Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
File:                     _JRbBmroeaYb32_LGIWcV6LnFtA.mft (raw, json)
Hash identifier:          iSTlKV1RTmHQTFH4MBK1U90z91ftbNiZqon/klOOQ24=
Subject key identifier:   1D:2B:89:5E:05:6B:F8:E1:05:CF:5C:FA:A1:64:2D:21:33:75:3D:8C
Authority key identifier: FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
Certificate issuer:       /CN=F36D518DAF/serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
Certificate serial:       0578
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
Manifest number:          0571
Signing time:             Sun 16 Feb 2025 01:46:34 +0000
Manifest this update:     Sun 16 Feb 2025 01:46:34 +0000
Manifest next update:     Tue 18 Feb 2025 01:46:34 +0000
Files and hashes:         1: _JRbBmroeaYb32_LGIWcV6LnFtA.crl (hash: DelYoYg2/nEN5kDDb84qVRMiAiC0QHHX3HmVH4OvdZk=)
                          2: 9E14C3CCA2DB11ECAC4872A95A40D577.roa (hash: sqHCz7QhDeQNCk+Oi9HPhFuqRLltffe8AfdV9zemzA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D518DAF
        Validity
            Not Before: Feb 16 01:46:34 2025 GMT
            Not After : Feb 18 01:46:34 2025 GMT
        Subject: CN=67b1437a-530c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:d1:af:af:0e:69:7e:67:8a:cc:c2:05:db:
                    2d:f0:65:57:ef:f1:e3:39:8a:fb:1c:0e:56:9e:54:
                    72:7f:b4:b7:b8:38:0a:c7:95:75:55:9c:11:28:e8:
                    41:ce:91:05:e7:8e:22:68:dd:8b:41:fc:d0:31:2c:
                    76:1d:c2:e4:52:66:dc:50:0f:f1:ef:4d:2a:09:8a:
                    3a:2d:3d:dc:63:c8:d8:53:c6:81:7b:df:70:64:eb:
                    2f:98:eb:8d:52:d3:fc:1d:c6:5a:b2:51:39:63:63:
                    b0:cb:42:c6:64:a0:40:8f:52:c0:f8:fe:3a:75:1d:
                    dc:77:e5:6f:db:15:fe:08:87:22:70:5c:02:58:de:
                    9d:68:28:64:54:d5:2c:14:3b:71:ed:5d:7e:bd:9d:
                    3c:43:13:a0:3e:f9:6b:26:ef:e4:21:66:4a:1c:dd:
                    45:ae:26:df:1a:9a:8f:a5:79:de:52:08:13:f3:c9:
                    5e:10:02:ef:7e:73:72:8c:93:6b:a9:7a:f6:49:b2:
                    90:64:93:06:58:de:50:84:62:1a:da:34:03:06:43:
                    b1:0e:0f:f1:fe:81:1a:cc:3b:ef:9f:6d:f8:66:63:
                    06:6b:72:a4:82:0c:07:65:ad:79:e2:f6:96:48:87:
                    0d:f7:3a:d3:34:e0:26:e4:1f:bf:09:ba:4d:98:17:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2B:89:5E:05:6B:F8:E1:05:CF:5C:FA:A1:64:2D:21:33:75:3D:8C
            X509v3 Authority Key Identifier:
                keyid:FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:56:0e:93:8a:2a:16:b6:b1:31:45:77:1c:eb:31:8a:27:e9:
         04:45:53:39:db:46:6a:63:d0:94:2e:b1:f7:28:35:4a:2c:dc:
         c1:7f:6d:8d:3a:ef:58:24:04:6c:dc:64:05:a7:bb:a7:be:4b:
         29:e8:e0:c0:77:ec:3a:22:4b:01:81:df:33:68:08:47:36:ba:
         a5:11:58:a6:b9:f9:01:46:14:8b:44:46:58:e8:33:4a:5b:8b:
         cf:df:59:2b:36:7d:5a:96:d2:92:a2:b0:25:07:d1:05:7a:7a:
         3c:1d:6e:34:e8:9a:0d:10:e4:2d:bf:18:d0:13:c2:8d:e2:0b:
         49:1b:02:e1:7d:33:5c:aa:e9:5d:67:d1:07:cc:2f:09:9d:07:
         5a:62:2f:b3:d2:0a:57:e9:25:94:fb:b3:d2:c6:eb:63:ae:c2:
         d2:ba:f2:c0:f8:df:98:d3:7c:b4:4b:8b:e9:9b:9c:9f:c8:60:
         99:0b:bf:c5:0a:ec:3c:d0:92:85:64:12:97:e6:66:65:48:32:
         a5:e6:97:a7:40:f5:c2:31:24:a2:62:31:8e:74:7e:85:42:2d:
         a4:f0:4b:21:bd:db:5d:30:29:1d:ae:d2:8c:50:1e:bd:87:4d:
         c8:3f:ac:f3:0b:d9:02:37:20:99:b4:5b:3c:a7:b7:dc:f3:90:
         12:69:9e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:36 2025 by rpki-client