Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
File:                     yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft (raw, json)
Hash identifier:          AJFZiKL10lmtDkAAzRsOnuQiufGcnlceMGYwSVYOCxk=
Subject key identifier:   30:4E:E3:46:C8:F0:1C:2B:D0:12:4D:5A:E7:34:B4:96:9C:27:FC:94
Authority key identifier: C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4
Certificate issuer:       /CN=F36FB3EDAF/serialNumber=C90240FC7512AFA103119870E2834BD2D4C239C4
Certificate serial:       0377
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
Manifest number:          0376
Signing time:             Sun 16 Feb 2025 02:17:19 +0000
Manifest this update:     Sun 16 Feb 2025 02:17:18 +0000
Manifest next update:     Tue 18 Feb 2025 02:17:18 +0000
Files and hashes:         1: yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl (hash: 4mkLZhCHfjjRkWADO23XM++0CYwckEZNY6fsNDkvXdc=)
                          2: CBC05E684EC411EDBBC03A8BF1222468.roa (hash: iwEq/fHu2kMxv/0tavD/wLmOmI/Juh/s4dhe4VyEou8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB3EDAF
        Validity
            Not Before: Feb 16 02:17:18 2025 GMT
            Not After : Feb 18 02:17:18 2025 GMT
        Subject: CN=67b14aaf-63de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:0f:e9:45:c0:48:45:5c:19:5f:47:76:d1:
                    f6:7b:9f:dc:00:00:a9:36:13:c9:c0:75:c6:bc:c7:
                    09:40:5a:da:7e:9f:f6:00:b6:6c:95:a5:fe:39:38:
                    a5:26:7a:a0:6e:a0:65:0c:b3:1b:dc:58:e1:4f:23:
                    2a:2f:77:88:0a:c5:9f:ab:40:c5:b9:08:7a:83:b1:
                    57:48:fe:95:fa:3e:1b:7b:ac:4d:17:fb:e1:57:a5:
                    b9:3c:31:0e:b3:fc:2a:6b:f9:05:9c:89:c2:6c:fb:
                    c7:64:49:10:ae:b1:79:d3:dd:40:0a:48:26:c7:f8:
                    ae:a5:0a:2b:c6:6e:37:79:ab:d0:0e:1a:83:3e:47:
                    38:03:a9:f7:91:ea:99:9c:68:c0:31:5c:5d:92:3c:
                    4b:cd:e4:4d:b2:93:39:84:ae:c7:d2:0e:9d:ad:3c:
                    04:11:88:86:30:38:08:3a:67:5d:ee:30:ab:f3:7a:
                    fd:81:8f:22:65:f2:b6:e8:56:d4:de:95:06:1a:44:
                    1f:6c:95:bf:37:47:3f:28:5c:fa:6d:7b:25:4c:33:
                    4a:73:45:d0:47:29:bd:f4:dd:91:e6:da:e1:a2:5c:
                    ab:ce:f1:51:a2:08:bf:ca:60:2e:72:2d:85:8d:0e:
                    8c:4d:6e:a1:5a:11:31:ac:5d:3d:9e:d1:e2:e8:33:
                    05:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4E:E3:46:C8:F0:1C:2B:D0:12:4D:5A:E7:34:B4:96:9C:27:FC:94
            X509v3 Authority Key Identifier:
                keyid:C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d6:7e:0c:22:e4:2e:6c:ca:44:1d:0c:3f:66:be:59:62:79:
         ab:6a:7c:14:e0:58:7c:66:ee:1f:d3:44:c4:9f:07:0c:08:8d:
         d8:2c:42:c5:6e:30:c1:81:ee:98:72:17:75:f4:56:0d:fc:93:
         7f:11:21:c6:9a:93:8c:9b:5c:c4:0e:4a:13:8f:27:49:ce:38:
         0f:8e:5d:ca:f2:bd:a0:3a:5f:cb:d7:7f:8d:67:7d:82:60:4f:
         b8:b8:53:ba:a5:f2:44:b8:6e:9a:c5:aa:ea:dd:fa:13:62:ef:
         f2:33:8c:41:ab:87:00:8c:94:91:cd:5a:8e:00:60:70:63:93:
         1b:d9:45:9b:5c:81:5f:44:7c:ac:6e:f3:8b:aa:eb:94:13:f0:
         0c:0a:38:16:67:b6:c2:74:21:1f:18:c8:4b:8a:28:55:35:a7:
         a0:bf:07:05:8b:3c:5d:95:e6:9a:91:d6:96:19:6e:eb:6a:02:
         6a:1b:e2:80:49:d0:e5:a4:31:30:51:c5:a9:c0:59:80:4b:6b:
         49:49:5e:d9:9d:5c:3b:25:48:7c:da:1e:b2:3a:fa:7a:13:b1:
         70:6b:d6:67:7e:1f:79:78:3f:21:9d:02:e1:d6:97:ef:82:f1:
         04:78:5f:94:6f:b1:cb:67:94:78:d3:c8:dd:20:f9:e8:21:86:
         f2:87:83:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 16:03:15 2025 by rpki-client