Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
File:                     eJra0zjCDXJE3Hvm0PRKklP8jxM.mft (raw, json)
Hash identifier:          RMHwdlAFmb7Y9YqMh+1jRL/B+Xm4PfZNJWsJI/aIjT4=
Subject key identifier:   FD:D1:69:82:84:63:0E:F4:83:B0:62:D8:57:7C:8E:BE:8E:DD:B6:A4
Authority key identifier: 78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
Certificate issuer:       /CN=F36EE687AF/serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
Certificate serial:       21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
Manifest number:          1F
Signing time:             Thu 03 Apr 2025 03:25:22 +0000
Manifest this update:     Thu 03 Apr 2025 03:25:22 +0000
Manifest next update:     Sat 05 Apr 2025 03:25:22 +0000
Files and hashes:         1: eJra0zjCDXJE3Hvm0PRKklP8jxM.crl (hash: UptaAc2ENeivKH0QTMWaI28dnb9ha53hQXs8Q+/SjZ4=)
                          2: 3F9659F6FA5711EFA9433954762E951A.roa (hash: qKiDyS4k3Pb0vrru4mPYqluJ2Rx/UxF8Iobn+ms5BiI=)
                          3: DC0411CAFA5711EFA0C15158762E951A.roa (hash: 3eW9DvSOVij5SdKc0NclAvUK7jyKsaBWMt4dydb1suk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE687AF
        Validity
            Not Before: Apr  3 03:25:22 2025 GMT
            Not After : Apr  5 03:25:22 2025 GMT
        Subject: CN=67edffa2-759b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:fe:e6:0b:fb:3a:1e:fa:20:c2:c2:cf:74:
                    e2:b2:1a:76:ff:09:31:bc:59:99:d4:98:4a:cf:39:
                    37:f2:00:c6:1b:f2:66:f3:9b:37:72:ef:81:91:4d:
                    0f:7c:4f:a7:92:66:34:05:3d:4a:e0:72:49:ce:8f:
                    e6:bc:1a:d1:13:d5:30:14:7f:fe:89:1c:c7:39:ef:
                    19:45:5c:45:d0:3b:b9:eb:f7:f8:64:cf:e3:71:e9:
                    3d:08:1e:8a:86:78:3e:7b:15:39:7b:8e:ff:66:91:
                    88:95:1f:10:cb:7b:0b:b6:42:20:57:b9:53:8c:70:
                    83:5c:60:e3:46:6f:ed:86:9a:b5:1f:b6:8c:af:d7:
                    c1:9b:c5:d8:a5:71:34:14:3e:f6:13:f8:61:69:6b:
                    ca:76:23:bd:6c:7f:34:52:45:c7:e8:fe:a3:a2:40:
                    9c:bb:d2:bf:57:df:c6:18:a5:14:27:3d:b2:fb:10:
                    cb:04:0e:8b:49:70:df:fe:78:b6:bb:dc:04:01:15:
                    51:63:77:14:bc:af:32:7f:0a:fe:54:25:ef:43:85:
                    e6:e0:2d:6a:81:6a:d3:f1:2e:ee:cd:a8:1b:77:44:
                    da:71:b8:ab:cc:b0:58:6c:9b:f8:7e:4e:07:66:c0:
                    8a:ca:79:a0:cc:33:98:12:a3:60:57:70:20:2d:cd:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D1:69:82:84:63:0E:F4:83:B0:62:D8:57:7C:8E:BE:8E:DD:B6:A4
            X509v3 Authority Key Identifier:
                keyid:78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:60:55:c6:aa:d0:dc:c5:57:26:39:fd:d3:85:65:40:d6:19:
         d3:e1:32:c1:db:c4:f3:fd:81:e9:e6:08:a9:85:fd:50:57:58:
         1a:83:9e:d8:7b:6f:c5:3b:a3:12:aa:81:44:bf:80:26:05:8a:
         42:8d:f0:79:6e:32:49:c6:33:99:a5:2e:c0:a3:42:cd:8e:85:
         43:29:82:31:cf:5e:e2:82:e6:01:80:a4:77:ad:e0:19:08:29:
         23:94:9d:7a:1e:c9:70:28:ca:eb:52:24:fd:a8:26:e6:13:d9:
         c0:51:b1:f2:00:5b:87:22:25:20:f2:18:11:85:f3:36:86:81:
         11:c5:a4:2e:89:46:4f:0d:e6:45:75:cf:00:f0:af:49:ad:69:
         15:76:2b:55:07:ff:e2:aa:a0:27:34:43:41:8c:82:ed:26:ae:
         31:79:e4:e3:f9:17:53:33:8a:ab:bb:d0:d3:1f:5c:b6:75:6f:
         7b:b7:e4:79:7d:d1:13:5d:0f:a7:a4:be:bb:1e:ee:ab:b7:c5:
         b8:60:87:d5:db:95:97:5f:fe:2d:10:9b:48:94:0c:17:47:ac:
         bb:64:77:c6:9c:f3:16:f5:27:a2:b2:2a:17:8f:7c:e4:d9:13:
         56:29:05:fc:57:84:65:1c:05:99:6a:7a:75:74:ba:af:e6:94:
         8a:81:0e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:08 2025 by rpki-client