Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
File:                     OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft (raw, json)
Hash identifier:          pTb3d2v5pOqJUEJ6cAE1GhgmtIwbRLQG0C30rL8uJL4=
Subject key identifier:   AA:7A:DD:0D:1E:36:39:7C:2A:BF:33:7A:13:75:63:97:F1:CE:E1:C8
Authority key identifier: 39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB
Certificate issuer:       /CN=F36C01B9RI/serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
Certificate serial:       019C
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
Manifest number:          019A
Signing time:             Sat 05 Apr 2025 02:51:34 +0000
Manifest this update:     Sat 05 Apr 2025 02:51:34 +0000
Manifest next update:     Mon 07 Apr 2025 02:51:34 +0000
Files and hashes:         1: OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl (hash: zvZUHC184txHhDcy//NhFPjGXrim9appF9+Ni3iuwVs=)
                          2: FCC5AF24DAF811EE935BB276775412E6.roa (hash: lFol3HpR6fMYzPmNkPhAztGIiqTs04+UE2qgxyB1A54=)
                          3: 8FEDACA2DBAD11EEB79EC1A0775412E6.roa (hash: v3lIrrWZHaGAgIYY4ddWroI+DgCBWv6OTEzoRUSn5vA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                          rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C01B9RI
        Validity
            Not Before: Apr  5 02:51:34 2025 GMT
            Not After : Apr  7 02:51:34 2025 GMT
        Subject: CN=67f09ab6-9b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:70:05:b7:48:6d:04:cb:06:0f:ba:e7:0c:
                    ab:fd:42:98:92:63:39:54:c8:04:e4:a2:d3:85:4c:
                    b4:aa:38:fa:78:71:d0:c1:fe:5c:3f:54:4b:d4:64:
                    5b:29:3b:3d:23:ad:bb:7e:42:bf:9e:d2:da:5a:79:
                    36:f0:4b:20:e6:35:3c:4b:1b:93:36:4a:77:ec:d5:
                    ff:61:b2:79:30:bf:8f:bd:e4:c1:73:67:e3:3d:19:
                    16:e5:aa:07:df:03:69:0c:48:fd:2c:9b:f5:d9:be:
                    8f:74:6f:e2:dc:1a:76:e1:7a:f7:9e:67:26:90:8e:
                    10:a8:0e:8c:44:69:3a:91:2e:f9:57:7d:53:49:a3:
                    b1:95:c3:e0:f7:df:50:eb:70:58:09:cc:35:86:25:
                    0a:7c:85:37:08:60:ab:11:74:1c:5f:bf:a8:74:c3:
                    d7:72:01:be:3d:23:72:77:d3:0b:d4:fb:ad:28:2b:
                    6f:79:70:7a:c3:36:6f:1a:c7:17:a6:c0:f6:15:ff:
                    ef:e8:c5:71:4e:fa:23:a8:70:eb:2a:4a:2a:51:3d:
                    b0:a5:e1:fc:d4:1a:71:7c:23:f4:04:6b:4c:f7:04:
                    a5:c9:19:3b:e3:81:11:3d:8b:26:34:3c:5f:16:bb:
                    78:b3:1f:7a:fb:23:1d:98:f7:d6:e3:58:f6:57:c6:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7A:DD:0D:1E:36:39:7C:2A:BF:33:7A:13:75:63:97:F1:CE:E1:C8
            X509v3 Authority Key Identifier:
                keyid:39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:f8:02:ff:46:2d:d2:b9:f0:5a:a5:b6:a1:b0:18:05:eb:
         2c:c1:af:67:85:e2:d2:04:83:c4:95:da:a0:28:d1:03:12:f6:
         76:44:8a:5d:7f:38:da:41:fd:85:2e:49:ec:cf:64:e7:6f:18:
         91:10:2f:9e:85:41:d1:f5:be:b0:dc:12:4d:ad:78:d0:6a:a2:
         9c:c7:9c:2d:2c:1d:0c:fd:63:6c:4e:ac:c8:5f:a1:dd:a1:7c:
         93:65:2d:8b:05:72:b9:53:8e:2d:7a:9f:20:d5:50:44:0d:e2:
         ec:22:27:17:11:a9:e3:6b:1d:0c:77:7b:86:10:b0:0c:17:b9:
         23:fe:26:a4:88:c1:69:d8:ae:12:d0:16:a6:0f:6e:09:2d:d2:
         48:87:59:92:b7:c7:4b:28:9b:a3:f0:04:8f:79:9d:6d:3d:e9:
         70:42:46:b8:75:47:28:4f:46:5f:b2:c6:ec:e1:10:dd:f3:27:
         b6:a9:cc:8c:30:24:a0:59:62:76:b3:3e:27:e0:e0:7d:6e:80:
         28:a8:df:0e:47:12:6f:96:49:c5:ae:4e:36:43:12:db:77:e1:
         e0:4d:67:64:94:b0:b9:74:c1:7e:49:2a:22:f2:dc:ad:21:fa:
         a8:0b:bf:a8:d6:06:30:92:0b:56:cd:66:2c:3e:2f:1c:28:d9:
         58:03:18:1e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzAxQjlSSTExMC8GA1UEBRMoMzk2NDlENjM4RjhDNTIwOTM4NEQ2MkI4ODBERjdG
OEM3RTQ2RTFGQjAeFw0yNTA0MDUwMjUxMzRaFw0yNTA0MDcwMjUxMzRaMBgxFjAU
BgNVBAMTDTY3ZjA5YWI2LTliMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMIHAFt0htBMsGD7rnDKv9QpiSYzlUyATkotOFTLSqOPp4cdDB/lw/VEvU
ZFspOz0jrbt+Qr+e0tpaeTbwSyDmNTxLG5M2Snfs1f9hsnkwv4+95MFzZ+M9GRbl
qgffA2kMSP0sm/XZvo90b+LcGnbheveeZyaQjhCoDoxEaTqRLvlXfVNJo7GVw+D3
31DrcFgJzDWGJQp8hTcIYKsRdBxfv6h0w9dyAb49I3J30wvU+60oK295cHrDNm8a
xxemwPYV/+/oxXFO+iOocOsqSipRPbCl4fzUGnF8I/QEa0z3BKXJGTvjgRE9iyY0
PF8Wu3izH3r7Ix2Y99bjWPZXxpprAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUqnrd
DR42OXwqvzN6E3Vjl/HO4cgwHwYDVR0jBBgwFoAUOWSdY4+MUgk4TWK4gN9/jH5G
4fswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMwMUI5L0FGREE5RkRDREEyRTExRUVBNkQxMjVBNzc3NTQxMkU2L09XU2RZ
NC1NVWdrNFRXSzRnTjlfakg1RzRmcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L09XU2RZNC1NVWdrNFRXSzRnTjlfakg1RzRmcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzAxQjkvQUZEQTlGRENEQTJFMTFFRUE2RDEyNUE3Nzc1NDEy
RTYvT1dTZFk0LU1VZ2s0VFdLNGdOOV9qSDVHNGZzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkO/gC/0Yt0rnwWqW2obAYBesswa9nheLS
BIPEldqgKNEDEvZ2RIpdfzjaQf2FLknsz2TnbxiREC+ehUHR9b6w3BJNrXjQaqKc
x5wtLB0M/WNsTqzIX6HdoXyTZS2LBXK5U44tep8g1VBEDeLsIicXEanjax0Md3uG
ELAMF7kj/iakiMFp2K4S0BamD24JLdJIh1mSt8dLKJuj8ASPeZ1tPelwQka4dUco
T0Zfssbs4RDd8ye2qcyMMCSgWWJ2sz4n4OB9boAoqN8ORxJvlknFrk42QxLbd+Hg
TWdklLC5dMF+SSoi8tytIfqoC7+o1gYwkgtWzWYsPi8cKNlYAxge
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:21 2025 by rpki-client