Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.mft
File:                     T9QksefB0mEEkWonZM6OzkUivV4.mft (raw, json)
Hash identifier:          32Bv5Pu1oRGWe3pUJe/5HLw16nx15IVAeEHEfbrxKrU=
Subject key identifier:   39:F3:80:98:79:09:D1:27:FB:29:47:2E:22:31:ED:94:EC:58:68:35
Authority key identifier: 4F:D4:24:B1:E7:C1:D2:61:04:91:6A:27:64:CE:8E:CE:45:22:BD:5E
Certificate issuer:       /CN=F36FD195AF/serialNumber=4FD424B1E7C1D26104916A2764CE8ECE4522BD5E
Certificate serial:       0401
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.mft
Manifest number:          03FE
Signing time:             Sun 16 Feb 2025 02:06:42 +0000
Manifest this update:     Sun 16 Feb 2025 02:06:42 +0000
Manifest next update:     Tue 18 Feb 2025 02:06:42 +0000
Files and hashes:         1: T9QksefB0mEEkWonZM6OzkUivV4.crl (hash: N6EuhAO9PpdO/jHq0IUDj9pCuhvEItxpvC3E+tBGm6k=)
                          2: CF54421AE7EF11EC89F129B2F1222468.roa (hash: ajGWSHVkqmLc/f7cPeugVsqBMXMh0oKeDqay1n/CA3g=)
                          3: 2BF48062809511EFBA3DFF63762E951A.roa (hash: DIejCdSTY0WppTtS1iYIu/XX3//9llWktzdBuNfwANg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FD195AF
        Validity
            Not Before: Feb 16 02:06:42 2025 GMT
            Not After : Feb 18 02:06:42 2025 GMT
        Subject: CN=67b14832-d36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:ff:f8:67:ea:15:9e:ab:15:64:5c:9d:d2:
                    c9:80:75:92:04:3e:9b:42:5b:90:f8:c4:f1:a2:90:
                    8a:18:4c:a8:1e:6d:89:b9:ce:79:fa:23:9b:9b:c9:
                    82:9f:c6:ec:b0:3b:5e:0b:f3:b2:35:37:a2:64:b7:
                    e9:05:6d:50:15:ce:3b:db:ef:1d:15:8b:1f:01:a1:
                    b2:4d:60:3d:3b:c3:13:1c:8d:fa:2d:c8:33:c3:90:
                    7d:32:4a:e8:7b:f8:cd:cf:1d:49:d9:34:4e:97:46:
                    1d:94:7b:95:71:c2:ae:f3:64:3a:63:fb:2a:96:b6:
                    1b:49:86:ff:5d:2a:a9:cf:d6:47:8c:78:20:c3:d3:
                    2b:1d:0d:aa:e8:61:07:6a:ae:1b:0f:1a:9e:d5:84:
                    a7:b2:e7:93:b0:96:d2:2f:29:b4:f3:63:02:20:02:
                    d6:5b:0d:12:1e:69:37:78:cd:ca:ce:b8:10:ed:ba:
                    df:3b:e1:83:61:38:ed:8a:80:23:86:6c:63:bf:6c:
                    7a:9c:40:d6:15:78:3f:cc:24:88:57:66:78:fe:3b:
                    01:55:bb:bc:2f:32:d1:ae:81:de:84:ef:75:a3:2e:
                    27:52:0b:14:69:ff:d2:7c:6f:23:12:e0:62:b0:c1:
                    96:0f:e6:9d:99:58:08:b5:77:aa:af:f4:65:28:44:
                    d4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F3:80:98:79:09:D1:27:FB:29:47:2E:22:31:ED:94:EC:58:68:35
            X509v3 Authority Key Identifier:
                keyid:4F:D4:24:B1:E7:C1:D2:61:04:91:6A:27:64:CE:8E:CE:45:22:BD:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T9QksefB0mEEkWonZM6OzkUivV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FD195/EA264EB6E7EB11ECA9161CA6F1222468/T9QksefB0mEEkWonZM6OzkUivV4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e5:5d:eb:43:f2:0a:60:ec:73:39:db:27:b1:10:b7:a5:4e:
         5e:32:32:0a:54:07:96:46:9f:a7:fa:bd:72:93:ee:ca:b2:d1:
         e1:ec:d0:52:4e:27:9a:3c:cc:ac:39:13:dd:9e:30:1b:c9:a7:
         27:ba:20:7d:93:aa:b1:c8:84:ec:77:34:50:9a:29:d7:c1:2b:
         9a:31:71:91:74:d1:c7:64:85:7e:88:50:06:e0:c2:9c:75:a9:
         2f:c5:21:ee:25:7d:99:9f:7e:3d:a6:8c:5c:42:c5:fa:bd:62:
         f5:6c:2b:13:a8:78:a6:ac:56:d1:41:c5:ee:07:e4:83:d6:b5:
         12:ea:0b:8b:e8:f3:02:b8:3b:20:56:b8:43:97:4f:64:0e:58:
         d8:4c:3f:51:81:a5:16:39:c8:3b:03:53:43:4e:6c:87:ae:a8:
         0d:b5:87:f2:1f:34:43:15:7a:90:a6:ac:ca:17:be:39:63:a3:
         ca:a1:92:e4:1b:d8:e7:f3:f2:69:9a:c1:0d:16:c3:bd:43:8d:
         b4:18:81:3c:fd:37:d3:f3:d7:c3:d9:be:fe:b7:a0:ef:7a:5d:
         06:f8:44:9a:d1:66:5f:bd:70:8d:dc:c8:df:55:e0:3c:d9:76:
         b8:77:bd:d9:c7:6e:f6:60:95:50:7e:96:8b:08:28:b3:f5:7f:
         d0:dc:c4:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkQxOTVBRjExMC8GA1UEBRMoNEZENDI0QjFFN0MxRDI2MTA0OTE2QTI3NjRDRThF
Q0U0NTIyQkQ1RTAeFw0yNTAyMTYwMjA2NDJaFw0yNTAyMTgwMjA2NDJaMBgxFjAU
BgNVBAMTDTY3YjE0ODMyLWQzNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCZX//4Z+oVnqsVZFyd0smAdZIEPptCW5D4xPGikIoYTKgebYm5znn6I5ub
yYKfxuywO14L87I1N6Jkt+kFbVAVzjvb7x0Vix8BobJNYD07wxMcjfotyDPDkH0y
Suh7+M3PHUnZNE6XRh2Ue5Vxwq7zZDpj+yqWthtJhv9dKqnP1keMeCDD0ysdDaro
YQdqrhsPGp7VhKey55OwltIvKbTzYwIgAtZbDRIeaTd4zcrOuBDtut874YNhOO2K
gCOGbGO/bHqcQNYVeD/MJIhXZnj+OwFVu7wvMtGugd6E73WjLidSCxRp/9J8byMS
4GKwwZYP5p2ZWAi1d6qv9GUoRNQFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOfOA
mHkJ0Sf7KUcuIjHtlOxYaDUwHwYDVR0jBBgwFoAUT9QksefB0mEEkWonZM6OzkUi
vV4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZEMTk1L0VBMjY0RUI2RTdFQjExRUNBOTE2MUNBNkYxMjIyNDY4L1Q5UWtz
ZWZCMG1FRWtXb25aTTZPemtVaXZWNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Q5UWtzZWZCMG1FRWtXb25aTTZPemtVaXZWNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkQxOTUvRUEyNjRFQjZFN0VCMTFFQ0E5MTYxQ0E2RjEy
MjI0NjgvVDlRa3NlZkIwbUVFa1dvblpNNk96a1VpdlY0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB95V3rQ/IKYOxzOdsnsRC3pU5eMjIK
VAeWRp+n+r1yk+7KstHh7NBSTieaPMysORPdnjAbyacnuiB9k6qxyITsdzRQminX
wSuaMXGRdNHHZIV+iFAG4MKcdakvxSHuJX2Zn349poxcQsX6vWL1bCsTqHimrFbR
QcXuB+SD1rUS6guL6PMCuDsgVrhDl09kDljYTD9RgaUWOcg7A1NDTmyHrqgNtYfy
HzRDFXqQpqzKF745Y6PKoZLkG9jn8/JpmsENFsO9Q420GIE8/TfT89fD2b7+t6Dv
el0G+ESa0WZfvXCN3MjfVeA82Xa4d73Zx272YJVQfpaLCCiz9X/Q3MRL
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:37 2025 by rpki-client