Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
File:                     2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft (raw, json)
Hash identifier:          zUMA9Y6mxFZG7KHm51j8+0KAgLSs9eTwX/yrTlheiTo=
Subject key identifier:   A0:15:02:72:41:BC:72:AD:63:A9:71:BF:59:37:F6:2F:D6:85:52:DB
Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
Certificate issuer:       /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Certificate serial:       0149
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
Manifest number:          0144
Signing time:             Sun 11 May 2025 04:38:16 +0000
Manifest this update:     Sun 11 May 2025 04:38:15 +0000
Manifest next update:     Tue 13 May 2025 04:38:15 +0000
Files and hashes:         1: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl (hash: tAUlyMjHRdTKAfDqD84CVrDY5upP22AlJ8Q4dTYwhSw=)
                          2: AB5A31B645AE11EF8C2C90A6762E951A.roa (hash: Ck19B6WRJjiqRudcI9+7kuwLbdQsGgIfEPLBW28X9YQ=)
                          3: 836BAB0845AE11EFBDF032A6762E951A.roa (hash: 97JbsPdvNqKHfZPYs+HRGIXQO5xpkbISH3xnPHBeBc4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B650AF, serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
        Validity
            Not Before: May 11 04:38:15 2025 GMT
            Not After : May 13 04:38:15 2025 GMT
        Subject: CN=682029b8-a114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:a9:1b:69:0e:34:c9:6a:dd:f8:8d:c7:e0:
                    4f:e7:f9:97:3a:59:2a:4e:78:e7:21:7d:d4:d6:5a:
                    81:18:1b:96:df:c5:f8:0e:3a:6e:bb:54:40:9e:8e:
                    83:26:6a:78:75:e6:42:38:4d:f8:13:45:14:33:b3:
                    43:af:36:bb:fc:f0:c7:91:a6:48:dc:d6:9e:f5:cf:
                    9d:f8:99:9e:1a:b0:15:fd:e7:94:75:e3:ca:75:e4:
                    a9:77:22:74:0a:5e:a6:b5:80:ff:66:a9:85:69:c2:
                    97:a6:2b:f5:dc:97:1f:d9:cc:d4:70:28:96:c2:00:
                    af:dc:88:39:42:ce:79:ed:40:b6:07:e7:52:99:83:
                    cd:e0:ea:2f:b6:06:1c:6f:4f:78:28:23:32:5b:0d:
                    aa:a7:40:aa:1a:6e:48:5f:58:a8:5b:92:0e:06:9f:
                    26:62:5e:a0:aa:d9:91:5c:ea:d3:5d:56:7f:bf:27:
                    7f:0d:eb:0f:cf:f0:ea:44:44:65:ef:06:2b:6c:82:
                    67:8c:ef:8d:1f:61:2e:96:8c:9d:3c:fc:15:23:4e:
                    8e:63:ee:8e:3c:e2:f3:a6:02:d6:41:31:d7:c5:aa:
                    ca:fd:e4:71:3b:fe:a0:b9:91:66:fe:a8:d2:b1:3f:
                    de:98:08:b2:8e:42:57:1d:b0:a1:19:b4:45:91:13:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:15:02:72:41:BC:72:AD:63:A9:71:BF:59:37:F6:2F:D6:85:52:DB
            X509v3 Authority Key Identifier:
                keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:5f:dd:dd:69:21:29:1e:0e:23:79:41:19:ed:cd:5a:56:ea:
         b7:38:77:b5:e9:b1:58:65:25:36:5b:d5:84:20:bb:be:c4:ba:
         e3:16:b6:08:f4:76:e1:3d:d7:d7:04:90:17:9b:6f:55:53:eb:
         46:96:48:4f:d7:d1:5f:57:d8:7c:92:4f:97:84:84:1e:95:9a:
         f3:af:83:d4:1f:9e:d3:f4:24:6d:15:1f:59:f2:94:15:d2:07:
         d6:79:62:fd:9d:49:42:33:f8:64:2d:24:9e:cf:e9:76:28:56:
         71:c0:5a:64:ee:5b:83:f6:4a:b2:98:ec:ba:37:f3:37:e0:d8:
         b9:2b:f9:32:24:cc:a5:d5:97:9b:64:62:7d:74:f4:2f:a3:88:
         ab:34:8e:92:12:07:a2:da:e7:9f:ff:19:4f:de:81:11:03:76:
         b3:63:a6:24:52:44:5f:d9:39:83:74:a0:45:7d:da:07:83:1b:
         39:b6:6f:e2:2d:c2:67:8e:46:39:76:c7:4c:49:51:27:60:f7:
         c1:5e:df:db:09:08:2b:42:37:97:f2:f1:a7:6e:66:e4:64:8c:
         a0:93:61:1b:40:61:d6:41:23:1a:7a:38:16:24:36:9f:1b:f2:
         c3:3e:91:c6:aa:e9:bb:d5:70:5a:77:5b:c1:9d:48:05:97:6b:
         d3:02:c1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:52:17 2025 by rpki-client