Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier:          UBzWQp8mYuBVdx+iYvoDuXRy0q5AsJfhGtkTFKbq3e0=
Subject key identifier:   B4:EE:DC:9F:2E:78:6C:88:0E:54:2E:50:83:F3:0B:73:70:11:5D:0E
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer:       /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial:       0244
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number:          0240
Signing time:             Sun 04 May 2025 04:06:57 +0000
Manifest this update:     Sun 04 May 2025 04:06:56 +0000
Manifest next update:     Tue 06 May 2025 04:06:56 +0000
Files and hashes:         1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: Vq5kMF45fUhZRxQE4KeoE10frzYdsz4Qr69nYQXYfJE=)
                          2: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
                          3: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
                          4: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 May 2025 04:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Validity
            Not Before: May  4 04:06:56 2025 GMT
            Not After : May  6 04:06:56 2025 GMT
        Subject: CN=6816e7e1-3b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6f:1f:b2:90:55:0c:3c:07:3e:ee:86:1e:d8:
                    95:87:65:21:cc:bd:24:fd:80:af:a9:d8:cb:41:59:
                    91:75:c4:ce:9e:85:25:e7:d2:48:84:13:2d:f9:bf:
                    b8:37:6f:74:78:79:d4:67:6a:c1:ca:c1:2a:7f:e8:
                    9b:f4:4e:f8:2c:d2:6b:d8:27:48:dc:5e:1d:7a:46:
                    d5:b6:3a:b0:b9:d7:3b:84:1a:6a:58:3c:36:c4:1f:
                    17:08:50:42:b8:1f:ac:c2:7d:b2:dd:df:f4:5f:79:
                    a7:ab:91:1c:b8:3c:16:9a:3e:dd:c8:11:84:d2:27:
                    0a:8c:c5:97:ee:f4:e8:95:b2:19:a6:ad:a6:15:3d:
                    68:2e:26:4f:7d:86:28:61:cd:d1:6a:e0:1d:a1:02:
                    65:e6:40:e7:a5:a5:3f:9a:74:a4:1f:b6:6c:f6:d7:
                    ad:66:26:0c:89:9a:86:c6:0c:db:fa:2f:85:01:27:
                    1c:16:b3:13:bd:b1:93:45:4d:91:26:bf:e7:0d:55:
                    3a:c0:91:30:af:31:af:ff:e2:0c:f2:18:32:7e:32:
                    f1:56:08:88:30:b9:a9:92:27:af:a7:c8:be:b3:6f:
                    7b:80:ad:09:ec:96:81:ff:ca:f7:e9:78:e5:11:12:
                    82:09:90:14:1d:aa:c3:9b:72:02:e5:95:ef:d0:a4:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EE:DC:9F:2E:78:6C:88:0E:54:2E:50:83:F3:0B:73:70:11:5D:0E
            X509v3 Authority Key Identifier:
                keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:eb:66:98:f2:a6:ce:7f:ca:a6:2c:3c:74:02:53:6f:e0:73:
         a6:f1:67:e3:a1:ee:f8:48:2d:3d:20:e7:3b:5b:8e:d2:11:38:
         c6:cd:9c:81:4e:31:c1:ef:f9:ce:9a:74:41:13:09:f1:6f:61:
         41:a3:8b:5d:69:2f:bd:f6:23:82:69:47:e8:fe:3a:cf:65:41:
         29:1a:0f:29:4f:db:c9:24:8c:57:1a:dd:3b:8c:d6:d8:01:29:
         98:50:b0:7f:82:46:b5:60:d0:18:67:c8:e6:73:47:09:40:6d:
         b6:0a:17:2b:07:a6:99:7e:0d:0c:dd:a0:d4:62:17:a5:76:c8:
         30:c9:60:c9:ed:cd:61:c0:b5:3f:2f:28:32:8e:f0:34:14:5e:
         30:84:b8:56:53:dd:96:c3:f1:50:7f:7f:45:c0:1f:c0:a2:a5:
         5c:11:80:42:85:51:28:6c:3a:ff:52:93:f7:8f:6a:b8:07:75:
         d2:1c:99:9c:82:45:e9:59:cd:f5:b6:4f:66:e4:f1:19:9d:68:
         d9:91:23:4d:3d:4d:14:03:88:7d:b0:7f:cf:ea:2d:8e:f3:89:
         b6:21:e7:24:fc:e9:54:ef:b8:21:4e:5d:b7:92:05:ed:40:b7:
         22:46:85:1e:ec:1d:c1:17:62:80:de:9e:49:10:5c:da:f3:c6:
         42:52:be:f6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTRERkRBRjExMC8GA1UEBRMoM0NFNzRBQzUyNUFCQzlCNTA1MTMxRTU2RDNBRjRC
QUEwQ0E4NkJDNzAeFw0yNTA1MDQwNDA2NTZaFw0yNTA1MDYwNDA2NTZaMBgxFjAU
BgNVBAMTDTY4MTZlN2UxLTNiODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDibx+ykFUMPAc+7oYe2JWHZSHMvST9gK+p2MtBWZF1xM6ehSXn0kiEEy35
v7g3b3R4edRnasHKwSp/6Jv0Tvgs0mvYJ0jcXh16RtW2OrC51zuEGmpYPDbEHxcI
UEK4H6zCfbLd3/RfeaerkRy4PBaaPt3IEYTSJwqMxZfu9OiVshmmraYVPWguJk99
hihhzdFq4B2hAmXmQOelpT+adKQftmz2161mJgyJmobGDNv6L4UBJxwWsxO9sZNF
TZEmv+cNVTrAkTCvMa//4gzyGDJ+MvFWCIgwuamSJ6+nyL6zb3uArQnsloH/yvfp
eOUREoIJkBQdqsObcgLlle/QpLuBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUtO7c
ny54bIgOVC5Qg/MLc3ARXQ4wHwYDVR0jBBgwFoAUPOdKxSWrybUFEx5W069Lqgyo
a8cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0REZELzkxODdDNUQ0Nzc2NzExRUU5OURGRDk3MjRBRDlFNkZDL1BPZEt4
U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BPZEt4U1dyeWJVRkV4NVcwNjlMcWd5b2E4Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTRERkQvOTE4N0M1RDQ3NzY3MTFFRTk5REZEOTcyNEFE
OUU2RkMvUE9kS3hTV3J5YlVGRXg1VzA2OUxxZ3lvYThjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCs62aY8qbOf8qmLDx0AlNv4HOm8Wfj
oe74SC09IOc7W47SETjGzZyBTjHB7/nOmnRBEwnxb2FBo4tdaS+99iOCaUfo/jrP
ZUEpGg8pT9vJJIxXGt07jNbYASmYULB/gka1YNAYZ8jmc0cJQG22ChcrB6aZfg0M
3aDUYheldsgwyWDJ7c1hwLU/LygyjvA0FF4whLhWU92Ww/FQf39FwB/AoqVcEYBC
hVEobDr/UpP3j2q4B3XSHJmcgkXpWc31tk9m5PEZnWjZkSNNPU0UA4h9sH/P6i2O
84m2Ieck/OlU77ghTl23kgXtQLciRoUe7B3BF2KA3p5JEFza88ZCUr72
-----END CERTIFICATE-----
Generated at Mon May 5 05:03:41 2025 by rpki-client