Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
File:                     LmD5YTFKp9b93e6durMSN0cF5ss.mft (raw, json)
Hash identifier:          F8m1S7MU4bUQKREikWq84YCdobNyOICsmYHG3lHhfwg=
Subject key identifier:   2A:6C:F8:7A:11:00:B1:11:E1:23:60:0A:39:1A:38:1A:6A:5C:66:4C
Authority key identifier: 2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB
Certificate issuer:       /CN=F36FC8A0AF/serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
Certificate serial:       0232
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
Manifest number:          0231
Signing time:             Thu 13 Mar 2025 02:40:30 +0000
Manifest this update:     Thu 13 Mar 2025 02:40:28 +0000
Manifest next update:     Sat 15 Mar 2025 02:40:28 +0000
Files and hashes:         1: LmD5YTFKp9b93e6durMSN0cF5ss.crl (hash: A8clYXANQTQovz13lIMeKlhax99THs95QPG3J19WMEo=)
                          2: 333100CC56E711EEB82D22544AD9E6FC.roa (hash: iWB0O9f+LLwbK/f70tuWF05AYGrsYH+zV7rCgvpguSc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Mar 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC8A0AF
        Validity
            Not Before: Mar 13 02:40:28 2025 GMT
            Not After : Mar 15 02:40:28 2025 GMT
        Subject: CN=67d2459e-3579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:84:0e:87:16:e8:e3:6f:eb:1b:ac:cf:7c:
                    d1:87:f7:31:51:33:a0:04:78:53:7d:3a:ec:a7:ef:
                    0c:7a:5c:7e:17:77:74:ce:cf:4c:d0:4e:df:4b:50:
                    7c:5e:4c:9d:f8:51:1a:d2:e0:ba:a7:be:1e:07:fc:
                    5c:45:76:28:d7:14:03:71:95:b5:3d:5a:fd:5e:48:
                    a2:ae:9e:c6:7d:ab:4d:44:9f:76:ee:93:e2:3c:53:
                    86:41:54:61:cd:e4:d8:f0:ad:63:65:af:a2:0c:9a:
                    5d:bf:ee:ac:b7:e2:16:f0:2d:6c:d9:7f:ba:76:40:
                    6e:a4:e2:d3:43:c1:b3:45:20:53:c2:65:d8:a4:0b:
                    ec:8d:8e:4a:ef:d1:4f:51:49:d7:c9:c0:90:dd:30:
                    bf:1d:e5:9a:5f:83:45:08:67:36:dc:34:a4:c7:4e:
                    74:b8:32:c8:ad:94:bd:4c:37:de:4d:28:2a:51:20:
                    26:ab:8c:da:93:34:41:b8:a6:d5:ec:86:ad:10:76:
                    ff:70:b8:e4:60:fa:7a:d8:d3:69:2d:09:d6:f2:b5:
                    36:f5:af:ce:f0:38:d4:f6:28:89:dd:59:3f:15:22:
                    15:4e:97:c9:5f:46:90:8b:31:0e:02:81:d5:5e:e0:
                    2f:86:62:1e:63:99:eb:35:46:23:a3:f8:48:0e:ed:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6C:F8:7A:11:00:B1:11:E1:23:60:0A:39:1A:38:1A:6A:5C:66:4C
            X509v3 Authority Key Identifier:
                keyid:2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f4:75:d8:4b:26:29:26:05:7f:e5:a2:d3:d9:78:49:1a:6c:
         a3:ac:6a:e7:16:b7:d6:07:f4:30:43:b5:79:58:67:dc:09:c9:
         fb:36:19:21:e7:5c:d0:b0:2f:a7:90:3a:b8:ba:d5:0b:07:18:
         e2:1a:0b:a8:d1:a0:6e:b5:a4:8b:24:55:b6:a0:49:cc:09:20:
         cd:72:0b:6c:2f:b3:c6:78:02:ec:98:43:e8:0f:d2:bd:10:60:
         bf:ae:be:df:85:da:09:ab:d4:31:f6:f1:96:d2:21:d2:55:42:
         c1:bb:22:50:0a:45:ef:68:84:cc:16:10:86:f4:ea:b5:b8:a1:
         b9:59:40:82:c8:1a:91:42:8a:ef:93:92:48:62:f8:84:d0:02:
         10:2c:5d:66:3d:69:b6:e2:80:44:65:6a:2c:cb:58:ea:15:21:
         cb:54:6f:31:a5:08:1e:bd:a1:73:df:50:a5:c6:3f:b6:0f:89:
         e1:78:4e:75:79:73:40:55:5d:33:ed:ab:2b:ef:b2:e7:1c:9a:
         e0:04:b2:8a:78:5d:af:d8:ee:6f:e0:6d:b1:22:c2:62:ac:a7:
         21:69:f4:87:35:fa:60:c6:52:c0:f7:89:59:f1:22:e6:99:a5:
         e6:9e:13:06:0f:cc:1c:af:89:40:39:83:43:54:35:d2:a5:38:
         98:e2:81:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:53:09 2025 by rpki-client