Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
File:                     jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft (raw, json)
Hash identifier:          h1DDAR0HozSzL+IdolCXuNzESIT7gtN7C2rNZJHbdvc=
Subject key identifier:   28:8E:CF:AE:7D:E3:2F:43:1B:CA:3B:46:94:1A:AE:61:EE:F1:2D:EA
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Certificate issuer:       /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial:       04B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
Manifest number:          0494
Signing time:             Wed 04 Jun 2025 02:57:55 +0000
Manifest this update:     Wed 04 Jun 2025 02:57:54 +0000
Manifest next update:     Fri 06 Jun 2025 02:57:54 +0000
Files and hashes:         1: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl (hash: RX3mCKvpnG7RJlhrJUfl6xKuCCzhE7yVuj5+jz7RKmU=)
                          2: 7510A490FBDA11EFA602538E762E951A.roa (hash: K8eoOxbyDzKOVr27RbOhGjO0ujSDpgusioRxfBEGdeg=)
                          3: 6C4F7098FFA911EF80A256B8762E951A.roa (hash: nLVSz/e6y8EyahDhz46G+ddHGy6xFQEmZ+lSlLJOj1k=)
                          4: 14D0DD48FCAC11EF8F606291762E951A.roa (hash: We9A0b1twQQd49MjYQiHevJV7RGbH0zGgiiv0BmjU4w=)
                          5: 34F044FE336D11F0A6FE177FDAE4EC9C.roa (hash: yhXToE/ivhLm4HgJKr6OrdpT7iNJJtMwXlhtqU/6qu4=)
                          6: 332A33CAFFA911EF84F40CB6762E951A.roa (hash: nAe7SVEbrFBsJsSB2QjjEXejvC3k+OkB22lneTxOJs4=)
                          7: E9B17964E76511ECB6B242F6F1222468.roa (hash: QX79+PCfVXxj+OGB6vFI/wIK/0K3qU3aoir40/gZdAI=)
                          8: 565A309AAA4411EE82EC719A775412E6.roa (hash: w+NXlL7WYD4hkFC1Zg/6oqPBSnT10uVKTO9QtVy5wAw=)
                          9: BEB0D28EFCAA11EF97EC4A88762E951A.roa (hash: jZflyQkEOdvyH7cORlNM6RzxEc6T6GfFgEfB6W779Ik=)
                          10: E67C4F66FD2A11EFAFF97E57762E951A.roa (hash: 0KEac1L9NXZHhaATxDUbvggLHQuqEfxaMAc1BKGdXv0=)
                          11: 83013456FCAD11EF87CD979A762E951A.roa (hash: mbSp9RiZ25UX/mkuzNaTIeKIdEAGi8iGWvP9NDqM15M=)
                          12: FBD8F91C315911ED857E3ED8F1222468.roa (hash: F3tjPa1GVDjVxl63DkFUkmny30YoZBaG3q0D655v1oc=)
                          13: 6C20E300FCAB11EFA301CF8C762E951A.roa (hash: OvsUXNSmfjEutAwyrB9JnPffvmOpMIjkA04wcKDLKRY=)
                          14: F0DCA42CFCAA11EF9CB0AF88762E951A.roa (hash: BzJmdF2Js2FoOGSwDan1wfPrzdWX29V5MPNuA8XkzBM=)
                          15: 731820EAFD6B11EFA5FAAE9C762E951A.roa (hash: WBg3iidspfXKbYNsCa9+4QR22QeQEUUkOPouJHSY0gU=)
                          16: 84D63AD4FCAC11EFBDC66892762E951A.roa (hash: eiarFVPH9xcpuLJ9GJbS6IkBNStXLIhNVgC/u2KChdQ=)
                          17: D4C1004CFCAC11EF87CD1196762E951A.roa (hash: fLCcmeTVgTEV53OJny1Gldrpxh7k8xccoM8fDP287hI=)
                          18: 5673440CFCAC11EF9614E491762E951A.roa (hash: 6r9fkhk67fd1QL6JR1kRn7YKpBT/BIiBUWKwgxbcGDI=)
                          19: A7A6264AFCAD11EF8068089B762E951A.roa (hash: rW7LzojMuUG5spBMNnlWIM3kxFSqz8o4h8U+vR8ivoI=)
                          20: 03A4356EFCAD11EF82317896762E951A.roa (hash: qhNGvd3D7vHMLKqczxc5ocVwafHWZgDyr7UqLit5iMA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202 (0x4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
        Validity
            Not Before: Jun  4 02:57:54 2025 GMT
            Not After : Jun  6 02:57:54 2025 GMT
        Subject: CN=683fb633-6f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:b2:b3:c1:ee:5c:2a:df:6f:d7:29:e0:99:
                    2b:8c:5d:24:e9:71:f1:89:9d:70:13:ea:f4:81:1f:
                    60:d9:26:1d:20:35:e1:69:c6:d3:fb:bb:2f:95:db:
                    3d:a3:00:d9:36:14:e6:a6:17:2e:da:52:a3:62:9f:
                    a3:65:2f:0d:23:eb:c9:b4:17:bf:88:15:5c:a2:3d:
                    36:10:ff:f6:cf:58:b2:fa:3b:df:50:5c:e7:cc:1c:
                    ea:d0:8c:86:54:e7:68:cd:ae:98:05:91:14:0e:73:
                    a4:f8:87:c2:a1:31:81:7c:f0:e1:3f:61:04:8a:62:
                    23:68:c6:fc:bb:48:4e:31:fc:f9:3b:71:99:39:32:
                    04:02:12:47:35:d4:bb:f6:79:12:5c:16:db:e8:ab:
                    b2:da:ba:bc:9b:60:52:6d:a4:d6:d0:1c:14:98:a2:
                    2a:a8:93:21:e9:50:ea:ba:a0:f2:66:cc:4c:f5:91:
                    3a:df:31:d3:d3:49:07:bd:95:be:2c:7e:b4:2a:b7:
                    ea:fe:49:c2:70:6f:c5:e1:16:45:2d:1e:eb:74:31:
                    56:03:52:6b:ab:f4:14:a3:14:5f:ef:ef:c0:3a:1c:
                    6b:ec:3e:fd:ae:8b:83:5d:ff:e3:ee:dd:4b:70:57:
                    9e:11:a7:3f:a0:1f:27:d1:20:6e:ad:e7:31:99:56:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8E:CF:AE:7D:E3:2F:43:1B:CA:3B:46:94:1A:AE:61:EE:F1:2D:EA
            X509v3 Authority Key Identifier:
                keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e3:b5:3e:5b:c7:51:4c:79:fc:06:7e:3c:4f:9a:7c:2b:28:
         66:d8:98:7f:81:c9:78:2b:d4:07:ed:8b:53:7d:79:76:e1:cb:
         3d:0a:63:3a:8d:dc:5b:54:61:c0:96:98:e5:af:e4:fc:c9:1d:
         4f:62:05:68:56:37:28:93:d4:e3:bb:6e:49:ba:cf:b4:c7:ab:
         7a:95:73:6a:98:f5:e7:10:ac:87:2e:98:b2:7e:ee:39:37:78:
         c3:64:42:37:4b:f6:93:13:82:30:1d:6f:66:f7:7a:ec:6c:65:
         fb:17:03:6f:17:1d:98:41:b7:43:29:68:03:50:79:85:ff:d5:
         c9:ca:79:42:70:5d:ee:89:3a:b2:d0:08:dd:cd:5e:91:37:c3:
         a5:8f:2e:1e:9e:43:1a:71:8f:60:8f:20:bf:40:2d:a2:da:b2:
         86:a2:f5:19:fa:d4:1c:f6:3b:f5:ec:b4:20:c3:f0:cf:07:bd:
         06:50:18:cb:16:81:2a:13:5d:cb:85:a7:54:31:7a:b5:77:fd:
         50:68:dc:e4:2a:38:b2:13:b7:ab:b5:74:44:74:8c:01:82:ef:
         3a:38:fa:ff:4e:52:c7:8b:d9:5a:d0:1e:ff:00:c7:1d:ff:dd:
         6b:89:4f:83:0b:06:ee:9e:26:6c:a4:0e:8b:85:70:72:ff:30:
         1e:08:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:15:38 2025 by rpki-client