Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
File:                     x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft (raw, json)
Hash identifier:          8LEDm0q2aD4t2M1ogD5fR4CUJURbTB+4uF4dt360pLw=
Subject key identifier:   DF:26:7E:BF:AC:94:03:B1:57:92:72:FB:21:C5:56:DE:D6:0F:A3:71
Authority key identifier: C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
Certificate issuer:       /CN=F36390A9AF/serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
Certificate serial:       E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
Manifest number:          E3
Signing time:             Fri 16 May 2025 03:01:49 +0000
Manifest this update:     Fri 16 May 2025 03:01:48 +0000
Manifest next update:     Sun 18 May 2025 03:01:48 +0000
Files and hashes:         1: x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl (hash: /Y6OxDNHQcx8vAITD/SnDe9dheFiuSGuzPQa81/43nM=)
                          2: 2043601A871311EFAA833C47762E951A.roa (hash: 7V2EXwaz5iXOD12PTDbUdoIOuqdno8tko8fgycVsw+8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 May 2025 03:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9AF, serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
        Validity
            Not Before: May 16 03:01:48 2025 GMT
            Not After : May 18 03:01:48 2025 GMT
        Subject: CN=6826aa9d-78f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:6b:df:75:fa:94:df:f5:e0:23:f0:28:8d:
                    35:bd:1d:c5:cf:18:9f:96:23:2c:3e:38:e3:84:74:
                    00:6c:42:d0:90:18:45:9e:4e:6c:c1:80:6b:2e:33:
                    c3:6b:e7:cf:53:08:36:e5:35:e7:cf:18:f3:8e:69:
                    bd:0b:be:16:d7:98:bb:c3:3d:b0:12:95:ae:57:49:
                    33:0d:cf:3f:f2:52:d0:53:17:5a:4f:60:6e:1a:fc:
                    3a:94:35:d2:15:c7:5a:de:f1:33:af:d3:cf:f7:9f:
                    a1:39:04:b0:b2:b8:d7:7f:83:a2:70:12:88:93:c0:
                    2f:76:db:e5:2e:b7:75:1b:73:a2:6a:c2:b9:5f:05:
                    46:25:3c:bb:48:0a:ec:3a:f6:5a:b0:0e:a5:96:40:
                    75:18:6b:4d:c5:a1:40:2c:ed:02:27:4d:bc:a5:b3:
                    be:3c:18:d1:86:cb:53:bb:dd:d0:a5:f9:65:ce:0f:
                    f5:f1:a4:b8:35:68:c8:24:a2:de:8f:76:31:9f:1e:
                    d7:d9:66:7a:6a:b7:6a:fe:ef:5c:dd:8f:5c:83:65:
                    cd:1f:0b:b7:2b:fd:7a:8e:82:ac:16:96:e0:3d:2f:
                    d4:f4:03:71:bd:04:3c:0f:8b:64:79:27:45:67:b1:
                    3a:43:ec:f8:7f:36:c5:44:5f:3d:9d:e0:37:65:77:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:26:7E:BF:AC:94:03:B1:57:92:72:FB:21:C5:56:DE:D6:0F:A3:71
            X509v3 Authority Key Identifier:
                keyid:C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1a:39:17:57:29:3d:e8:ef:f1:e0:65:49:d7:53:7d:8b:02:
         a8:b8:15:62:8f:43:db:0c:dd:2f:a9:de:26:de:6f:5d:93:e9:
         a5:c4:04:9f:f0:35:28:8b:d8:bd:0f:8d:22:28:ff:7b:45:1c:
         b1:32:8b:c6:73:3e:41:97:86:5d:3c:a4:6d:87:12:00:c3:97:
         4b:c3:d4:27:f7:6d:0d:3e:25:42:e1:55:04:aa:2f:33:fa:32:
         64:ea:8b:e6:52:2e:0a:2f:6c:55:48:db:61:07:4a:6f:46:04:
         79:30:b4:92:96:91:bf:4c:2f:6c:78:f3:78:d2:68:bf:4e:bf:
         28:cd:2a:79:1d:df:2f:55:0f:f7:5d:27:2f:0e:24:5c:a0:21:
         91:14:58:0d:1b:a4:11:a6:17:95:0d:24:ab:a9:b9:67:f5:4a:
         e7:26:f2:6a:49:33:a1:57:cc:21:b6:5c:20:71:86:f2:ce:6e:
         ff:4e:0a:95:c0:14:12:2e:94:de:39:29:65:59:f3:62:0e:f6:
         3d:8e:c6:52:a3:d7:de:1a:31:dc:94:f7:b1:2b:d1:85:ea:f5:
         fd:3d:f3:1d:e1:2f:00:81:23:80:5e:17:ae:ae:c1:c8:38:c6:
         26:c4:0f:9d:90:48:1d:56:90:73:7b:bc:42:74:ac:0a:e4:9d:
         f0:8e:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:37:23 2025 by rpki-client