Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
File:                     BinJnUdgwom4TNvs8bbBPPUl6q8.mft (raw, json)
Hash identifier:          PAh0GyiLotH+h4JiaW4eSeqOMBmB8WyxC5wIID8XBBA=
Subject key identifier:   38:E6:C7:CC:AF:41:5B:5B:B9:3C:B4:52:CB:87:26:20:8D:04:43:BD
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Certificate issuer:       /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial:       02C9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
Manifest number:          02B9
Signing time:             Sat 05 Apr 2025 02:31:24 +0000
Manifest this update:     Sat 05 Apr 2025 02:31:24 +0000
Manifest next update:     Mon 07 Apr 2025 02:31:24 +0000
Files and hashes:         1: BinJnUdgwom4TNvs8bbBPPUl6q8.crl (hash: 8DyyHDa86vYxrkdJyw/0I4dPrFsygPiICRiB8cXIfjk=)
                          2: 2850010E216B11EFB3F618137DDC24C2.roa (hash: 0jME1ZzrI4sNnNZjfeG38v9huXsz3LZTpURGBtXzEAw=)
                          3: 51542E68216B11EF9F7AF3167DDC24C2.roa (hash: 4QCeXvrc6kg/JIOMdU4vEPvtTh3WWdhKcmrMjlVBHNk=)
                          4: A67CF5BA216A11EFA90D51127DDC24C2.roa (hash: lsxPoy4LkYh0ebWwRE+vefdBa5LLS6CukBLh7U9d9E4=)
                          5: 55EEE540216A11EF9A5E590E7DDC24C2.roa (hash: FgSrL2A61qR530yDTlLI1PpGN3TVb0JzE3QW/HRydIw=)
                          6: 1F5F2FF8216A11EFBE9F000E7DDC24C2.roa (hash: Lnp4R2zpiassu92nP7+9bZsA7WacYQhSdB9Irhb4Gho=)
                          7: CF99B532216A11EFBD87B3127DDC24C2.roa (hash: jOjj4Xh+2NT4yOAFMCOKRdCM3mQyy3CpEf+pl4OtA9Y=)
                          8: F7891F7E216A11EFAAB9DD127DDC24C2.roa (hash: gR6HfHMgVO0uVKQ4QeKo2uZ6uComtLRb0sTj4ZsT1hQ=)
                          9: 80627120216A11EF980B8E0E7DDC24C2.roa (hash: iJq4XGcPgxPLrs5UWbDYKLBJP1q4j5+vrVCECQwMuoM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                          rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CRI
        Validity
            Not Before: Apr  5 02:31:24 2025 GMT
            Not After : Apr  7 02:31:24 2025 GMT
        Subject: CN=67f095fc-beec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:e3:21:ec:f8:d3:ad:dc:5e:a1:a3:36:db:
                    38:f1:1e:71:e5:51:e8:29:7f:26:95:8c:81:74:4f:
                    8f:c0:75:27:51:90:a5:aa:2c:dc:a5:47:59:bd:44:
                    dd:1d:62:38:0e:f5:5b:78:a3:42:f0:db:ed:ae:73:
                    8f:42:32:b4:fa:90:da:2c:df:d7:64:ee:46:d0:ab:
                    c3:9d:bb:d3:1a:21:be:9d:b7:68:15:19:23:92:db:
                    1c:0b:e5:43:31:87:a0:98:b9:01:ed:1f:22:26:58:
                    8e:da:7d:c4:45:ea:bb:fd:54:53:38:4d:14:1e:6b:
                    b2:aa:34:06:35:cc:67:04:27:5e:6f:56:57:2f:19:
                    e4:42:82:b7:59:ad:df:4e:4a:88:f4:f4:86:fc:c0:
                    52:32:bf:88:2c:67:de:84:bb:a2:98:93:e1:37:35:
                    b2:f5:a6:c6:b7:b9:d8:c8:37:d8:98:67:d3:ae:0d:
                    e2:35:e6:45:93:eb:86:2d:e1:45:91:de:68:70:97:
                    fd:9a:de:4b:77:80:0c:13:bd:ec:eb:d0:3c:36:97:
                    d3:0e:2b:fb:ce:aa:df:85:8e:5e:4f:12:33:db:6b:
                    78:0b:49:ba:cd:77:f2:23:0b:d8:e8:14:41:5a:f7:
                    a8:7e:bc:00:63:ed:3f:0b:4c:e4:3c:71:f9:ec:87:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E6:C7:CC:AF:41:5B:5B:B9:3C:B4:52:CB:87:26:20:8D:04:43:BD
            X509v3 Authority Key Identifier:
                keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:62:2e:bc:94:6c:e4:a2:29:04:c3:a3:0a:b3:70:2d:5f:1b:
         6f:f2:4c:b4:3a:3b:07:bc:7b:89:ed:2f:11:72:fb:42:5c:79:
         f2:2f:b8:bb:27:f2:48:e9:19:0d:6a:cc:3c:a0:7a:17:40:ca:
         d3:7c:c5:dc:c4:b5:a7:3d:02:b1:b1:87:60:3c:4a:20:d2:f8:
         d7:2c:b2:ac:39:ea:1c:bc:71:a5:82:ca:1d:05:26:54:ba:0d:
         76:d5:6c:32:d4:83:c9:6d:e0:0f:3a:ca:35:82:29:9e:26:2e:
         a2:92:b9:35:35:d0:f9:7e:c0:52:da:19:ed:43:61:5c:33:c4:
         ff:d8:aa:7c:1f:93:b9:6f:b5:4a:93:72:83:79:f3:a2:fd:ac:
         ef:9a:cb:ef:63:11:3d:d5:1e:04:18:a3:7e:a5:25:dc:1f:8e:
         61:bb:52:9f:36:87:1b:a5:73:c8:88:7e:bf:30:ff:0b:c3:b9:
         e2:62:e9:04:df:b8:f4:5d:86:52:6c:25:d6:ad:cc:39:b9:ea:
         0a:7d:5e:2c:c2:f5:37:a1:57:8d:0e:05:00:17:bc:7a:b9:17:
         16:24:c3:df:8f:1c:13:cc:b1:cd:e3:e7:c4:e5:b6:37:cc:97:
         9d:36:a9:3d:bc:a0:dd:a1:42:63:65:36:c5:eb:f8:c7:88:51:
         cb:20:a2:c4
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAskwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTJCOENSSTExMC8GA1UEBRMoMDYyOUM5OUQ0NzYwQzI4OUI4NENEQkVDRjFCNkMx
M0NGNTI1RUFBRjAeFw0yNTA0MDUwMjMxMjRaFw0yNTA0MDcwMjMxMjRaMBgxFjAU
BgNVBAMTDTY3ZjA5NWZjLWJlZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzHOMh7PjTrdxeoaM22zjxHnHlUegpfyaVjIF0T4/AdSdRkKWqLNylR1m9
RN0dYjgO9Vt4o0Lw2+2uc49CMrT6kNos39dk7kbQq8Odu9MaIb6dt2gVGSOS2xwL
5UMxh6CYuQHtHyImWI7afcRF6rv9VFM4TRQea7KqNAY1zGcEJ15vVlcvGeRCgrdZ
rd9OSoj09Ib8wFIyv4gsZ96Eu6KYk+E3NbL1psa3udjIN9iYZ9OuDeI15kWT64Yt
4UWR3mhwl/2a3kt3gAwTvezr0Dw2l9MOK/vOqt+Fjl5PEjPba3gLSbrNd/IjC9jo
FEFa96h+vABj7T8LTOQ8cfnshxuzAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUOObH
zK9BW1u5PLRSy4cmII0EQ70wHwYDVR0jBBgwFoAUBinJnUdgwom4TNvs8bbBPPUl
6q8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyQjhDL0I1MENBNEFBMEI2MjExRUVCMkQzNUU4QTRBRDlFNkZDL0Jpbkpu
VWRnd29tNFROdnM4YmJCUFBVbDZxOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0JpbkpuVWRnd29tNFROdnM4YmJCUFBVbDZxOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RTJCOEMvQjUwQ0E0QUEwQjYyMTFFRUIyRDM1RThBNEFEOUU2
RkMvQmluSm5VZGd3b200VE52czhiYkJQUFVsNnE4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApYi68lGzkoikEw6MKs3AtXxtv8ky0OjsH
vHuJ7S8RcvtCXHnyL7i7J/JI6RkNasw8oHoXQMrTfMXcxLWnPQKxsYdgPEog0vjX
LLKsOeocvHGlgsodBSZUug121Wwy1IPJbeAPOso1gimeJi6ikrk1NdD5fsBS2hnt
Q2FcM8T/2Kp8H5O5b7VKk3KDefOi/azvmsvvYxE91R4EGKN+pSXcH45hu1KfNocb
pXPIiH6/MP8Lw7niYukE37j0XYZSbCXWrcw5ueoKfV4swvU3oVeNDgUAF7x6uRcW
JMPfjxwTzLHN4+fE5bY3zJedNqk9vKDdoUJjZTbF6/jHiFHLIKLE
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:42 2025 by rpki-client