Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
File:                     vD3h6YQAgLg8ZSeM3qheopiClIE.mft (raw, json)
Hash identifier:          obY4oazRZPMoTvseAt+98j1iR7F8M2P34FUXt9uDG60=
Subject key identifier:   AE:8B:86:8B:AE:9B:97:80:46:31:E2:F5:30:C7:24:54:10:3C:27:4A
Authority key identifier: BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
Certificate issuer:       /CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Certificate serial:       0238
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
Manifest number:          0231
Signing time:             Thu 10 Apr 2025 02:44:18 +0000
Manifest this update:     Thu 10 Apr 2025 02:44:17 +0000
Manifest next update:     Sat 12 Apr 2025 02:44:17 +0000
Files and hashes:         1: vD3h6YQAgLg8ZSeM3qheopiClIE.crl (hash: 1MOnGNQ8HQdqjCnJWL8V5R4pD1+RklKZ7F5HpLs/qSc=)
                          2: B8CAC7A2985B11EFB8B2954E762E951A.roa (hash: 0SM5T8NNVkyg9HDp47V5o7gPmb06fjxNsfa8bT7ZCeg=)
                          3: 878D493881A211EE930A1D244AD9E6FC.roa (hash: zLISAvhBvxTn3b4oaLe3yfM1aFnsxwTljhKhQX5W/BU=)
                          4: BC17C6B4985911EFB44BE2BE762E951A.roa (hash: Bo/5IgYc6mUDXUlEMJ0TGF8yZL8JGbJAqfj9nRlvJTE=)
                          5: 2710C32E985C11EF9F3C7A50762E951A.roa (hash: bmsEiP38JU+Ehb3iR+wE1cNU6seqsv/LKiiqBY7usJI=)
                          6: 02E6D31E985A11EF9E664242762E951A.roa (hash: kGG1RiMSP23E2TSxLvJ3oRzrbpa7GUjmAWIe62Zi+WQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Apr 2025 00:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCA07AF
        Validity
            Not Before: Apr 10 02:44:17 2025 GMT
            Not After : Apr 12 02:44:17 2025 GMT
        Subject: CN=67f73082-7cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0e:ed:44:5f:cd:ef:d7:04:25:a3:87:90:00:
                    a3:9e:cd:92:c3:40:4e:45:13:44:a5:1e:0d:dd:b7:
                    b3:21:c3:d4:fa:78:a3:96:f1:3c:92:49:da:6e:0a:
                    df:db:26:ca:07:3f:7f:5b:75:e8:bc:68:7d:cb:50:
                    35:b1:0c:c8:d9:4a:51:f0:cd:3b:cf:b6:23:ee:4f:
                    d0:63:af:a4:8c:7c:9c:69:85:4b:c9:33:37:8b:54:
                    d2:8d:bf:bf:89:d0:1a:89:f1:4f:36:9f:21:3a:78:
                    58:51:fe:d1:35:cf:0c:16:11:52:9d:21:1a:1f:8a:
                    4d:59:26:a4:8b:62:bd:3b:31:3c:70:16:14:7a:49:
                    1a:60:05:8b:90:61:94:90:10:59:78:71:3e:e3:8e:
                    4f:50:f8:1f:3b:df:83:15:2b:bd:67:d1:80:4c:63:
                    fa:b0:3c:f0:d5:35:72:7d:ca:1a:b2:92:36:9d:37:
                    96:97:20:24:57:af:e8:b3:40:d0:6e:b7:db:4a:0f:
                    e3:b2:b2:c0:da:a7:19:d9:00:c3:ce:21:76:f7:cc:
                    55:75:34:58:11:f1:8c:73:1f:29:c9:bd:70:f6:a4:
                    2d:42:ab:e8:45:50:71:f1:72:2a:9e:9b:0d:eb:85:
                    4f:a7:02:84:66:ed:6e:64:5c:4a:3e:85:ec:71:b2:
                    87:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8B:86:8B:AE:9B:97:80:46:31:E2:F5:30:C7:24:54:10:3C:27:4A
            X509v3 Authority Key Identifier:
                keyid:BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f2:2f:19:47:b9:ab:73:1a:0a:fe:d5:ad:75:09:ed:e9:50:
         dd:2c:5e:32:68:55:1e:0a:f8:20:79:b0:68:99:12:73:5e:de:
         bc:27:a2:5f:fe:8e:73:28:2b:d4:3b:04:50:8a:0a:ee:bc:33:
         ac:6c:a7:04:6f:85:09:8d:bb:bd:ac:ab:90:71:2a:ac:d6:17:
         59:50:dd:88:af:e2:a3:8c:68:cc:2a:64:8a:62:16:6a:49:11:
         4b:10:13:40:80:5f:b9:3a:20:ad:84:c4:a2:ea:9c:cd:dd:3f:
         d9:db:74:46:d9:9c:5c:e0:78:c0:9d:8f:f8:b6:f7:57:b5:fa:
         26:c3:43:84:4a:95:6d:7e:69:64:bb:2d:40:99:66:e5:c1:e9:
         2c:3f:f8:e5:e8:63:48:23:1d:1d:ec:f0:2f:40:a9:e2:d4:09:
         64:15:90:7f:8e:24:68:bf:b3:12:11:4a:6f:93:5c:26:24:b8:
         c6:c7:27:22:70:29:55:0b:f2:a3:18:6b:b8:5d:7b:bf:20:a5:
         7c:30:76:bb:c9:34:91:9d:1f:4a:3e:84:a6:ef:f1:b4:d0:e8:
         6d:50:09:63:76:ed:3c:b0:4c:f2:ba:ae:65:6c:1c:8d:76:e4:
         88:90:c0:a2:62:dd:9d:b2:1c:5f:aa:a2:34:60:4a:f5:b9:80:
         ff:38:cb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:15:26 2025 by rpki-client