Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
File:                     9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json)
Hash identifier:          0tZ3XXzuZFnvNEw3i+0iqJAbaEbwKFhTHB+UYBQLB2I=
Subject key identifier:   72:0D:F6:29:26:D7:45:A7:5D:36:C4:A0:65:62:A5:A1:F5:D2:F3:76
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       03BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
Manifest number:          039F
Signing time:             Sun 16 Feb 2025 02:16:20 +0000
Manifest this update:     Sun 16 Feb 2025 02:16:19 +0000
Manifest next update:     Tue 18 Feb 2025 02:16:19 +0000
Files and hashes:         1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: gnTECJVsAwVc5hWIHqC1G2WudZ/WN8yno6dj/QSoyj0=)
                          2: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=)
                          3: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=)
                          4: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=)
                          5: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=)
                          6: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=)
                          7: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=)
                          8: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=)
                          9: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=)
                          10: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=)
                          11: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=)
                          12: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=)
                          13: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=)
                          14: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=)
                          15: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=)
                          16: 6338988EA87D11ED87EC69BCF1222468.roa (hash: IZXX51uk7GT1RL3vx7pjPtZqXq+pAq50SdmhzbXOnq4=)
                          17: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=)
                          18: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=)
                          19: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=)
                          20: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF
        Validity
            Not Before: Feb 16 02:16:19 2025 GMT
            Not After : Feb 18 02:16:19 2025 GMT
        Subject: CN=67b14a74-3cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:79:93:61:a4:fc:62:f4:a1:fa:6f:d4:81:
                    76:8b:7c:a8:f2:84:ef:6e:94:ed:25:6b:93:a2:43:
                    56:3e:eb:02:ea:2f:f7:58:80:c3:12:b0:e4:29:97:
                    a8:e5:91:ae:4a:9e:34:9b:92:06:dd:bf:81:b4:54:
                    30:19:ba:a3:04:dd:c1:82:2d:6b:62:ce:78:c3:16:
                    05:cb:74:f8:d1:17:26:e9:97:8e:40:3f:f8:6e:30:
                    b0:fd:7b:8b:dc:ea:1e:74:6d:d4:1a:6f:e4:9e:d1:
                    76:e7:c2:7d:c4:e5:c4:24:aa:a2:c0:ba:71:b0:1b:
                    6a:48:98:60:7e:92:52:8e:ba:6d:d2:e0:3b:c4:33:
                    df:39:41:bf:f5:78:c4:91:df:bf:3c:fe:76:04:ce:
                    11:3b:c4:73:34:2b:c2:d4:7c:78:86:c5:ec:03:5a:
                    dd:0c:71:83:42:3b:04:8a:99:16:49:7c:09:52:b1:
                    39:7c:5c:ba:16:2f:9a:5a:62:d4:3b:71:31:3e:91:
                    a0:d0:1b:5d:53:b3:73:d3:4d:55:b5:5b:7f:8f:13:
                    13:fc:9f:23:da:2d:5f:7e:75:08:98:91:73:fa:4a:
                    0d:dc:95:40:81:bd:3d:ba:d2:a6:96:f0:84:9b:48:
                    d0:f4:f2:4b:74:5d:e5:18:79:3c:eb:7e:d7:18:9e:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0D:F6:29:26:D7:45:A7:5D:36:C4:A0:65:62:A5:A1:F5:D2:F3:76
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:bd:9b:95:55:45:26:a1:2a:58:33:97:d5:48:91:ab:5e:89:
         a9:c5:34:bb:f3:06:6a:14:20:3a:69:15:83:a2:37:b7:e7:9a:
         a8:da:db:90:a7:39:fd:39:62:c4:89:3a:d7:33:76:01:e1:b6:
         79:d0:e0:03:7b:8b:81:d4:14:9d:93:20:0a:c6:cb:04:11:39:
         0c:15:8c:33:68:8a:19:4a:7f:63:ec:31:a1:e0:ea:5e:09:8d:
         ee:a2:f5:81:7a:2c:41:22:6d:82:15:fc:da:32:93:38:22:0e:
         ad:43:8d:42:c5:f2:03:96:6c:30:39:58:45:3e:f6:71:3f:25:
         14:a3:06:69:1d:d4:70:13:c4:0d:0e:a6:db:51:8d:b4:0a:c5:
         26:74:a7:63:77:15:94:73:52:fa:34:5a:a0:66:28:a1:45:5f:
         69:d2:7d:ba:bd:a0:fe:7a:61:53:66:35:ff:6d:3d:a8:94:6e:
         f8:e4:62:94:ec:49:74:30:33:76:71:58:d6:7b:10:97:68:03:
         c1:93:cc:ab:6a:69:16:f0:41:18:ab:78:1a:bd:78:aa:6b:a6:
         28:b4:29:d9:ef:46:fe:8e:23:de:e0:e3:e0:46:a6:91:dc:8d:
         8b:a2:22:9d:62:cc:58:30:f4:5a:37:09:44:02:a1:18:8b:2e:
         96:03:ff:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:37 2025 by rpki-client