Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File:                     KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier:          SNug5WD4q0MwAUJyD5t8QEFjVhSnhGvBiD3mE8CA5pA=
Subject key identifier:   39:A8:05:90:38:06:B6:94:AB:76:DF:B3:25:68:5C:55:6D:62:B5:A8
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer:       /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial:       041D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number:          0415
Signing time:             Sun 16 Feb 2025 02:05:25 +0000
Manifest this update:     Sun 16 Feb 2025 02:05:25 +0000
Manifest next update:     Tue 18 Feb 2025 02:05:25 +0000
Files and hashes:         1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: EvRgDIQHXRu9mztxGOjKFEcMsJETTQAXa2XBgCJgABE=)
                          2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
                          3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
                          4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
                          5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
                          6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E29EDAF
        Validity
            Not Before: Feb 16 02:05:25 2025 GMT
            Not After : Feb 18 02:05:25 2025 GMT
        Subject: CN=67b147e5-00c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:76:88:0e:ad:4f:c6:45:2d:90:ff:ec:2c:a0:
                    3b:10:d4:9b:c9:e6:d4:59:b0:6b:0c:7e:01:ef:d3:
                    61:e9:10:fe:36:e3:d7:4d:e1:4c:2e:13:1a:02:a2:
                    ad:95:f9:aa:58:70:54:03:80:3f:f2:ea:1c:11:46:
                    ef:16:10:a4:45:c2:cd:00:f5:30:21:a3:3f:4f:f0:
                    11:67:a8:d7:0d:ea:cf:b3:c0:d3:f6:af:d4:94:88:
                    f0:ec:62:1e:8a:1f:01:9c:dd:97:66:82:7c:05:93:
                    bf:c4:62:82:c9:2f:49:52:b3:2f:7e:26:c1:a4:d3:
                    2f:ca:35:8a:c7:1c:49:24:44:b5:73:dd:70:37:b9:
                    48:e0:1a:56:16:1b:10:c0:1e:72:52:cd:62:a6:3e:
                    b0:7c:a5:88:16:20:b9:4b:ed:d7:01:6e:0f:32:83:
                    c5:03:4d:a3:d4:91:8c:6a:61:f5:f1:d7:a5:56:68:
                    5d:32:3f:75:e6:a1:84:9e:7b:c1:d0:8b:6e:39:09:
                    16:30:39:28:2a:93:e2:2a:9d:a6:61:c4:cd:5e:e8:
                    e8:2c:62:e4:61:68:a4:77:fa:92:f9:1d:f7:8f:df:
                    26:cc:35:42:cf:ae:75:11:44:ae:62:31:5b:2b:12:
                    6b:f6:69:03:f6:ab:61:ff:b7:39:25:08:b1:39:c2:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A8:05:90:38:06:B6:94:AB:76:DF:B3:25:68:5C:55:6D:62:B5:A8
            X509v3 Authority Key Identifier:
                keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:c4:a3:8a:2a:da:fd:7a:90:cc:63:a5:ee:bd:8b:2f:b2:
         9e:20:34:b6:8c:00:ea:ca:19:dd:01:7b:c3:fd:58:33:74:9e:
         e8:b4:40:c0:41:d1:1c:b2:3e:7e:8c:e5:07:1d:1d:17:e8:5a:
         1d:a9:01:2b:d5:97:f3:84:c8:13:4e:d6:6b:5f:b7:7d:26:a7:
         86:c7:b2:9e:37:dc:76:db:66:61:0f:11:12:06:7a:ee:ed:7b:
         d2:a2:37:7b:b1:cb:74:ad:38:4d:3f:74:48:1c:6a:d1:5e:29:
         93:72:28:3a:d7:4d:b6:ed:f6:1d:85:fb:e0:31:cd:d1:74:7a:
         e8:f6:61:94:78:70:5c:9d:6d:83:d0:04:ef:23:67:02:3e:67:
         b3:b0:10:df:52:00:73:e4:f5:20:ab:44:13:13:71:74:b4:52:
         be:87:13:2f:9b:bc:53:c9:3d:0a:c5:d3:db:1f:09:a5:99:d2:
         cd:17:aa:ce:7f:d8:8a:d8:4c:a4:81:35:38:52:93:aa:53:de:
         85:e6:ba:18:d7:2b:de:de:f7:72:a5:a9:02:60:a6:aa:22:07:
         7e:d5:5c:08:11:d3:ea:70:d5:d8:74:68:41:9e:6b:1d:fd:82:
         45:3f:ec:50:96:44:2d:36:c3:37:bd:4d:87:38:71:3e:ad:db:
         6e:5f:70:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:22 2025 by rpki-client