Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
File:                     j29vvKPGNM2_8Exy6bDsgG-YPKg.mft (raw, json)
Hash identifier:          td9WmYrwR6K6E9HlLu+1VBWWORdbZiuNcVghbb5sMVI=
Subject key identifier:   B4:85:54:5D:47:0F:C3:0D:63:2F:7E:61:92:97:A7:23:2A:0A:70:0B
Authority key identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
Certificate issuer:       /CN=F36B57DFAF/serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Certificate serial:       03D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
Manifest number:          03CF
Signing time:             Thu 03 Apr 2025 02:10:49 +0000
Manifest this update:     Thu 03 Apr 2025 02:10:49 +0000
Manifest next update:     Sat 05 Apr 2025 02:10:49 +0000
Files and hashes:         1: j29vvKPGNM2_8Exy6bDsgG-YPKg.crl (hash: j7BBn0v5L3UEYIb9oMmRXZkJFpP3J8ShzbXcNoBTTwA=)
                          2: FB14937C4F2711EF830F0C61762E951A.roa (hash: NKUhSMZnwRNOJiKnhnRiI1tGFsbNrt1VXb7ny/WxBiE=)
                          3: 44EF15B42F7511ED934148D1F1222468.roa (hash: SVbI5/mcJ+ND6giCV7RVPDPt1p34yK1IAdaZ9mYU07E=)
                          4: 2C1A7CD22F7411ED88A88DCEF1222468.roa (hash: Sh1RvoN24iiQuOige1NA+5ffJjIAW81e8ojWpZOFayY=)
                          5: 1B58135E2F7511ED979DE2D0F1222468.roa (hash: DSGqTaxjbT+K9lrWKUIwbu4/OZVecKFE50cHdO72jtI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979 (0x3d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B57DFAF
        Validity
            Not Before: Apr  3 02:10:49 2025 GMT
            Not After : Apr  5 02:10:49 2025 GMT
        Subject: CN=67edee29-d966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:fd:77:0f:8b:26:a8:68:d4:4c:db:71:ba:
                    74:4e:4c:68:d8:3b:55:1f:ec:c1:41:86:4a:13:ed:
                    e8:dc:f1:0b:18:fe:c9:c2:21:0f:5b:ab:74:48:94:
                    a8:bc:ab:01:aa:37:48:61:8d:0c:c1:62:a4:cc:bc:
                    56:9f:53:62:64:29:52:8d:5f:94:a9:d2:27:47:e8:
                    51:9a:04:d9:f1:8c:47:f9:67:97:07:d3:a1:5a:f4:
                    30:e3:2f:00:64:c2:c5:30:eb:e1:6d:a7:ba:ac:89:
                    80:79:6b:72:20:df:d5:78:88:f0:2d:95:b2:0e:21:
                    82:ae:cb:cf:cd:9a:2c:7c:5a:74:75:31:f8:47:ac:
                    2c:22:ff:6f:a7:78:c9:d4:99:fd:d3:df:1d:e3:09:
                    54:2b:00:bc:dc:2f:03:60:57:2e:7a:71:25:4c:5a:
                    13:c1:ec:b2:58:8b:7b:fe:03:bd:74:47:ca:e0:2e:
                    18:17:4a:f2:59:82:71:c6:5b:7e:9f:be:6b:d3:32:
                    91:8b:8e:42:4f:27:a9:45:66:4d:8d:46:fb:c5:9e:
                    a9:87:8d:5f:44:62:2b:ee:8d:c2:0b:10:cb:a3:7f:
                    e5:97:9d:49:1d:b0:0e:46:82:8c:8f:02:10:36:64:
                    b4:c2:70:68:75:98:6c:91:87:ec:43:0d:b6:89:51:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:85:54:5D:47:0F:C3:0D:63:2F:7E:61:92:97:A7:23:2A:0A:70:0B
            X509v3 Authority Key Identifier:
                keyid:8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fa:b7:a2:62:14:b1:d4:d7:16:75:aa:ae:0f:b5:d9:85:8d:
         ae:ec:57:7a:61:6c:dd:2a:b7:43:62:60:50:28:24:5c:5f:59:
         ed:f4:0c:8b:32:29:4a:e8:6c:ed:99:73:ff:56:41:38:1d:e5:
         b7:02:8c:42:18:db:2a:1d:2f:d1:ea:58:86:ee:0f:54:13:d9:
         e9:f6:0e:78:2a:d9:f8:ca:c5:88:e7:2b:51:72:d6:06:58:a7:
         5c:7d:1b:0d:7d:92:26:a2:d9:7a:83:a1:46:7f:87:0a:1d:82:
         eb:95:9c:4e:4b:6b:db:1b:a8:65:68:37:71:dc:40:3e:c2:f1:
         5e:2a:bd:93:9e:b3:eb:d2:2f:39:3e:3b:42:ce:4d:c1:fa:92:
         4b:e9:b6:53:cb:5f:e9:0f:e7:70:a1:5e:c0:0a:e3:ba:91:56:
         e1:27:c8:76:1e:67:16:7b:c9:ed:32:d9:7b:b5:2e:f8:1f:26:
         19:41:7b:6c:84:5a:c6:5b:a6:62:e4:77:34:c6:04:57:46:46:
         00:cb:a1:12:33:d4:fc:6d:a4:97:f3:7f:a7:d1:4b:8b:9e:d4:
         e2:c0:6e:93:05:04:2e:d9:88:a9:e3:1c:ae:06:fb:03:16:bf:
         60:c2:cf:a8:c8:d8:a0:8d:73:9b:af:0f:f6:9a:ad:c3:3f:4f:
         0b:2d:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:45:31 2025 by rpki-client