Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
File:                     B7h9lPBEiTVmQTOd5pFkR32P-kM.mft (raw, json)
Hash identifier:          JTK/ue/dDixSa4QusV4OVfOFxnxfVBdbf4H1QNLxUsI=
Subject key identifier:   46:FD:65:B4:D6:DB:AE:E7:0D:37:3C:0B:06:51:D1:A8:17:84:4F:12
Authority key identifier: 07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
Certificate issuer:       /CN=F36FE1EAAF/serialNumber=07B87D94F04489356641339DE69164477D8FFA43
Certificate serial:       021D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
Manifest number:          021E
Signing time:             Thu 03 Apr 2025 02:42:55 +0000
Manifest this update:     Thu 03 Apr 2025 02:42:54 +0000
Manifest next update:     Sat 05 Apr 2025 02:42:54 +0000
Files and hashes:         1: B7h9lPBEiTVmQTOd5pFkR32P-kM.crl (hash: bN9WZShJQ6UB/Jqyh00E8YvpIC7cULU+vpkGNRmMOvo=)
                          2: F2BE8B0883BF11EEA35C316C4AD9E6FC.roa (hash: 7cVioDp5Djf3TE19QcUyNTeY86beb3OpiRF33Us6tMk=)
                          3: 4EAB40AC807611EEA2E8966F4AD9E6FC.roa (hash: zIgDIvB6Gxwg/+n8hoQHWEVQwYNf/V40+da0oZ0QOpQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE1EAAF
        Validity
            Not Before: Apr  3 02:42:54 2025 GMT
            Not After : Apr  5 02:42:54 2025 GMT
        Subject: CN=67edf5af-462e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:5a:b5:ad:3f:88:d4:fc:eb:38:6e:10:8e:
                    fb:ce:7e:b8:ab:f4:d6:be:a5:67:ff:f8:3a:8a:5a:
                    ad:83:43:f0:3b:85:e2:a0:a3:ff:7f:7f:27:5b:c8:
                    fe:df:cc:42:25:3e:b5:ac:22:f8:ff:d0:89:52:d8:
                    4a:5d:6c:69:a9:3b:97:dc:d7:44:65:a7:c7:9d:c3:
                    eb:3b:5a:7f:07:29:95:cc:a1:a8:cb:8d:48:d8:73:
                    46:b9:20:77:06:2f:06:77:dd:9d:d2:71:5e:5c:8a:
                    0a:96:cb:51:24:a0:0c:15:00:bb:9f:2b:a6:1b:f6:
                    71:43:d8:ff:97:ae:5d:8d:06:cf:b6:26:57:a5:59:
                    71:15:00:a2:88:de:0a:4a:4a:e0:e6:2a:86:3c:a4:
                    25:78:cc:84:a9:5d:58:15:5b:dd:0c:9d:6d:27:2a:
                    3d:62:34:bd:68:be:9f:ef:3e:b2:74:8e:49:72:90:
                    3f:59:8e:7a:67:9e:bc:92:f5:e5:e7:ff:70:5d:57:
                    e8:b9:05:e0:af:f1:fb:59:c0:cf:d4:a9:bd:48:fa:
                    9c:20:25:30:55:0f:7e:68:09:3e:eb:77:35:3a:92:
                    6d:a4:4b:d1:5d:71:ec:3c:b4:9f:21:d4:68:6d:17:
                    8b:cd:50:57:40:ce:dc:fc:b8:0e:b3:1c:b8:7c:32:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FD:65:B4:D6:DB:AE:E7:0D:37:3C:0B:06:51:D1:A8:17:84:4F:12
            X509v3 Authority Key Identifier:
                keyid:07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b7:4f:e6:62:41:44:5d:51:ea:47:60:b7:e6:a5:47:a0:29:
         00:a2:88:a5:a2:0b:2c:29:47:0e:ca:c0:8c:43:90:9e:0f:9b:
         cf:06:a4:70:d8:69:ef:a3:b6:44:f2:33:e6:b0:7f:6d:f6:3e:
         44:fd:a6:c4:4b:e5:ce:da:02:7c:82:51:ff:77:97:c4:c1:9a:
         3b:29:1f:36:fe:b5:ba:df:da:65:fc:b6:90:6e:98:ab:2e:4a:
         59:9a:10:dc:9c:77:d0:83:98:84:4d:6a:96:ed:5a:90:87:90:
         6f:69:e3:27:2a:e4:60:aa:b4:1c:ec:de:10:cc:47:a5:8f:7f:
         54:df:ae:17:53:af:76:49:81:a7:79:07:f7:01:a0:ed:d9:0d:
         aa:cc:48:a4:95:92:0b:a4:62:69:9a:94:0e:33:df:34:da:78:
         7d:26:83:f5:8f:b5:68:8c:31:7a:01:a7:50:35:45:a0:f7:82:
         9b:8c:41:b1:95:51:04:04:05:3b:0d:d1:9d:92:8c:2c:84:54:
         b7:94:1d:02:12:03:9e:25:10:0f:4f:c7:79:0c:d3:2c:5d:f5:
         18:26:08:5b:d9:56:39:4e:29:01:0b:be:28:aa:4b:b7:39:5e:
         20:77:5a:c2:db:10:f3:9b:86:ce:df:83:a6:63:ad:0b:ae:6c:
         8a:95:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:43:21 2025 by rpki-client