Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
File:                     jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft (raw, json)
Hash identifier:          j+4pkCjyu/JKaOYaNlgV3kwdEHVXszvR5dzNGdH7ltI=
Subject key identifier:   C3:67:1E:26:7F:CD:0C:BE:86:14:D9:D0:C1:48:77:43:53:AC:26:58
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Certificate issuer:       /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial:       0471
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
Manifest number:          0454
Signing time:             Thu 03 Apr 2025 02:03:57 +0000
Manifest this update:     Thu 03 Apr 2025 02:03:57 +0000
Manifest next update:     Sat 05 Apr 2025 02:03:57 +0000
Files and hashes:         1: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl (hash: EqbEHHJr1KG5y+mu0NvT+nouK2F51UTIWkr5wM+ZL6k=)
                          2: 7510A490FBDA11EFA602538E762E951A.roa (hash: K8eoOxbyDzKOVr27RbOhGjO0ujSDpgusioRxfBEGdeg=)
                          3: 6C4F7098FFA911EF80A256B8762E951A.roa (hash: nLVSz/e6y8EyahDhz46G+ddHGy6xFQEmZ+lSlLJOj1k=)
                          4: 14D0DD48FCAC11EF8F606291762E951A.roa (hash: We9A0b1twQQd49MjYQiHevJV7RGbH0zGgiiv0BmjU4w=)
                          5: 332A33CAFFA911EF84F40CB6762E951A.roa (hash: nAe7SVEbrFBsJsSB2QjjEXejvC3k+OkB22lneTxOJs4=)
                          6: E9B17964E76511ECB6B242F6F1222468.roa (hash: QX79+PCfVXxj+OGB6vFI/wIK/0K3qU3aoir40/gZdAI=)
                          7: 565A309AAA4411EE82EC719A775412E6.roa (hash: w+NXlL7WYD4hkFC1Zg/6oqPBSnT10uVKTO9QtVy5wAw=)
                          8: BEB0D28EFCAA11EF97EC4A88762E951A.roa (hash: jZflyQkEOdvyH7cORlNM6RzxEc6T6GfFgEfB6W779Ik=)
                          9: E67C4F66FD2A11EFAFF97E57762E951A.roa (hash: 0KEac1L9NXZHhaATxDUbvggLHQuqEfxaMAc1BKGdXv0=)
                          10: 83013456FCAD11EF87CD979A762E951A.roa (hash: mbSp9RiZ25UX/mkuzNaTIeKIdEAGi8iGWvP9NDqM15M=)
                          11: FBD8F91C315911ED857E3ED8F1222468.roa (hash: F3tjPa1GVDjVxl63DkFUkmny30YoZBaG3q0D655v1oc=)
                          12: 6C20E300FCAB11EFA301CF8C762E951A.roa (hash: OvsUXNSmfjEutAwyrB9JnPffvmOpMIjkA04wcKDLKRY=)
                          13: F0DCA42CFCAA11EF9CB0AF88762E951A.roa (hash: BzJmdF2Js2FoOGSwDan1wfPrzdWX29V5MPNuA8XkzBM=)
                          14: 731820EAFD6B11EFA5FAAE9C762E951A.roa (hash: WBg3iidspfXKbYNsCa9+4QR22QeQEUUkOPouJHSY0gU=)
                          15: 84D63AD4FCAC11EFBDC66892762E951A.roa (hash: eiarFVPH9xcpuLJ9GJbS6IkBNStXLIhNVgC/u2KChdQ=)
                          16: D4C1004CFCAC11EF87CD1196762E951A.roa (hash: fLCcmeTVgTEV53OJny1Gldrpxh7k8xccoM8fDP287hI=)
                          17: 5673440CFCAC11EF9614E491762E951A.roa (hash: 6r9fkhk67fd1QL6JR1kRn7YKpBT/BIiBUWKwgxbcGDI=)
                          18: A7A6264AFCAD11EF8068089B762E951A.roa (hash: rW7LzojMuUG5spBMNnlWIM3kxFSqz8o4h8U+vR8ivoI=)
                          19: 03A4356EFCAD11EF82317896762E951A.roa (hash: qhNGvd3D7vHMLKqczxc5ocVwafHWZgDyr7UqLit5iMA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1137 (0x471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BC80AAF
        Validity
            Not Before: Apr  3 02:03:57 2025 GMT
            Not After : Apr  5 02:03:57 2025 GMT
        Subject: CN=67edec8d-3dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:6b:05:10:29:86:f0:f7:d4:11:81:e6:a7:
                    b3:53:64:eb:40:29:8e:f8:61:a1:24:55:fd:fa:a4:
                    0b:f3:33:05:8e:d3:b1:fd:da:12:be:03:e2:67:a3:
                    2d:cb:d0:19:57:44:55:ae:86:9a:87:90:da:5e:9c:
                    39:c1:7c:a3:b6:73:61:5e:03:e0:22:72:c7:73:8d:
                    a9:e5:8d:5b:93:c2:47:f4:94:65:11:50:46:f1:d5:
                    7c:f1:6f:1d:f3:71:16:ed:08:3d:47:5c:50:bb:9e:
                    4f:58:64:d5:4b:3a:f3:10:a3:4e:a5:1e:30:fb:08:
                    7d:a0:1d:8e:e4:d8:69:d1:c4:28:39:87:27:b4:29:
                    b5:d7:a0:7d:be:c1:f7:b2:49:7a:2a:c2:96:9c:2d:
                    5c:f0:78:7f:a0:80:6e:a9:6c:4f:e0:56:cd:8a:d2:
                    9b:21:3c:dd:9d:8b:c7:4c:d9:a6:b1:b4:08:93:ac:
                    d0:91:d1:9c:4f:18:13:b3:2d:b6:6d:99:f1:f9:07:
                    e2:31:d9:4f:e2:68:e9:87:47:2d:4c:20:64:a6:82:
                    b8:1c:eb:d2:11:07:01:1e:f1:0d:25:df:99:bc:26:
                    9b:60:0e:47:40:b0:26:28:79:43:2d:08:f7:e0:62:
                    51:31:53:26:dd:5e:69:f9:fd:df:1b:cd:73:60:e5:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:67:1E:26:7F:CD:0C:BE:86:14:D9:D0:C1:48:77:43:53:AC:26:58
            X509v3 Authority Key Identifier:
                keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:a5:3c:da:98:de:15:cd:8a:8c:2c:23:c4:6a:35:b1:cc:
         ce:66:a1:88:e4:51:ed:36:82:61:21:23:73:e2:10:0b:75:f8:
         d2:f6:dc:a5:b4:27:38:47:d5:7e:ff:61:34:18:da:49:a9:b5:
         38:ee:94:65:8d:ea:b6:6d:69:22:cd:ee:be:fb:df:7f:6a:6c:
         f4:f5:60:13:4c:a9:48:7b:ab:cf:67:9b:87:3b:78:0c:be:6a:
         5e:40:20:6d:3c:c9:cd:08:40:f2:f7:8e:9e:99:5a:38:bc:da:
         04:c0:c5:88:cb:03:63:93:14:9c:54:6d:d2:21:4b:23:72:db:
         29:9a:df:fb:2f:cb:ff:23:9f:53:44:20:54:9f:46:4a:27:33:
         94:ac:6e:05:62:71:04:a1:45:ef:c7:90:2b:48:22:0e:83:df:
         e3:08:f8:58:71:6c:9b:2a:01:92:b0:62:f7:7b:21:f2:25:47:
         39:99:1c:f0:11:05:ae:06:f9:3f:10:bb:8b:ba:9c:96:e2:21:
         df:7e:83:68:63:ec:bc:bb:bc:69:f8:83:55:a1:15:a4:ce:6b:
         19:47:0d:3f:5a:ed:ba:1a:f5:39:1c:04:c7:b4:83:50:5b:04:
         35:e9:65:ed:61:e9:46:b7:20:3f:0d:bd:62:b9:5c:f5:66:74:
         11:d1:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:46:57 2025 by rpki-client