Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
File:                     G-LsVuSB2cQGqMGrnFIvumhbdwk.mft (raw, json)
Hash identifier:          F1SfPswn0Bm2wu9SrgyJG9xr7YdHGoB8wCgycLjDqVw=
Subject key identifier:   9B:C2:D4:64:45:82:DF:72:BA:9C:CF:20:11:22:31:1C:93:1B:99:21
Authority key identifier: 1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09
Certificate issuer:       /CN=F36C8DB2AF/serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
Certificate serial:       0945
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
Manifest number:          0940
Signing time:             Sun 16 Feb 2025 01:08:06 +0000
Manifest this update:     Sun 16 Feb 2025 01:08:06 +0000
Manifest next update:     Tue 18 Feb 2025 01:08:06 +0000
Files and hashes:         1: G-LsVuSB2cQGqMGrnFIvumhbdwk.crl (hash: Pd+dWC6NRDftiLfXNqzq9KL6CG1fLUtg00p2RG/JTlc=)
                          2: 3A5D54C8064011EF8CD97956017001B1.roa (hash: 9/mp/JPe+mMfGz2E8/eg18PGdN/V1h9ltv/VJ2aQXwQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2373 (0x945)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8DB2AF
        Validity
            Not Before: Feb 16 01:08:06 2025 GMT
            Not After : Feb 18 01:08:06 2025 GMT
        Subject: CN=67b13a76-43c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:f5:67:54:3f:a1:b6:e2:10:ce:01:03:63:
                    2f:32:62:c0:38:c3:6c:93:01:af:4d:83:9a:ac:a8:
                    0b:02:9b:08:c6:95:e8:cc:d6:fb:7f:31:fc:ff:c5:
                    09:aa:58:ed:56:dd:59:63:e8:aa:f6:44:61:7b:47:
                    23:d0:8f:6e:7b:e5:0e:f7:d6:64:1b:f4:04:0c:36:
                    66:d5:c6:ba:be:37:59:10:1f:9a:c0:ca:76:b5:0f:
                    75:4c:e4:73:49:cd:a6:25:32:32:0e:ad:6c:c9:8c:
                    80:3b:bb:d6:9b:8a:b0:e2:d9:0c:c8:f6:73:41:6b:
                    5b:b2:65:1c:95:fd:12:f9:9c:54:74:30:37:a7:ed:
                    8d:9f:19:42:2f:e7:0c:a9:e4:c1:e9:55:f1:a5:4f:
                    e3:5e:3b:b2:12:4d:62:62:77:86:00:b5:e9:b8:84:
                    ce:07:69:1f:86:12:ce:ea:82:9d:66:02:88:5a:b5:
                    62:b0:4a:d1:5e:18:53:7c:8b:58:1a:00:88:b4:9e:
                    ab:9c:d6:7e:dc:f8:9d:29:90:99:bc:e7:d9:a7:5f:
                    f2:f0:d7:3b:e7:e7:b6:c5:5d:c9:aa:3f:b8:31:ac:
                    41:0a:2e:3d:e3:50:f4:4e:2c:c7:42:0b:ae:b3:aa:
                    b6:f2:51:0e:a0:62:44:d4:1b:1d:1f:7a:f5:61:b9:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C2:D4:64:45:82:DF:72:BA:9C:CF:20:11:22:31:1C:93:1B:99:21
            X509v3 Authority Key Identifier:
                keyid:1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0d:17:7c:46:e1:30:58:64:35:a1:a8:d0:da:4f:a3:cf:d2:
         07:46:31:8a:37:25:45:73:a5:de:35:e1:33:5d:c8:34:32:d3:
         ca:9b:15:34:02:f4:1a:62:11:39:29:1b:5e:f6:84:04:f6:52:
         82:86:32:24:30:75:34:11:d9:9b:f9:33:4e:bb:61:f0:59:82:
         a0:d0:a7:d7:1c:7a:ea:d0:08:46:85:14:f8:4a:1e:f8:a4:e1:
         d0:17:e3:e7:4d:ff:e7:64:bd:71:b3:46:7d:30:a4:8f:15:ac:
         a4:8f:67:9c:4c:b3:11:96:c7:4d:24:af:c7:5a:2f:ea:0e:8a:
         c0:df:62:d6:2e:4a:37:09:91:47:6d:ed:f8:eb:b2:56:8f:4e:
         2c:30:1e:72:04:9f:64:3d:9a:35:47:eb:22:d3:be:ad:2c:5a:
         ae:aa:03:fc:70:dd:35:b6:6e:df:6b:71:5a:90:66:c8:d6:89:
         ab:01:21:c6:18:b5:af:93:4c:1c:d0:a3:c9:85:68:2b:50:4e:
         43:aa:06:46:85:0c:b6:9a:53:65:1d:ec:d1:02:a3:2b:90:8d:
         3e:29:48:1f:c1:94:5d:5a:eb:c4:a7:be:cd:ec:0b:1b:1e:75:
         fc:49:66:3e:34:2c:a8:41:b3:13:30:9e:41:09:e1:e5:35:68:
         9a:fd:24:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:29 2025 by rpki-client