Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
File:                     2KoAqxWVGabWVnDenlmLc99qssE.mft (raw, json)
Hash identifier:          X00ffLyui5tC7qU+P93CUIcbL47pUb3ATNEAbDZk0B8=
Subject key identifier:   7F:4C:3E:2B:09:EE:60:1F:5D:6F:C2:1B:08:47:7B:15:2B:62:B6:FB
Authority key identifier: D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
Certificate issuer:       /CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Certificate serial:       53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
Manifest number:          52
Signing time:             Wed 05 Feb 2025 03:20:25 +0000
Manifest this update:     Wed 05 Feb 2025 03:20:25 +0000
Manifest next update:     Fri 07 Feb 2025 03:20:24 +0000
Files and hashes:         1: 2KoAqxWVGabWVnDenlmLc99qssE.crl (hash: Z+md4Kc9HUzZRTRRgso2ppI04IkZdp1elIOdkdLhTss=)
                          2: 8612CEC8A8A911EFB887DDA0762E951A.roa (hash: GTU21iNyjdIeL6dIGxKDjmWXXd/5ZvujPdaZWrQ4o/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F273DAF
        Validity
            Not Before: Feb  5 03:20:25 2025 GMT
            Not After : Feb  7 03:20:24 2025 GMT
        Subject: CN=67a2d8f9-dec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:62:0b:ac:5a:74:e3:37:07:7f:9e:fa:51:
                    e2:d4:84:84:31:c1:09:78:26:14:53:23:aa:0f:d2:
                    af:44:4b:0c:eb:f6:54:6f:17:6d:8c:67:b4:ff:bc:
                    b6:e1:90:b3:70:16:7b:8a:b4:84:8a:07:28:45:91:
                    82:5c:92:de:14:c3:6b:8b:eb:3f:8f:d2:42:93:81:
                    b5:eb:5a:48:5e:81:c9:89:f9:56:8f:c9:fa:79:8d:
                    e5:6c:b3:af:aa:eb:07:5b:0e:ef:ae:61:b8:1f:8d:
                    f4:ca:15:45:aa:e2:97:f8:04:ed:4a:c5:d5:c8:20:
                    fe:0d:26:38:dc:a5:b0:bd:da:28:2a:0a:46:44:21:
                    b0:8a:76:00:42:23:a7:cd:0e:cb:85:70:9d:67:04:
                    e1:fd:2c:02:0f:d7:ff:43:14:b4:26:8b:51:d3:38:
                    8f:05:88:73:fd:5d:a0:b4:c2:85:7f:1d:4c:48:fd:
                    db:6f:95:b8:41:9b:47:55:c4:1b:8a:7b:15:e8:bb:
                    76:ff:70:fa:97:c7:8c:d9:df:a4:22:1f:ef:1e:f4:
                    2b:1c:3e:77:a3:f0:8b:6f:0f:c0:17:7b:ab:f4:31:
                    4f:5e:b1:5a:55:9e:b0:3a:f3:79:c8:dd:83:a9:20:
                    1b:a7:cd:05:e7:d3:23:8b:8e:c8:dc:83:ff:73:68:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4C:3E:2B:09:EE:60:1F:5D:6F:C2:1B:08:47:7B:15:2B:62:B6:FB
            X509v3 Authority Key Identifier:
                keyid:D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4a:a7:c6:1f:72:9d:20:71:f0:87:39:db:d2:c6:a8:70:0d:
         d2:e7:36:78:08:a2:f4:80:8c:f3:5b:60:d1:3f:2e:24:8d:0f:
         fc:29:3c:ae:4a:ff:b0:ce:f3:2c:27:63:d9:ce:f2:2e:eb:e8:
         9a:eb:42:ca:c6:ca:c9:de:7b:49:24:c5:25:8b:6c:36:cf:21:
         c2:54:19:84:64:ef:63:d2:25:16:29:b9:b0:44:c2:27:23:a7:
         ef:bf:50:91:b1:04:65:33:25:54:23:f9:09:90:d0:3f:6e:5f:
         ce:db:23:c2:cb:16:82:1d:47:7e:2c:63:99:f3:65:db:27:19:
         1f:01:08:cd:7c:2b:d0:73:b3:23:dd:e6:f7:e5:38:dd:e9:52:
         fd:72:f7:87:76:15:4b:a8:08:92:f1:48:b9:ff:68:62:ac:6a:
         46:a3:5e:11:50:cd:41:ae:47:a7:bb:b0:69:29:c0:ee:89:f7:
         1e:b5:85:84:99:8d:46:33:ce:bb:3a:3a:bc:79:66:43:ea:45:
         be:75:63:d9:28:66:83:28:f1:6f:8f:9b:c8:a2:0a:13:4b:46:
         1b:89:19:68:7c:b2:3d:8e:8e:db:f1:fb:f8:b9:27:cb:40:47:
         42:29:77:ee:c5:2e:7e:f5:aa:fb:dc:8f:4a:e0:ff:a6:f5:11:
         f6:98:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:54:18 2025 by rpki-client