Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft
File:                     g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft (raw, json)
Hash identifier:          /ygn19a6un+HCX3BaujfU7mB06tRbU6frJ0SIH4oJzY=
Subject key identifier:   E9:48:78:80:ED:83:46:BF:D2:2B:B4:FE:0D:A1:66:52:70:F0:A0:55
Authority key identifier: 83:F6:2F:00:1A:AC:D0:0B:53:F6:60:EA:2C:66:10:9B:BB:B9:9E:64
Certificate issuer:       /CN=F36F56CAAF/serialNumber=83F62F001AACD00B53F660EA2C66109BBBB99E64
Certificate serial:       0884
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g_YvABqs0AtT9mDqLGYQm7u5nmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft
Manifest number:          0883
Signing time:             Thu 03 Apr 2025 01:15:01 +0000
Manifest this update:     Thu 03 Apr 2025 01:15:01 +0000
Manifest next update:     Sat 05 Apr 2025 01:15:01 +0000
Files and hashes:         1: g_YvABqs0AtT9mDqLGYQm7u5nmQ.crl (hash: luozJ5fQIOX7cADawjaU2vIb+cjEIgOewo1XZ0NLNr4=)
                          2: F4F619028E0211E9836DD54BF8AEA228.roa (hash: 5eedoqh8u9s0o56WadCa/4hoIr3cwpS8Z0VWv5q2rOI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g_YvABqs0AtT9mDqLGYQm7u5nmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180 (0x884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F56CAAF
        Validity
            Not Before: Apr  3 01:15:01 2025 GMT
            Not After : Apr  5 01:15:01 2025 GMT
        Subject: CN=67ede115-2bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:03:70:90:6d:4f:2d:28:66:cf:89:6b:43:
                    fc:55:18:30:47:88:8e:c6:5f:05:47:86:d2:c6:77:
                    34:15:19:9e:03:01:08:9f:d7:e7:ef:cf:42:fc:b1:
                    d0:41:1c:96:7d:60:37:26:db:de:80:df:ff:ac:06:
                    2b:1c:e5:b4:e5:c4:21:72:07:2f:2d:45:04:b1:75:
                    b0:53:24:26:0c:28:17:32:35:1c:0c:92:b9:7f:be:
                    58:29:ec:54:d3:a4:68:29:7c:b1:e3:87:fb:ca:e8:
                    01:fd:65:a6:90:5b:f8:8d:1e:fe:c7:5d:9b:2a:7c:
                    b2:06:ec:e6:69:60:6e:55:8f:41:3f:8c:df:8d:84:
                    cc:5d:0a:f7:22:db:ea:fe:47:01:2c:2c:7e:2a:da:
                    81:74:6c:23:86:ef:97:77:92:9a:d6:7f:b6:a2:cd:
                    e9:d3:15:b1:c5:b2:f2:52:11:63:dd:5e:7a:49:8d:
                    fd:3a:dc:4d:17:8b:01:51:d1:43:ed:de:c4:02:5a:
                    71:1c:5e:1b:50:3e:88:f1:fe:b0:16:1c:ea:c3:bd:
                    fe:2a:5e:75:27:10:7b:8f:9d:51:12:ec:23:39:e3:
                    20:10:df:12:b5:05:44:8d:2d:ed:cf:31:01:eb:44:
                    46:1a:aa:50:1e:aa:fa:ef:c7:82:a8:d6:9b:fe:fe:
                    98:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:48:78:80:ED:83:46:BF:D2:2B:B4:FE:0D:A1:66:52:70:F0:A0:55
            X509v3 Authority Key Identifier:
                keyid:83:F6:2F:00:1A:AC:D0:0B:53:F6:60:EA:2C:66:10:9B:BB:B9:9E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g_YvABqs0AtT9mDqLGYQm7u5nmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:38:50:69:60:bc:07:10:87:85:df:54:6e:e7:1b:3a:07:e3:
         ba:17:69:f0:da:42:b6:f0:7e:a5:9e:03:20:e7:ba:69:58:26:
         c6:68:f8:5f:a6:6e:c8:e7:60:60:4c:4f:20:df:d2:fd:11:78:
         73:95:99:11:7d:1e:09:40:3c:eb:ab:33:f5:1f:27:23:72:13:
         98:39:1e:5f:a9:cf:e6:c3:59:a1:32:53:0b:fd:e3:a8:f3:aa:
         94:c7:41:aa:f2:fc:ac:ca:cf:b2:88:1b:9e:22:aa:19:94:49:
         5c:5e:76:ce:5f:aa:01:21:e4:82:70:b4:e4:65:1a:c6:87:11:
         7f:3c:70:e9:dc:91:77:49:0d:18:8f:36:f1:23:b7:19:5e:a4:
         c9:16:ee:91:f9:c8:35:c0:87:b6:24:aa:d6:9f:85:d8:c8:f0:
         c5:cc:2e:b5:c7:ba:55:f5:06:bb:7a:05:8b:69:67:be:c2:c0:
         20:09:1e:e7:05:c5:e2:57:8a:60:b7:8e:37:fc:c5:de:c1:d8:
         e4:6d:f0:e6:16:31:9c:de:da:fa:c5:3e:15:cf:d4:aa:cc:d6:
         51:3b:8e:58:ae:ed:42:16:8d:3e:84:b7:1f:55:90:18:54:b0:
         7d:f8:7f:67:0c:fd:6b:ba:37:58:3b:3b:85:8d:a6:af:02:13:
         ef:82:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:49:54 2025 by rpki-client