Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
File:                     A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft (raw, json)
Hash identifier:          FqROXRRlV4l3zGUOEc5QkvsP/qriQd2Z//mObVM69Fg=
Subject key identifier:   05:10:0B:3C:2F:A2:5C:9F:62:B9:A4:3B:9C:10:6C:35:3B:6D:28:16
Authority key identifier: 03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D
Certificate issuer:       /CN=F3628C37AF/serialNumber=039AAF7FE9F60BF0977486FA74B5871859AEA13D
Certificate serial:       059B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
Manifest number:          059A
Signing time:             Wed 14 May 2025 02:24:36 +0000
Manifest this update:     Wed 14 May 2025 02:24:36 +0000
Manifest next update:     Fri 16 May 2025 02:24:35 +0000
Files and hashes:         1: A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl (hash: CLAi2CDeDMR70Tb1kEZEpnn4JbRegMRYrYm8s5eKjdI=)
                          2: D9591C72EA1611EBA09F1503D8A014CE.roa (hash: ULu6v5Xd4RylQXz/DNaRnBo4gOCnbUZvm9Y1D6Eb7lc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 May 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435 (0x59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628C37AF, serialNumber=039AAF7FE9F60BF0977486FA74B5871859AEA13D
        Validity
            Not Before: May 14 02:24:36 2025 GMT
            Not After : May 16 02:24:35 2025 GMT
        Subject: CN=6823fee4-5d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:e7:88:fb:43:f2:81:83:0c:5c:73:cc:14:
                    b0:ae:b2:3c:48:d6:48:8c:64:49:77:ab:a1:24:15:
                    ad:52:ad:95:bb:7c:4e:1b:22:c9:72:a2:65:9c:26:
                    86:da:83:87:66:1a:6a:9a:07:fa:22:17:bb:55:8b:
                    c0:46:d9:07:15:9a:3f:5d:fa:96:2c:50:73:eb:7e:
                    0a:ad:41:f6:05:2b:53:47:fb:c6:81:72:0a:bc:8b:
                    02:09:3e:0a:a0:b7:7f:fb:07:2d:46:20:91:2f:96:
                    80:5e:e8:93:97:72:d8:7c:51:36:7d:7c:e9:85:ac:
                    fc:0d:31:10:a9:82:42:b9:75:ae:c8:22:be:5a:e5:
                    48:a1:a6:77:ce:71:c0:46:b1:9a:7e:97:c5:5b:5d:
                    7c:3d:90:88:04:31:84:db:bd:68:3f:a2:6f:7d:5f:
                    c4:58:f7:8d:e0:e1:a4:9c:6e:e6:55:b5:8b:90:dd:
                    5f:af:01:0f:66:cc:f9:f2:2d:ef:5a:cf:fb:cd:cc:
                    c5:4c:c9:4d:c6:1c:58:6f:4b:47:7d:7f:84:3a:1e:
                    c2:a0:0b:ed:74:ee:60:51:9b:69:7d:f7:50:3c:0b:
                    52:2e:76:e7:20:0f:c3:b3:10:70:81:1c:8a:58:1e:
                    c3:39:b8:48:85:98:c5:02:05:2e:bf:df:24:c7:56:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:10:0B:3C:2F:A2:5C:9F:62:B9:A4:3B:9C:10:6C:35:3B:6D:28:16
            X509v3 Authority Key Identifier:
                keyid:03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:99:70:c9:18:c5:14:78:e8:7a:c7:c1:f7:1a:d0:5f:8f:
         32:0f:45:c7:55:3d:81:0b:c9:57:46:aa:6f:21:c2:9c:4f:97:
         2d:a0:3c:e4:8c:af:89:aa:4c:01:3c:4a:c6:ee:4a:b8:e8:5f:
         7a:d9:b8:14:3f:01:81:40:0a:73:5c:12:25:ac:44:c7:41:da:
         50:e0:e7:5a:84:31:e1:33:2f:15:5c:f8:c7:db:66:b5:3b:ad:
         40:77:d7:dc:66:90:bf:c8:da:96:4d:d6:dc:1d:44:68:02:28:
         f6:6a:bf:0b:25:51:09:5f:dd:6c:12:3f:38:89:b9:3d:d9:f2:
         e0:40:6f:11:75:40:1a:13:70:67:8e:3b:a1:91:1d:86:0c:fb:
         01:3b:70:25:81:ba:6f:5d:fb:0b:fa:e9:d4:13:58:69:33:d1:
         af:47:79:9e:7f:c0:c2:dd:4e:e9:0a:a3:05:a2:20:1d:47:1b:
         f0:33:88:4a:ae:03:ee:bf:51:65:f0:8c:22:b3:28:b1:35:69:
         fa:e2:ad:30:8a:48:dd:92:57:20:ae:41:1e:41:81:0c:d4:27:
         db:64:64:7a:3e:5e:15:1e:d9:f6:d4:9d:0b:ae:7c:71:8f:64:
         fe:49:66:90:7e:ea:6f:8c:c7:40:21:fa:c9:8d:13:2d:bb:27:
         01:ed:57:fb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBZswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjhDMzdBRjExMC8GA1UEBRMoMDM5QUFGN0ZFOUY2MEJGMDk3NzQ4NkZBNzRCNTg3
MTg1OUFFQTEzRDAeFw0yNTA1MTQwMjI0MzZaFw0yNTA1MTYwMjI0MzVaMBgxFjAU
BgNVBAMTDTY4MjNmZWU0LTVkN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGfueI+0PygYMMXHPMFLCusjxI1kiMZEl3q6EkFa1SrZW7fE4bIslyomWc
Jobag4dmGmqaB/oiF7tVi8BG2QcVmj9d+pYsUHPrfgqtQfYFK1NH+8aBcgq8iwIJ
Pgqgt3/7By1GIJEvloBe6JOXcth8UTZ9fOmFrPwNMRCpgkK5da7IIr5a5UihpnfO
ccBGsZp+l8VbXXw9kIgEMYTbvWg/om99X8RY943g4aScbuZVtYuQ3V+vAQ9mzPny
Le9az/vNzMVMyU3GHFhvS0d9f4Q6HsKgC+107mBRm2l991A8C1IuducgD8OzEHCB
HIpYHsM5uEiFmMUCBS6/3yTHVvjrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBRAL
PC+iXJ9iuaQ7nBBsNTttKBYwHwYDVR0jBBgwFoAUA5qvf+n2C/CXdIb6dLWHGFmu
oT0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4QzM3L0IzN0VBNUMyRUExNTExRUJBNjEyNjIwMUQ4QTAxNENFL0E1cXZm
LW4yQ19DWGRJYjZkTFdIR0ZtdW9UMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0E1cXZmLW4yQ19DWGRJYjZkTFdIR0ZtdW9UMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjhDMzcvQjM3RUE1QzJFQTE1MTFFQkE2MTI2MjAxRDhB
MDE0Q0UvQTVxdmYtbjJDX0NYZEliNmRMV0hHRm11b1QwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKbplwyRjFFHjoesfB9xrQX48yD0XH
VT2BC8lXRqpvIcKcT5ctoDzkjK+JqkwBPErG7kq46F962bgUPwGBQApzXBIlrETH
QdpQ4OdahDHhMy8VXPjH22a1O61Ad9fcZpC/yNqWTdbcHURoAij2ar8LJVEJX91s
Ej84ibk92fLgQG8RdUAaE3BnjjuhkR2GDPsBO3AlgbpvXfsL+unUE1hpM9GvR3me
f8DC3U7pCqMFoiAdRxvwM4hKrgPuv1Fl8IwisyixNWn64q0wikjdklcgrkEeQYEM
1CfbZGR6Pl4VHtn21J0Lrnxxj2T+SWaQfupvjMdAIfrJjRMtuycB7Vf7
-----END CERTIFICATE-----
Generated at Wed May 14 04:54:00 2025 by rpki-client