Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
File:                     m4nQTrnUft-_pgddFSb5yb_koPU.mft (raw, json)
Hash identifier:          72GpgEzou08abO4M1GuUCqtzXHvKEBIB2Kt27NxM6z8=
Subject key identifier:   6A:87:27:DF:F6:C1:FB:EE:A7:73:81:3D:9E:01:E5:A0:0B:34:AC:06
Authority key identifier: 9B:89:D0:4E:B9:D4:7E:DF:BF:A6:07:5D:15:26:F9:C9:BF:E4:A0:F5
Certificate issuer:       /CN=F36C94E7AF/serialNumber=9B89D04EB9D47EDFBFA6075D1526F9C9BFE4A0F5
Certificate serial:       0122
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
Manifest number:          0120
Signing time:             Thu 13 Mar 2025 03:06:00 +0000
Manifest this update:     Thu 13 Mar 2025 03:06:00 +0000
Manifest next update:     Sat 15 Mar 2025 03:06:00 +0000
Files and hashes:         1: m4nQTrnUft-_pgddFSb5yb_koPU.crl (hash: saBIakwA6djiNfNlXvG7wI3Och3368nL2MfS3gCdAew=)
                          2: 704926D8280111EF84F6804E7DDC24C2.roa (hash: 3vt49i2b05v3GXaZFK4O6BAWjRmYDlAAsj6Uqb28tW0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Mar 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C94E7AF
        Validity
            Not Before: Mar 13 03:06:00 2025 GMT
            Not After : Mar 15 03:06:00 2025 GMT
        Subject: CN=67d24b98-1662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:f7:c1:08:11:64:1f:05:44:72:12:5d:14:
                    b6:6a:6a:fb:78:9b:2e:a2:b6:87:e1:cf:96:94:8a:
                    8b:df:81:d8:fb:12:a4:06:c7:fd:2f:c4:cd:17:68:
                    21:cf:69:43:f1:b3:49:9c:9a:a0:ba:ef:c4:b7:4f:
                    85:d1:e9:88:2b:61:bd:6f:e0:29:e2:5b:cf:ec:ab:
                    cd:af:ec:9e:1d:9e:0a:7a:d4:0d:e3:6b:77:49:80:
                    4b:fd:a5:2a:f6:8f:1d:5f:0c:02:87:22:ba:52:cd:
                    61:ba:c5:eb:89:61:77:31:47:65:97:a1:21:22:f0:
                    b9:8b:5c:aa:8a:df:a9:d8:53:18:ab:43:dd:c2:93:
                    5c:c0:e5:04:f1:e0:dc:57:d2:fd:51:ee:97:d7:69:
                    a5:6c:ac:f2:ee:cc:0c:34:ff:36:1e:10:0e:80:92:
                    2e:a3:b4:ae:73:00:62:74:c5:5c:6d:70:b3:7d:e5:
                    56:6d:3a:cc:f1:46:54:ed:aa:40:3d:1d:cb:f9:ee:
                    b6:01:d4:97:ce:e4:8c:58:a9:48:0a:34:a1:e6:88:
                    77:22:2c:10:05:b7:fe:db:a6:ac:81:bb:a5:8f:4b:
                    89:aa:9a:6a:a5:45:71:1e:8a:75:0a:b7:9d:26:92:
                    7f:9a:40:f7:7b:99:e6:5c:a1:c6:f3:b7:75:20:bd:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:87:27:DF:F6:C1:FB:EE:A7:73:81:3D:9E:01:E5:A0:0B:34:AC:06
            X509v3 Authority Key Identifier:
                keyid:9B:89:D0:4E:B9:D4:7E:DF:BF:A6:07:5D:15:26:F9:C9:BF:E4:A0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ae:e4:25:df:94:04:e4:11:54:65:51:5b:5e:4f:fd:be:c0:
         28:ec:9f:25:1f:b4:f4:e5:18:7d:2a:16:48:57:08:de:d6:04:
         9d:1b:93:73:5a:ca:44:b7:e1:9e:b9:bf:3a:6b:8c:70:38:aa:
         c6:26:c8:d4:67:fb:23:f6:3e:21:79:cc:a4:3b:5f:b9:2b:ce:
         9b:23:53:37:7e:f3:e2:ff:7a:59:0e:21:4c:ab:b6:8a:1d:fb:
         c2:80:60:09:e1:25:09:a1:d7:4b:f6:18:11:eb:63:21:4a:f6:
         43:2b:71:02:ac:6b:ed:33:2b:96:6b:40:c7:f6:f3:0a:49:cd:
         24:bd:b3:6f:fb:b0:76:6c:82:03:61:bd:93:ba:09:9e:cc:04:
         5f:28:27:9e:a9:b5:ac:c2:48:e5:26:bc:20:b0:76:b3:eb:7a:
         f7:01:91:29:d3:c1:11:0c:3e:d2:ef:df:11:11:e8:39:ec:2f:
         71:4b:ad:96:0c:5b:12:a1:74:17:98:60:15:6e:a0:4b:70:dc:
         41:ca:1b:c3:da:71:b0:96:ae:a8:a1:d4:82:5d:ec:d6:6d:c6:
         3e:eb:09:2a:ce:c1:3c:78:9c:81:61:c6:c7:f8:27:02:a6:a4:
         14:f5:d0:bc:1f:1d:8b:9e:93:27:81:c7:bc:10:91:3a:5e:11:
         6e:ba:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:49:08 2025 by rpki-client