Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
File:                     Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft (raw, json)
Hash identifier:          K8fGwJxplhotdFdRqSt8QDneHDf5Xxa/4ghv1WAqLlQ=
Subject key identifier:   8A:FD:3B:21:13:5F:DB:7B:CC:7D:B7:12:5A:38:0D:CD:AF:CA:DA:E1
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Certificate issuer:       /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial:       0462
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
Manifest number:          045C
Signing time:             Sun 16 Feb 2025 02:01:56 +0000
Manifest this update:     Sun 16 Feb 2025 02:01:55 +0000
Manifest next update:     Tue 18 Feb 2025 02:01:55 +0000
Files and hashes:         1: Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl (hash: 5UUfgWvRfy3P/4tiXOe1Qlmmffzu3R+QFyOOoZEvYAE=)
                          2: B59F24BCF57211EC993D889DF1222468.roa (hash: maJQ7QpaTAEJtJEDY71F+/C/LFPT623BEcfsghzWeRo=)
                          3: 7FA7A028F57211ECB728E09CF1222468.roa (hash: SHmJD0o/WKe9DuMaCzkIRZ50PJsm8QXP+INyJbesPiI=)
                          4: 331F5746A0F411ECAE812B975A40D577.roa (hash: FvEjzuf2UFe1epBdLgowypdTxhYaL6zKJK6RJCwngCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1122 (0x462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3930AF
        Validity
            Not Before: Feb 16 02:01:55 2025 GMT
            Not After : Feb 18 02:01:55 2025 GMT
        Subject: CN=67b14714-7888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:44:7f:35:90:a2:60:82:12:92:60:e3:59:
                    b9:6b:48:fa:46:a2:82:d3:ce:12:c1:95:e1:22:7b:
                    34:82:52:ae:d5:cf:7f:d8:35:30:ec:fa:6e:37:bd:
                    70:ca:9c:31:0d:22:7f:78:c8:27:3c:5f:b9:44:4a:
                    d1:41:fe:ba:23:eb:3e:33:29:9d:31:2e:68:ef:37:
                    57:3f:02:1d:cf:d3:d1:21:4d:78:81:40:19:0c:8c:
                    0d:a8:fc:6f:26:b8:62:d8:81:36:ed:40:b9:be:47:
                    ba:5f:04:53:61:15:58:2e:de:74:e0:38:a3:80:07:
                    e2:47:a7:2e:2e:de:e9:70:9b:fc:ee:fa:cd:65:b0:
                    e5:c6:e8:99:41:d1:94:38:16:f2:cf:4b:c9:08:aa:
                    b7:d1:07:6e:ed:ca:0c:bf:0d:fc:35:89:32:c0:86:
                    3c:37:d7:70:e2:57:95:63:65:f1:0f:d0:44:28:e8:
                    26:4f:36:1c:98:56:97:1d:5d:4d:71:d8:98:27:41:
                    67:ff:29:00:78:bb:8c:a7:d9:00:08:4e:3b:70:fb:
                    6e:c2:fc:79:00:86:0e:b6:f3:d4:80:73:42:f7:45:
                    b7:a3:0b:b4:1a:db:e1:ba:9f:6e:bd:ff:3c:e6:b1:
                    38:36:07:9c:d8:f8:ba:dd:2a:e7:7a:77:a3:67:e5:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FD:3B:21:13:5F:DB:7B:CC:7D:B7:12:5A:38:0D:CD:AF:CA:DA:E1
            X509v3 Authority Key Identifier:
                keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:93:25:2b:18:c2:5e:4b:d2:54:d3:b3:c4:c8:4d:30:a4:a1:
         a8:8c:b7:07:8a:2e:07:dd:a7:dd:34:96:6e:01:3e:7e:c1:a3:
         14:5c:90:77:06:5c:2d:89:03:1b:f7:43:79:6d:b7:f2:8c:84:
         d8:26:73:36:d5:27:c0:6d:9b:0b:2f:80:f9:09:79:79:db:f5:
         3f:23:4e:70:0a:01:cc:ab:0b:74:57:7f:c4:5e:7a:74:39:d3:
         0a:d5:3e:52:6e:6b:40:02:38:08:b4:cc:78:fa:2a:2f:f3:b7:
         af:7b:df:83:21:e3:31:60:35:2e:6d:ee:d9:05:bd:53:f9:94:
         3e:34:48:6f:60:eb:fd:fb:60:22:b9:a5:42:41:33:ba:42:6d:
         02:c9:a3:11:cb:bf:ad:3e:bb:c0:c2:51:48:c0:70:92:81:d1:
         5e:e9:a4:62:d0:b6:f3:5b:d5:9b:16:4a:db:64:22:ad:c0:3c:
         c2:f0:13:62:4d:27:d0:2f:ee:95:64:24:ba:d7:dd:8e:9e:f3:
         ce:2c:49:18:6c:22:90:5c:4d:c3:33:6f:5a:58:d6:a6:0d:11:
         0c:88:0e:57:b9:67:33:53:63:3f:b0:b2:a7:5e:3a:43:ee:96:
         a5:81:40:c9:04:ee:d6:a3:96:88:b7:e4:9a:88:c4:e4:54:70:
         16:47:61:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:11 2025 by rpki-client