Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
File:                     kOiZk2355ouadQW_vmO4r6Cneuk.mft (raw, json)
Hash identifier:          9SGPI/R1qsCH9yKe4lGoEEqa2lYRY1aoIBOuTMqf7vo=
Subject key identifier:   E8:40:D1:0A:2B:0F:E0:2A:24:CF:C9:D9:24:E3:1A:66:00:9A:A1:E9
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Certificate issuer:       /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial:       06A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
Manifest number:          0698
Signing time:             Sun 16 Feb 2025 01:32:31 +0000
Manifest this update:     Sun 16 Feb 2025 01:32:30 +0000
Manifest next update:     Tue 18 Feb 2025 01:32:30 +0000
Files and hashes:         1: kOiZk2355ouadQW_vmO4r6Cneuk.crl (hash: hqRrhlD/NSc1U+ZYN3kivLTZYdVneZob9l4qi9AOcv8=)
                          2: C0C63010DDB211EC88CB7ED5F1222468.roa (hash: VYAYQQDHoVJLrUXBxDOc6MdKCzBNkadHBFZwQyasmoU=)
                          3: 295590AC853811EE882D501F4AD9E6FC.roa (hash: IpmxTclJooUyyKaI0gbjeJL9g6pnXl0P79U4aDC1KoE=)
                          4: 5A6278E6853711EEAF78D41C4AD9E6FC.roa (hash: grcDBUy7KAVenDb+XJyfB3Cw20Jma1vzplMK66nlAEg=)
                          5: ACD62F1ADA1C11EF8F9E7079762E951A.roa (hash: qmv5Snnbw7ymf5ESL4Phxfu97RPWPTjcgTMnvEHsriM=)
                          6: C9BA5A68853911EE85DC71244AD9E6FC.roa (hash: b7/gfmmcR06S+U/Q6uheuRvTHtvlSXanbIBxP+AP9Sw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1701 (0x6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F2B14AF
        Validity
            Not Before: Feb 16 01:32:30 2025 GMT
            Not After : Feb 18 01:32:30 2025 GMT
        Subject: CN=67b1402e-9147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:d0:34:d1:f1:61:a7:81:5a:98:af:83:f8:
                    4f:79:22:0a:ff:8e:59:8f:e7:5a:d4:b5:18:d3:6d:
                    58:16:8a:08:7a:33:51:d7:d4:96:e3:9c:32:aa:90:
                    a4:8a:96:ed:78:e0:05:65:2c:ab:24:11:02:85:4b:
                    63:08:4f:b5:7b:60:40:6a:ea:26:18:fb:29:4e:e3:
                    b1:34:22:c6:94:aa:0f:d9:b4:e2:2e:73:ec:8c:a4:
                    2d:de:ef:f8:ba:4a:9d:fb:7e:92:2a:8f:72:82:52:
                    9e:c3:fb:bb:6a:68:ca:ca:00:85:0a:d4:b8:9f:a6:
                    a4:e6:a6:3a:33:19:e4:5a:81:10:ec:0a:85:4f:df:
                    73:c4:d0:10:15:7f:01:b2:e0:a2:cd:33:a1:58:4c:
                    2c:2a:18:65:2e:69:9a:04:50:8e:65:16:a0:fb:c7:
                    85:ca:cd:93:bb:cd:a1:8c:a8:55:4c:4a:af:f1:d8:
                    06:d9:74:08:4a:13:72:76:92:48:49:b1:fe:8c:a5:
                    59:32:90:56:68:00:d1:35:2f:61:94:75:69:8d:8e:
                    24:64:0c:af:b6:c2:7c:59:f8:10:43:f5:b5:eb:76:
                    bd:dd:69:15:2b:23:ba:1d:b5:fb:e9:0c:4d:f9:de:
                    22:1e:ae:be:89:c4:8e:cc:d8:ea:f7:51:57:81:87:
                    71:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:40:D1:0A:2B:0F:E0:2A:24:CF:C9:D9:24:E3:1A:66:00:9A:A1:E9
            X509v3 Authority Key Identifier:
                keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c0:eb:57:01:61:48:ad:b4:bc:5c:4b:97:a9:25:26:90:61:
         34:9b:69:f5:3f:bf:80:7a:14:c2:8b:92:79:40:ee:22:d5:29:
         7d:48:f2:7c:80:09:6c:98:1f:b2:d4:62:75:0f:d4:b4:e8:a7:
         6f:3b:99:d8:b9:63:94:dd:0e:f1:f3:4f:dc:61:99:11:39:a6:
         be:8b:b6:2e:14:29:80:25:3d:8a:67:a6:b8:e2:2b:48:f8:08:
         d8:9b:d6:af:7d:e9:8b:b7:01:3a:dd:24:ad:b5:fe:d5:ec:2c:
         9c:e1:0a:0d:44:1a:2d:ea:cd:93:b0:99:0d:68:76:96:9e:df:
         f3:b8:ee:79:7a:85:c8:75:a7:ef:0b:6b:95:8a:36:86:5f:24:
         86:8a:6e:ea:33:fb:68:bd:06:5c:65:fa:39:6b:10:13:0b:04:
         0c:8a:33:97:f9:03:ec:b9:34:9d:ad:ec:01:53:97:b3:95:0a:
         4c:5f:29:23:3f:17:6e:33:ca:67:53:92:70:5f:d8:35:b5:57:
         e1:7f:bb:0a:00:4f:a2:b8:04:4c:70:1d:27:b5:22:b2:08:0a:
         26:07:b2:32:9b:aa:03:70:f0:25:38:ea:c2:e1:1f:2d:79:41:
         c1:03:c1:7d:6b:21:69:91:76:99:06:81:47:0c:1b:d6:8a:01:
         4c:9e:3b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:39 2025 by rpki-client