Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
File:                     G-LsVuSB2cQGqMGrnFIvumhbdwk.mft (raw, json)
Hash identifier:          kyhSm0f3yyARI6NeEDPjHkJ39+yOlrF7s2HfU3B5/R8=
Subject key identifier:   72:34:6D:B9:A9:11:C8:79:76:C8:24:78:69:CF:8C:44:D1:EA:DA:AA
Authority key identifier: 1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09
Certificate issuer:       /CN=F36C8DB2AF/serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
Certificate serial:       0981
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
Manifest number:          097C
Signing time:             Wed 16 Apr 2025 01:23:13 +0000
Manifest this update:     Wed 16 Apr 2025 01:23:12 +0000
Manifest next update:     Fri 18 Apr 2025 01:23:12 +0000
Files and hashes:         1: G-LsVuSB2cQGqMGrnFIvumhbdwk.crl (hash: Pvo+Bmdikp3N1LxZVz2ySYqKxHuqRoIs6oBfWaXZ3cA=)
                          2: 3A5D54C8064011EF8CD97956017001B1.roa (hash: 9/mp/JPe+mMfGz2E8/eg18PGdN/V1h9ltv/VJ2aQXwQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 18 Apr 2025 00:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2433 (0x981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8DB2AF, serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
        Validity
            Not Before: Apr 16 01:23:12 2025 GMT
            Not After : Apr 18 01:23:12 2025 GMT
        Subject: CN=67ff0681-eaa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:7a:5b:d3:70:d3:e0:b2:b4:ae:90:8a:1e:
                    84:23:fb:23:b1:65:9c:ab:bf:d9:e6:96:1e:72:c9:
                    05:6f:7b:08:ff:5f:1b:c3:9c:57:f1:9a:e5:f2:ac:
                    be:0e:99:cd:0e:03:a4:63:5b:70:9b:03:35:7c:a9:
                    e0:f0:23:b5:db:21:eb:fc:6f:86:46:bb:1f:6d:ee:
                    f8:11:86:76:ad:67:be:70:c1:98:2f:dd:b3:39:e0:
                    eb:4a:71:c5:94:34:9d:70:e2:ee:46:46:d7:2d:ca:
                    37:7b:98:bf:c0:ee:61:ac:48:b3:5f:bd:85:d0:95:
                    ab:8a:b4:74:3a:49:85:d3:a0:eb:e0:00:19:36:41:
                    4a:f7:5b:66:13:ff:a5:a1:27:c7:dc:4f:00:de:02:
                    3f:88:d8:15:2c:f9:2a:84:24:f3:8a:ad:8a:1f:a5:
                    c4:e3:6d:4a:6a:77:2f:25:44:47:67:5e:63:b9:eb:
                    6d:f4:a5:1b:66:b4:37:1b:08:df:42:94:a7:10:27:
                    3f:dc:f6:06:88:df:2d:14:a2:4b:d6:26:48:7a:6f:
                    fc:3b:3f:92:90:cb:05:a4:6d:37:75:95:4a:bd:41:
                    2b:57:78:9f:f6:3b:32:82:e6:60:91:36:43:38:dd:
                    94:ab:5f:a0:23:4b:97:c3:6d:e9:6f:60:94:b2:fe:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:34:6D:B9:A9:11:C8:79:76:C8:24:78:69:CF:8C:44:D1:EA:DA:AA
            X509v3 Authority Key Identifier:
                keyid:1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3a:cb:00:ee:69:c7:58:54:dd:85:83:ef:5e:56:b6:4b:ad:
         31:d0:7b:9a:98:f1:3c:1d:61:f7:6f:77:21:2a:b8:89:11:0e:
         81:24:63:cb:b0:bf:98:ae:b1:f7:01:e9:1b:94:81:d8:b1:c6:
         61:22:2a:53:7b:90:71:c7:23:c8:8e:ee:d0:9a:19:f5:69:a5:
         4c:8a:91:dc:6c:9d:ca:de:ee:fa:11:3f:94:74:1b:e8:55:ce:
         f9:5c:1d:14:6b:da:40:5e:7c:ce:0c:7b:f3:07:fa:a1:70:a9:
         ce:3e:22:c3:cf:22:63:92:4d:e0:7c:2c:c1:c3:d1:b0:26:95:
         48:d3:c1:8f:78:53:42:92:1f:5f:19:cb:c2:df:d2:25:d3:31:
         7d:29:41:91:39:15:b2:b6:30:30:4c:a6:97:55:1d:bc:20:e0:
         62:d6:29:34:e1:e4:1e:2f:4e:d5:ad:02:81:97:a1:f7:78:63:
         ec:b6:d6:3c:ac:e3:34:0b:3b:74:5e:c5:83:cb:81:26:37:4d:
         10:d1:54:55:ed:e1:61:1f:2f:dc:4d:5c:cf:bf:25:8e:0a:b8:
         5a:bf:12:c5:2e:ca:a1:68:94:65:b1:26:b5:22:77:03:7c:8a:
         94:1d:2e:81:53:73:80:9b:d8:a9:31:13:28:df:36:80:18:fb:
         f4:90:7b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:06:36 2025 by rpki-client