Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
File:                     19cqZIe9d2qLv61POGE8OxU1CYM.mft (raw, json)
Hash identifier:          4C+Xk6RWMSZyM8f4QGGfmKvfVjTerV0DyuAg4aQFjuA=
Subject key identifier:   95:4F:AE:52:32:17:A7:6E:04:81:4B:EB:36:27:94:63:7D:78:3B:5C
Authority key identifier: D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83
Certificate issuer:       /CN=F36F62C3AF/serialNumber=D7D72A6487BD776A8BBFAD4F38613C3B15350983
Certificate serial:       0DFA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
Manifest number:          0DF5
Signing time:             Thu 03 Apr 2025 00:52:56 +0000
Manifest this update:     Thu 03 Apr 2025 00:52:56 +0000
Manifest next update:     Sat 05 Apr 2025 00:52:56 +0000
Files and hashes:         1: 19cqZIe9d2qLv61POGE8OxU1CYM.crl (hash: 012x9LGbUTCY89D1tYSAvfKylVV95DnePKi7luu3vzk=)
                          2: 42BB6C92B57511EF951BBFBD762E951A.roa (hash: 1bWInketCzu/Dqakbj5R6DwsUfKJazNvf+AWykl+zAc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3578 (0xdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F62C3AF
        Validity
            Not Before: Apr  3 00:52:56 2025 GMT
            Not After : Apr  5 00:52:56 2025 GMT
        Subject: CN=67eddbe8-c2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:88:53:c6:07:9c:47:09:a2:00:0b:12:db:
                    8a:15:93:5f:fc:40:a4:ec:91:5e:d3:ff:f1:38:87:
                    8d:b6:37:d4:79:59:63:49:e0:40:7e:c8:a0:f4:eb:
                    0e:fb:e6:c9:a9:b5:9d:ab:b6:db:8d:09:4a:6f:3c:
                    ba:dd:01:38:81:80:e4:cb:94:81:97:e2:19:80:b7:
                    a1:a2:40:a6:a7:f9:2d:3d:ec:8d:4e:06:55:72:82:
                    d0:75:7d:c7:8f:70:cd:11:2c:2b:d2:c4:4c:95:37:
                    a8:fe:b3:ef:10:96:19:f5:82:2d:f4:3e:6c:31:d9:
                    9a:3e:26:21:05:1b:22:c7:b2:7b:a6:5b:dc:e9:75:
                    84:1d:3f:9d:b4:66:15:8d:1c:36:a6:a9:ad:a3:ba:
                    cf:f1:a6:ed:20:ae:1a:93:35:c7:8b:28:c2:79:95:
                    a5:3c:41:9a:ce:e6:fb:ae:34:fb:48:04:9f:7c:76:
                    6f:b1:82:bc:d6:58:fb:fb:7a:b3:15:d1:7f:bb:30:
                    84:88:33:04:3b:6e:bc:72:f2:70:f5:a8:c7:e6:12:
                    e4:61:aa:2b:cc:25:c9:95:29:6e:14:6b:13:d3:8b:
                    bf:fc:a5:f1:27:93:bb:e1:64:24:ac:ec:9c:3e:50:
                    62:16:4a:38:a4:d5:e4:a1:ac:02:c1:1c:9d:bd:4b:
                    31:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4F:AE:52:32:17:A7:6E:04:81:4B:EB:36:27:94:63:7D:78:3B:5C
            X509v3 Authority Key Identifier:
                keyid:D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0d:2f:fc:5a:6c:8a:93:36:45:3b:c3:91:82:99:7d:48:f2:
         d6:25:4f:18:2c:40:30:cd:ad:ff:94:ec:85:cc:39:c9:b2:3d:
         4d:b7:57:20:72:a1:a9:ab:85:89:65:23:83:0c:35:99:dc:f7:
         ad:dd:6e:dc:b9:a0:43:b8:e6:06:6c:25:16:08:e5:39:9d:df:
         ed:f9:27:d5:c9:d0:0c:27:d0:17:78:69:8a:7b:3f:c9:68:13:
         97:96:68:24:07:2b:60:58:5a:93:79:05:c6:5f:0a:c9:d8:25:
         21:28:2e:b7:b5:a8:af:1b:5d:de:24:7b:45:08:c8:65:91:85:
         8e:0b:6a:32:10:58:e6:e1:fb:35:2a:7d:b5:63:9f:6a:1c:60:
         76:c1:6b:be:9c:c5:32:8c:cc:b4:09:d3:38:04:87:e8:2a:44:
         d9:7b:43:60:f9:67:03:1a:10:05:39:32:f4:24:20:cd:6c:9e:
         71:df:08:d4:d2:d2:b0:aa:3d:44:6c:d5:9f:c2:b3:28:6a:1e:
         cc:ee:7b:ac:af:48:b3:1d:07:3f:63:4f:ad:db:01:0d:00:a8:
         a2:80:e6:74:97:66:a4:ce:51:65:cd:f8:2a:22:19:b6:81:d3:
         ff:0c:d0:f5:18:50:38:25:14:8e:44:22:ab:95:1d:a0:1a:ed:
         7a:56:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:46:21 2025 by rpki-client