4:db:10:68:be:4b:3c:41:2d:
         d5:70:d2:76:1c:77:a9:21:7a:80:f9:fd:87:9c:ba:46:0d:d2:
         32:b6:4f:d7:ba:e4:cd:9d:c9:c8:ad:28:61:f9:db:11:39:6e:
         45:f7:1f:e7:50:c2:78:27:34:c0:6d:f2:f8:35:80:e2:58:e4:
         7e:11:b5:c5:fd:a7:58:62:e7:b9:60:79:01:1d:a5:ad:ac:56:
         aa:85:bf:98:c6:89:1f:44:39:ae:06:55:21:1b:56:cc:b4:ff:
         be:69:73:cf:c5:0f:88:2b:54:93:2f:8e:e3:e9:49:b4:bf:37:
         6a:a7:59:6c:9a:f3:0b:db:26:22:61:ed:5f:e9:f3:49:40:4f:
         fa:e0:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:06:13 2025 by rpki-client