Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
File:                     ll15l05AXZDHV_miXEMFvq3uoG0.mft (raw, json)
Hash identifier:          LiOrvi+7BWDbrRvr4m9/6choiGTlbyeT2gu/CaR566E=
Subject key identifier:   EA:07:49:BF:AE:FC:CA:A7:23:7F:2C:D7:FE:A9:57:AD:29:32:5C:84
Authority key identifier: 96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D
Certificate issuer:       /CN=F36FB8C3AF/serialNumber=965D79974E405D90C757F9A25C4305BEADEEA06D
Certificate serial:       03CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
Manifest number:          03CA
Signing time:             Thu 03 Apr 2025 02:10:57 +0000
Manifest this update:     Thu 03 Apr 2025 02:10:56 +0000
Manifest next update:     Sat 05 Apr 2025 02:10:56 +0000
Files and hashes:         1: ll15l05AXZDHV_miXEMFvq3uoG0.crl (hash: bldDRgxAX4u9EENGeAs5wvs6K1xqt5zzVKorO0Ac/K4=)
                          2: 8593E5E6301411EDA995117EF1222468.roa (hash: GKoKftTIvxGfYixZSmwiKcSVVIX7+F2sJvw6JysYI8o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB8C3AF
        Validity
            Not Before: Apr  3 02:10:56 2025 GMT
            Not After : Apr  5 02:10:56 2025 GMT
        Subject: CN=67edee30-20e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:77:b1:86:97:ef:72:41:cb:0d:8f:bd:77:b9:
                    3e:83:d0:3c:d5:9c:28:00:b9:bf:45:c6:81:9b:df:
                    fa:1b:4f:d4:ab:bb:5e:7e:34:94:2e:39:d3:d6:c6:
                    6f:26:7b:6b:21:de:f4:07:24:b4:fc:1b:93:05:f9:
                    fe:f1:fe:f9:3c:3f:c0:dd:9e:96:84:13:29:ac:35:
                    d1:50:f2:03:d2:ae:e3:ce:dc:27:e8:40:cc:fa:65:
                    8f:86:56:fd:95:e9:05:53:1b:57:34:f3:b8:4e:db:
                    c4:e5:b2:77:14:df:e6:c9:f0:4d:bf:ea:d5:4a:7e:
                    9e:03:80:42:9e:80:7e:1a:3e:29:41:c1:aa:ed:8d:
                    df:0d:db:71:2e:33:f7:cc:f9:b1:0b:ca:bc:22:40:
                    df:9e:96:fa:7a:50:bf:31:bb:a6:b2:83:4f:b9:79:
                    79:45:10:a0:8f:15:4f:cf:6d:82:7a:7e:9a:de:0a:
                    cd:2a:a6:b2:86:62:78:eb:da:28:f3:da:4d:ba:ad:
                    9f:44:8f:54:14:41:fd:2c:41:ef:d9:c6:53:f2:e7:
                    c5:b7:5c:8d:71:73:8b:91:e8:67:3b:e9:7f:38:c1:
                    bf:64:38:a2:ea:1d:97:8c:85:b1:cb:20:e9:b9:f1:
                    a0:26:51:67:4e:77:81:af:ac:4b:2d:8f:7e:5d:8c:
                    bc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:07:49:BF:AE:FC:CA:A7:23:7F:2C:D7:FE:A9:57:AD:29:32:5C:84
            X509v3 Authority Key Identifier:
                keyid:96:5D:79:97:4E:40:5D:90:C7:57:F9:A2:5C:43:05:BE:AD:EE:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ll15l05AXZDHV_miXEMFvq3uoG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB8C3/9801A5F2301311ED961E32FAF1222468/ll15l05AXZDHV_miXEMFvq3uoG0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:88:92:92:7e:a6:c7:c4:66:fe:45:97:c4:f1:e6:d7:6d:99:
         11:e1:76:06:90:8c:9c:07:ec:6d:f8:b9:c1:b0:b3:ba:50:38:
         c4:a2:bd:78:7d:88:47:5c:1c:73:00:df:00:95:8c:74:da:d7:
         2f:14:18:77:77:e0:39:96:f6:af:2c:d5:9c:de:b2:97:7a:98:
         f0:d5:5f:71:c8:a4:25:a8:8c:cd:68:ee:80:03:8c:33:11:1b:
         26:bc:90:62:57:8d:11:4d:7f:b2:77:c1:e4:62:df:3d:82:c6:
         5f:aa:1c:f5:94:51:8d:1f:9c:fb:9b:21:9c:8e:1f:d3:e4:07:
         d6:e8:f3:1f:d8:53:5f:ee:a1:58:59:52:8b:22:4f:ba:f0:cb:
         71:af:15:d4:a2:94:c5:cf:82:9e:b3:92:5b:75:3b:4e:11:e8:
         3f:0b:ca:ac:1e:c2:85:dc:7b:bf:50:73:04:e0:26:93:c4:07:
         e8:02:7e:76:7b:ed:10:e0:92:37:e6:90:22:c8:77:5e:1e:47:
         81:4f:3c:df:43:09:a4:01:b5:03:55:db:cf:19:fb:cc:8a:59:
         2a:98:90:9c:67:09:90:03:5b:44:47:0a:4e:48:ff:b0:52:4a:
         5f:65:fa:dd:2d:c9:f2:47:78:f1:48:ac:f1:26:66:ee:57:79:
         9d:45:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:26:15 2025 by rpki-client