Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
File:                     3qpe4dcNYY7NkB2u26jIYjuvyv4.mft (raw, json)
Hash identifier:          fguOugeOtkkYMScBOh5w6EdqNUmO3RS/cNpXj1NfP7c=
Subject key identifier:   06:4C:4B:1A:94:F0:D9:70:6B:66:E6:D3:6C:61:6D:E4:61:E8:F0:75
Authority key identifier: DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE
Certificate issuer:       /CN=F36B506BAF/serialNumber=DEAA5EE1D70D618ECD901DAEDBA8C8623BAFCAFE
Certificate serial:       02D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
Manifest number:          02D2
Signing time:             Sun 16 Feb 2025 02:27:58 +0000
Manifest this update:     Sun 16 Feb 2025 02:27:58 +0000
Manifest next update:     Tue 18 Feb 2025 02:27:58 +0000
Files and hashes:         1: 3qpe4dcNYY7NkB2u26jIYjuvyv4.crl (hash: ziX12XqT1KOamb8LY2q0am5SBpRTeUFF2VCXlw5xHc4=)
                          2: 16B06660CA3111ED940108AFF1222468.roa (hash: jr9WoWdm4T7mWL+JKRzWsuT9eHBQ8UqgT0cWGf8Lei4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B506BAF
        Validity
            Not Before: Feb 16 02:27:58 2025 GMT
            Not After : Feb 18 02:27:58 2025 GMT
        Subject: CN=67b14d2e-6294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:8c:d1:13:e7:30:ea:b5:06:b9:8a:ed:26:
                    35:dc:5c:c0:a0:8a:62:93:81:3d:ff:1d:12:e7:ba:
                    80:ba:5b:bc:72:fd:af:3a:15:19:d6:c9:b0:24:8b:
                    1f:25:70:ca:be:c7:d0:30:cd:98:24:ee:1e:18:7c:
                    54:35:06:02:54:f0:78:37:e8:b7:24:9f:14:9d:26:
                    6d:67:a0:07:93:7e:90:4f:41:2c:b9:98:fb:ac:c3:
                    07:ae:51:a4:f4:49:28:b6:49:ff:83:69:66:91:dc:
                    60:91:fa:5a:f6:48:0f:58:ca:af:9e:25:e8:42:25:
                    77:1e:e3:aa:c3:7e:3f:62:ef:8f:91:0c:6c:56:d3:
                    70:ea:28:0a:0d:39:a3:c5:ae:c1:62:95:a0:46:64:
                    5a:20:3a:42:a6:d1:d0:40:4e:79:f0:f9:21:7a:7b:
                    65:89:e9:37:f1:94:28:d2:3c:44:b3:71:3c:6a:49:
                    a0:c1:a5:31:9e:6a:5f:99:c4:f0:ed:36:e0:e5:ec:
                    ae:dc:09:70:74:18:2f:a6:4b:99:9f:02:1c:9b:73:
                    1b:73:35:a7:42:13:55:40:bd:02:eb:58:fa:c7:ec:
                    c7:af:e6:2d:5a:bc:2d:4f:03:17:9f:ce:6a:ee:45:
                    19:8c:7c:c0:83:3b:f7:20:c2:55:30:fd:dc:4d:16:
                    f7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4C:4B:1A:94:F0:D9:70:6B:66:E6:D3:6C:61:6D:E4:61:E8:F0:75
            X509v3 Authority Key Identifier:
                keyid:DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d3:af:68:de:e9:dc:40:df:7d:ea:ef:af:0c:16:e3:88:3a:
         74:af:11:86:8b:7f:cb:8f:10:64:6f:41:ec:ca:1a:01:25:9f:
         4f:80:11:66:ee:c5:9b:02:d8:5c:24:8a:fd:3d:bd:68:9f:36:
         46:2c:c2:a4:79:30:2d:e1:04:73:40:79:39:47:d9:e2:2d:33:
         b7:46:b5:4a:99:28:d5:bc:56:d0:1f:7f:ec:ad:da:aa:01:67:
         c3:82:d2:81:15:fc:51:95:48:56:e0:23:bd:44:72:e8:44:58:
         b4:68:d9:48:ce:63:69:33:45:a5:bc:fa:5c:f3:17:ea:6e:3b:
         eb:18:28:3a:80:39:35:40:01:7e:2a:eb:b6:e0:b6:12:05:8c:
         e6:e2:ba:aa:99:75:bc:5b:57:fe:41:b4:77:5a:46:9f:27:60:
         59:fe:cf:1d:87:a8:72:97:19:a3:35:ce:fb:fc:9e:aa:fa:01:
         06:91:82:a5:9d:a9:13:b8:49:a4:a9:e9:50:52:60:6a:6a:a4:
         15:0f:3f:f2:86:a2:c5:c5:26:ca:2b:4d:7c:fb:c5:54:07:c1:
         13:50:55:ac:4a:e5:86:86:c0:93:aa:a3:f4:5d:ab:39:f2:e1:
         34:bc:35:e3:01:14:e7:e5:85:7d:e3:82:28:0d:30:a9:f4:f5:
         ba:ab:0e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:51 2025 by rpki-client