Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
File:                     5GfUsiPAgVQKkfIRfW5UihuCiew.mft (raw, json)
Hash identifier:          HonRufD3rjL/pnGlZDfuHY74bTHtxS8KguPzsNUC9jw=
Subject key identifier:   48:BB:46:02:C3:B0:D4:AE:6F:CE:35:05:AB:B1:BE:3B:A8:41:54:B3
Authority key identifier: E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
Certificate issuer:       /CN=F36DBA67AF/serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Certificate serial:       0409
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
Manifest number:          0406
Signing time:             Sun 16 Feb 2025 02:05:48 +0000
Manifest this update:     Sun 16 Feb 2025 02:05:48 +0000
Manifest next update:     Tue 18 Feb 2025 02:05:48 +0000
Files and hashes:         1: 5GfUsiPAgVQKkfIRfW5UihuCiew.crl (hash: 8EO70Pu8OHEJ8NKMYtjwAKzCThDrcSo4ZgFXSSpk8mg=)
                          2: 52526144E26C11EC955D66B3F1222468.roa (hash: wsdzu4KpztjrJvczumWwqzotF/Rua7W27u+H+9K+kyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBA67AF
        Validity
            Not Before: Feb 16 02:05:48 2025 GMT
            Not After : Feb 18 02:05:48 2025 GMT
        Subject: CN=67b147fc-3d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:6a:d9:aa:c3:f9:fc:2d:6e:d8:47:7e:80:
                    0d:51:40:1d:ca:ae:05:24:33:c1:88:7e:40:ec:f1:
                    5e:42:13:45:31:68:63:29:4e:2a:d8:cd:f6:f3:30:
                    5d:f3:6b:47:ac:a1:b5:39:ff:cc:d4:4b:9c:32:32:
                    59:c1:11:52:9d:23:6c:9c:2d:17:84:9d:50:d7:0c:
                    67:b7:80:b3:04:03:32:3d:ce:0b:74:3e:84:a6:7a:
                    25:c1:a0:43:5c:6f:38:b4:31:d9:a9:09:93:47:6a:
                    09:7c:72:cb:73:f0:f1:c3:45:92:a7:4d:dc:66:ad:
                    c1:3d:44:44:07:7c:b5:ae:da:ce:62:33:37:f6:7a:
                    f9:90:43:26:77:ed:fa:b0:ca:24:e7:11:e7:86:f4:
                    37:a6:0a:35:c4:d6:66:14:1a:3f:c2:a8:2a:18:4e:
                    fc:d8:4d:fd:1b:0e:ee:21:28:ac:f3:bc:af:a9:79:
                    7a:91:95:2d:20:3e:e3:54:98:d8:c5:1a:07:f1:55:
                    ce:cf:1d:91:89:5e:be:a1:04:4b:80:41:be:9f:8f:
                    cd:ec:e4:4c:36:88:02:26:89:fd:99:70:40:b2:a5:
                    61:66:70:34:4c:68:a7:df:dc:45:94:ba:9d:30:ce:
                    f5:fb:90:41:e1:99:a4:5a:0e:fb:6c:53:3a:8a:64:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BB:46:02:C3:B0:D4:AE:6F:CE:35:05:AB:B1:BE:3B:A8:41:54:B3
            X509v3 Authority Key Identifier:
                keyid:E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:fb:71:e5:ef:9a:2e:71:cc:41:e4:7f:94:ac:dd:df:69:
         6c:0f:91:18:91:ea:e1:f9:fe:be:2a:01:45:20:f9:d1:19:68:
         00:26:60:65:aa:73:71:f5:15:f6:d9:7e:a4:1f:2d:69:2c:eb:
         3f:04:ef:43:86:38:63:a6:60:0a:7f:4d:fd:ad:c9:4e:bd:e9:
         56:6a:1a:62:9c:0c:f9:f8:a6:69:df:9d:2e:17:03:8b:59:99:
         7d:50:00:04:ba:51:da:af:3a:3d:5d:e6:55:a3:00:26:61:6e:
         0c:f7:61:8b:cb:96:08:0a:40:01:43:b1:64:e8:cb:fb:2f:ba:
         14:c8:35:2e:42:28:64:ff:04:18:b6:8d:50:b3:5f:30:0c:90:
         2b:de:c1:59:09:9e:4f:e1:09:e2:32:ed:8d:41:ee:d8:83:60:
         53:c8:86:44:d3:5a:86:92:fc:f9:b7:10:9a:53:15:cd:e4:04:
         06:99:17:e5:e7:c5:cd:3f:7a:a9:d3:29:f0:86:70:b0:9f:b6:
         83:2e:84:f2:54:a5:30:b0:d3:4c:56:fb:8c:56:e2:94:7f:db:
         58:8f:97:e1:17:08:ac:f4:ae:f5:4d:83:c0:86:ed:41:24:fe:
         53:cb:06:78:01:65:45:39:b2:40:f4:8c:d4:8c:bc:6d:28:2a:
         a7:22:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:57 2025 by rpki-client