Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
File:                     4u30RuwlLhL_hY7r4xim2a4EMbA.mft (raw, json)
Hash identifier:          ZKNmCI0GifbVjZCoL6u3z5bDp3BzbI9ElWkVsGr3npg=
Subject key identifier:   DC:EE:0E:D6:ED:2C:CB:5F:81:07:BC:DB:D0:40:9B:58:D4:52:F4:39
Authority key identifier: E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
Certificate issuer:       /CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Certificate serial:       0511
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
Manifest number:          0510
Signing time:             Sun 16 Feb 2025 01:51:28 +0000
Manifest this update:     Sun 16 Feb 2025 01:51:28 +0000
Manifest next update:     Tue 18 Feb 2025 01:51:28 +0000
Files and hashes:         1: 4u30RuwlLhL_hY7r4xim2a4EMbA.crl (hash: qT4YWC4H/40N3vKFFjM9tdcqMyvYs3dS21bjgAf38v4=)
                          2: F2E8745215FF11EC9C41353BD8A014CE.roa (hash: DALkcQgZJxSOm1jJNi52fbxFVjnJTlBys9WoNl+MGWs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1297 (0x511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F61A5AF
        Validity
            Not Before: Feb 16 01:51:28 2025 GMT
            Not After : Feb 18 01:51:28 2025 GMT
        Subject: CN=67b144a0-a656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:aa:b1:88:df:94:12:dc:62:5b:8f:c7:8d:
                    a0:62:ed:dd:2c:1f:4a:10:3b:4d:b0:0d:30:b6:2c:
                    69:99:45:e2:c2:ce:d2:47:76:b1:8f:81:67:eb:29:
                    db:3e:4f:2f:20:31:c1:8b:ce:eb:3e:c7:d7:e4:82:
                    7b:ac:ae:c3:7f:3c:62:76:03:cd:bb:21:f2:d4:1f:
                    df:a8:05:f9:09:d1:00:4d:30:10:af:e6:58:27:e9:
                    56:cd:3f:e9:ae:fb:ae:4b:25:68:7d:7e:95:0a:a4:
                    0c:93:e1:18:8d:c9:b8:92:e9:25:21:59:ef:2a:fa:
                    a6:f5:00:e1:45:0d:9e:75:ba:fc:e8:b9:0a:84:22:
                    fa:7c:cf:0d:f0:99:d0:78:ae:e5:02:78:a4:7e:de:
                    78:cf:31:e8:88:14:cf:42:0e:15:3f:1c:eb:22:b0:
                    45:e0:46:17:cc:98:66:e2:9d:20:1c:6e:c8:ce:7b:
                    ae:88:90:50:17:ad:3b:7a:60:77:96:b9:9b:4e:ff:
                    ba:3b:ef:21:27:3b:5b:f8:fe:77:85:a9:9c:8b:54:
                    13:94:ae:e8:5b:2b:97:e1:14:a7:86:63:82:4b:6f:
                    e4:0e:eb:96:a8:96:f0:c2:4c:43:51:ba:55:47:f8:
                    ae:8a:c8:86:ec:68:52:77:f7:d3:20:e9:d1:6a:55:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EE:0E:D6:ED:2C:CB:5F:81:07:BC:DB:D0:40:9B:58:D4:52:F4:39
            X509v3 Authority Key Identifier:
                keyid:E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ea:6b:5d:5a:36:c6:72:2e:30:d5:fa:d9:61:32:85:2d:b7:
         bb:d2:be:c7:2e:45:ad:39:24:63:02:81:6d:c6:92:04:09:f3:
         26:b2:d0:7c:71:1e:4c:e9:fb:20:e3:a6:3d:13:04:67:fb:79:
         1d:78:d1:89:31:23:32:29:ad:58:2c:55:92:ae:85:ef:6a:2e:
         f9:81:5d:ed:35:bd:1d:fe:4c:0d:f3:0e:69:ee:a2:81:6c:46:
         3c:96:8d:87:fa:92:88:99:9c:f2:79:0a:5b:bb:56:37:e7:52:
         76:9c:5c:33:7a:d0:5d:8a:43:f9:0b:82:93:2c:d6:50:a8:a0:
         4b:cf:43:ad:3b:81:e2:c1:64:c9:c0:d2:54:60:af:c1:57:31:
         2e:29:62:39:2f:b1:a8:db:55:81:6b:ad:68:5d:a9:dd:ae:99:
         2a:39:9c:fc:2f:26:ec:e4:b4:1d:45:2b:fb:9f:df:a6:f7:de:
         78:e5:a1:80:96:d2:ba:ea:95:29:5c:0a:ae:3d:1b:ed:03:dc:
         0d:03:c6:53:49:cd:04:ee:91:3d:de:f1:e1:07:41:10:54:8b:
         a3:9f:9e:fe:8a:56:ab:f6:74:68:84:f6:91:bc:18:61:d2:e1:
         63:df:7e:e3:53:47:46:af:0a:2a:82:5e:f2:9e:9d:1b:00:31:
         32:89:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:57 2025 by rpki-client