Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
File:                     x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft (raw, json)
Hash identifier:          zLzlBUcp7X8QNmPoD+e90cDUK+8YWjgroe/PhE2Q9bQ=
Subject key identifier:   8D:E2:D7:1A:4A:C1:C3:C7:F0:4F:FE:D9:55:D1:EC:30:7E:7F:2F:9C
Authority key identifier: C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86
Certificate issuer:       /CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
Certificate serial:       020F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
Manifest number:          020C
Signing time:             Thu 03 Apr 2025 02:43:45 +0000
Manifest this update:     Thu 03 Apr 2025 02:43:45 +0000
Manifest next update:     Sat 05 Apr 2025 02:43:45 +0000
Files and hashes:         1: x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl (hash: OUZn9iTskqDSItnl2/B1TAjBbaOUQp3D9Wbn9UlEEag=)
                          2: B2D67FBC81B811EFBF661993762E951A.roa (hash: uoPtPDn/rbTQRBGn7Sv62W9Z11akCbhfrMo3RcO5nHI=)
                          3: 566028A281BB11EFA2B4C6A4762E951A.roa (hash: sff2TxKKkLZbomvR8u92IEB7S8eTuT8nC5FtfM/Fsf4=)
                          4: D54273E281BA11EFA327CDA0762E951A.roa (hash: 5R8cd2x4uz0VmbtOqIFPktz58DCFoYAlE0EfcBaZH7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C629BAF
        Validity
            Not Before: Apr  3 02:43:45 2025 GMT
            Not After : Apr  5 02:43:45 2025 GMT
        Subject: CN=67edf5e1-5b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:9c:4a:7e:72:2b:64:2f:82:68:07:61:22:
                    e0:01:e5:5f:80:c1:88:cf:e0:69:1a:dc:9a:57:99:
                    12:96:64:29:fa:56:0c:c5:a4:e6:a5:f7:02:d3:50:
                    97:93:e3:a1:06:7b:a9:d4:06:98:02:62:75:05:7e:
                    37:fc:38:ae:b5:27:82:31:bd:26:dc:3f:41:05:73:
                    30:4b:b0:5a:f4:8d:9a:16:d8:02:65:17:66:e1:e7:
                    1c:cd:0d:36:01:59:b0:7a:57:b8:83:e7:d3:5a:4a:
                    9c:71:34:70:38:9a:83:a4:a6:83:48:fc:95:ba:d2:
                    e4:9f:46:71:37:60:b6:d5:e6:78:1a:e2:96:65:c0:
                    4a:ef:ad:bc:96:3a:16:9c:43:6b:48:95:cd:b8:cd:
                    be:60:c9:07:92:90:4b:b8:76:e0:b2:63:b7:4b:ec:
                    4c:25:96:2d:ce:1e:a7:be:a6:9f:cb:61:38:b6:14:
                    6f:8b:b6:2e:58:60:c6:ff:41:13:b3:1d:73:a3:df:
                    1d:dd:57:a8:81:bf:dc:c2:36:21:40:c0:ea:7e:e4:
                    8c:35:ac:51:d4:63:f0:fe:3d:9e:11:8a:ff:b5:dd:
                    1e:07:7e:6a:06:ca:73:4d:1d:48:b2:bb:95:4c:07:
                    89:08:bf:2f:bc:bf:af:4d:4d:0d:0d:8e:99:5b:d2:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E2:D7:1A:4A:C1:C3:C7:F0:4F:FE:D9:55:D1:EC:30:7E:7F:2F:9C
            X509v3 Authority Key Identifier:
                keyid:C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0c:13:89:da:af:58:88:28:6c:96:db:0a:bb:e7:2d:24:50:
         b5:ec:6b:f0:0c:1c:b0:47:58:9b:3c:fd:b3:4d:63:48:80:9d:
         9a:47:d2:69:ce:32:73:9d:06:5e:ff:64:c6:c8:cd:c8:d3:75:
         56:84:84:89:07:09:2f:bd:78:0f:89:36:38:24:02:30:2c:47:
         62:7b:48:fd:4c:e8:ce:6c:a9:ee:7a:22:0a:58:b3:32:6d:78:
         92:bf:b7:e6:e9:02:04:09:9e:9e:e8:db:2e:ab:37:ee:17:3d:
         a6:8c:94:7e:f5:c9:d6:a9:99:da:d8:54:d0:13:35:d1:bb:b4:
         5f:8d:07:12:2c:e8:57:dc:92:a0:4e:09:ec:c6:30:8a:26:5f:
         47:11:d4:f8:30:a1:bd:9c:54:94:47:af:e5:3c:5a:d8:e9:38:
         f8:22:0c:c0:7f:46:af:68:2f:c6:d8:b8:62:8b:ad:35:37:e7:
         95:9d:43:e1:2f:68:0e:cf:6e:5d:6e:f1:ff:2c:b1:74:55:86:
         be:1c:49:e2:d1:c5:ac:ac:d3:f7:9c:17:b3:1d:0b:f0:28:e4:
         d9:9c:52:3c:fd:0a:0d:92:83:7d:97:8d:54:5d:62:6c:38:c9:
         0d:8f:98:b0:a3:ca:32:b5:fc:d2:db:c4:fd:ba:d8:67:c5:04:
         e0:ec:40:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:27:10 2025 by rpki-client