Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
File:                     vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft (raw, json)
Hash identifier:          UDMhYZs942+H7JuJ9LOCH3nhORRTbp6WEHSJFUl6Xzc=
Subject key identifier:   84:1D:96:00:A4:3C:27:00:85:7D:5F:6F:BD:11:25:27:01:4F:FB:1E
Authority key identifier: BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
Certificate issuer:       /CN=F36E8561AF/serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
Certificate serial:       050A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
Manifest number:          0505
Signing time:             Sun 16 Feb 2025 01:53:11 +0000
Manifest this update:     Sun 16 Feb 2025 01:53:11 +0000
Manifest next update:     Tue 18 Feb 2025 01:53:11 +0000
Files and hashes:         1: vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl (hash: b8z9h4DRt3/87+zBvm4EnsOJsAdVPP1NULMl0vsI5bA=)
                          2: BE19C1921C5111ECA490CA25D8A014CE.roa (hash: tWWOqO4qQU37EDVgvBM++aqmJ8EV7jx4ZYoh4rsEZZ8=)
                          3: 17DD2FE81C4311EC9AD16510D8A014CE.roa (hash: pzJU/wsgmIEa7wR3b5CYfZlPx5zYmjEYDsnSkrevNeg=)
                          4: 774335701C5911ECA2FC6A31D8A014CE.roa (hash: fM8gLdQ3ljof1zc4qD9FBZ5j/xT2JhI15oeTk8jbYas=)
                          5: 71ACB1521C4C11ECB274F91DD8A014CE.roa (hash: EFUsQQjRMTzZd+qctTKgGOKkOIuOEUwZkFKmnmZz65w=)
                          6: 9F7828164F7511EDBD7D5EAFF1222468.roa (hash: FVbjxXeVZc3wFnCBMzdYMN18KdOVyYLWnIvOmScvMcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8561AF
        Validity
            Not Before: Feb 16 01:53:11 2025 GMT
            Not After : Feb 18 01:53:11 2025 GMT
        Subject: CN=67b14507-a2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:3b:39:fb:2d:02:bb:1b:ed:65:33:82:22:
                    53:aa:ad:a7:67:76:2c:30:34:b4:b6:87:3a:51:ba:
                    a8:98:52:3f:58:5f:72:22:94:23:7e:8d:71:5f:9a:
                    44:ec:e6:74:9b:83:de:19:de:8b:03:a0:c0:4d:31:
                    6b:9c:15:93:6d:c1:e2:c8:6c:4c:50:d2:73:94:31:
                    af:98:ed:12:3e:d2:eb:3f:1f:de:11:ab:6b:c9:83:
                    ea:e9:cf:12:c5:1b:82:5f:c3:ca:24:17:ff:47:88:
                    80:40:73:f8:4c:f6:3e:05:4e:73:f5:a1:d7:b1:c9:
                    e4:61:15:43:06:90:7b:c8:61:f0:4c:c4:d8:9c:bf:
                    36:43:67:72:ca:f0:4c:7e:21:ad:82:43:11:49:25:
                    8c:1e:73:74:b2:c3:0d:7f:89:15:09:46:fe:0a:29:
                    dc:d7:27:d2:91:b5:71:f4:5c:f6:4d:3c:50:8a:c5:
                    22:16:2c:9d:2d:fe:78:b6:4c:2e:c0:f5:f8:80:94:
                    b5:e7:e4:53:fc:66:d8:76:6f:85:bf:c8:1d:26:55:
                    f0:5b:ac:61:fb:66:12:fa:96:19:26:28:72:01:5f:
                    99:93:93:77:c5:ef:59:0f:29:08:43:ad:b3:c9:1d:
                    e3:df:88:c8:28:f2:6a:20:0a:35:8c:bf:b1:bb:51:
                    10:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1D:96:00:A4:3C:27:00:85:7D:5F:6F:BD:11:25:27:01:4F:FB:1E
            X509v3 Authority Key Identifier:
                keyid:BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2c:90:1a:2b:1f:ab:db:8f:81:ed:f5:77:ab:10:f8:1b:ae:
         2a:0a:0b:ca:0c:bc:c4:c8:b0:80:bd:bb:cd:cf:40:23:70:43:
         e1:ad:77:04:96:af:07:a9:9c:a2:c2:78:da:9b:79:22:3f:9c:
         18:a6:1b:3e:1d:9b:c1:8d:e5:44:71:b3:82:1b:ea:27:11:b1:
         a3:9f:e9:f5:f0:ab:c0:27:04:99:51:43:ba:9d:90:b3:46:95:
         52:67:fc:bf:9b:38:ef:3d:38:2b:32:a7:75:70:b1:87:1b:88:
         e6:f8:be:12:10:71:a1:19:ec:67:f2:84:a7:25:6b:ea:de:72:
         7e:73:14:cb:4e:37:23:39:42:ae:98:bb:c6:19:1b:1a:78:77:
         5e:c5:e0:0b:53:c9:5f:81:ee:8b:ab:b5:cd:e0:94:15:0b:72:
         83:53:cf:c2:2a:26:d4:d0:72:b9:c0:9c:d2:53:2e:0c:a6:c0:
         b3:fb:aa:23:87:f4:08:13:ce:2b:84:7e:7f:0d:f5:c2:38:ee:
         9f:2a:7d:91:e6:15:cb:5b:eb:30:11:fa:d0:33:e1:93:f3:b1:
         be:51:ee:3a:14:1a:9e:4f:22:8f:7f:b8:e0:53:47:1e:47:9e:
         ac:5e:f1:4f:f1:69:77:85:49:2c:2e:7a:6f:2a:eb:d3:fc:9c:
         2c:15:10:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:18 2025 by rpki-client