Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
File:                     Pw7qWRltFKMq812hcQ8VDV-d3dg.mft (raw, json)
Hash identifier:          cGjyumUNF8EceWI9ej/AYsN3TqWInniSotCHv3PnCZA=
Subject key identifier:   A3:37:69:03:20:CA:B4:86:5E:24:4D:29:84:5D:37:40:5D:56:00:80
Authority key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Certificate issuer:       /CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Certificate serial:       021E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
Manifest number:          021A
Signing time:             Mon 12 May 2025 04:14:10 +0000
Manifest this update:     Mon 12 May 2025 04:14:10 +0000
Manifest next update:     Wed 14 May 2025 04:14:10 +0000
Files and hashes:         1: Pw7qWRltFKMq812hcQ8VDV-d3dg.crl (hash: aHZ2b6Bmzrn8Fly+KVF0kmMeAQ/GpCKLuG/923ADxL8=)
                          2: D15451B8AEF411EE804D56A3775412E6.roa (hash: YBWjlP8F+YdvA9ozU69TQggPOcEWkXW+zdvhhb0CYsA=)
                          3: 9DB45F1AAEF411EEBD21E1A2775412E6.roa (hash: zk4qjNpUR6ox7pi92CW344nHF3kKf96YYdu89XzhQ3o=)
                          4: B918F940B04E11EEBBD2E697775412E6.roa (hash: ZrUlsRanFtsZhQlEVluoYbwWKfggdoIE9yZOZzdy4S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652C3AAF, serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
        Validity
            Not Before: May 12 04:14:10 2025 GMT
            Not After : May 14 04:14:10 2025 GMT
        Subject: CN=68217592-ae26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:e9:09:30:20:d7:f0:25:9a:bb:04:48:c6:
                    80:51:28:1c:5d:d4:41:d3:be:d7:d5:61:fe:b2:f2:
                    ae:19:ba:ef:23:95:3c:27:6b:3f:77:3f:46:0f:b6:
                    b7:7d:79:88:63:31:d0:18:5e:35:1a:24:39:0a:e1:
                    3c:17:02:19:f6:cc:6f:cc:b1:79:df:df:2d:9a:3d:
                    96:15:8b:42:32:c4:c3:00:fd:3d:03:26:45:f4:35:
                    76:38:87:fc:a1:37:8c:cc:88:2f:e6:51:d6:50:36:
                    f4:a3:b0:e7:52:ff:8f:75:f5:66:7d:34:65:84:a3:
                    d0:41:16:37:07:09:83:da:7f:bc:80:1e:33:37:6c:
                    58:1a:16:45:e4:87:78:5f:4f:8d:5a:b0:4c:0e:29:
                    07:ea:18:83:8a:ac:c5:85:17:dd:22:ee:f9:02:67:
                    3c:c7:79:d8:86:82:b0:3b:b7:4c:e1:1c:13:8b:1e:
                    8e:a1:91:65:ca:a5:99:b5:18:54:94:e8:14:5d:da:
                    d9:32:72:27:5d:53:f7:40:0e:65:72:b2:1f:b6:cb:
                    f0:4e:31:c7:bf:08:6a:c5:39:36:ed:3c:5b:08:c5:
                    78:8c:7b:4c:7b:17:2a:06:81:ff:64:6c:a5:15:c2:
                    82:98:d3:3f:e6:44:73:98:9f:fd:4b:79:8b:57:e0:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:37:69:03:20:CA:B4:86:5E:24:4D:29:84:5D:37:40:5D:56:00:80
            X509v3 Authority Key Identifier:
                keyid:3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:88:c0:40:36:b8:b3:1a:95:dd:2a:a4:74:c1:0c:a8:39:d6:
         7d:ac:fb:56:50:b4:bf:ff:a8:d0:12:b2:f4:d7:19:39:3c:6d:
         36:05:10:a7:74:c3:f7:90:09:c6:e6:84:30:19:4c:67:9e:0a:
         6b:6e:15:fd:ad:aa:fb:18:0f:8e:f4:45:9d:80:94:79:e8:e7:
         7c:50:13:a8:80:5e:c4:90:6d:4c:08:08:02:a2:9e:43:87:e9:
         b4:ab:b8:49:7a:5d:26:74:62:04:58:5c:b5:7c:d3:bc:40:e9:
         56:75:52:5d:7a:72:be:44:d5:7b:64:69:c2:91:d7:74:2c:fe:
         36:b6:76:86:1b:88:e0:3d:ac:2b:90:68:5b:a3:10:9f:fd:1b:
         99:07:da:63:78:fb:c7:6a:28:ce:2c:c6:95:06:56:65:92:bc:
         84:db:a5:64:37:32:3f:c4:85:09:50:64:82:f7:73:22:17:e8:
         6d:cf:a9:64:bc:68:53:71:ae:12:db:24:04:b3:66:4e:cd:33:
         22:2b:0b:f1:56:72:e1:d1:60:1b:a5:d9:ac:0e:d7:be:11:eb:
         82:68:04:ec:dd:a0:72:fc:ec:eb:5b:dd:3e:05:dd:e9:5f:de:
         19:97:af:24:55:d8:e5:46:cb:f0:6f:f5:49:b0:e1:86:ac:e5:
         27:b0:39:17
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTJDM0FBRjExMC8GA1UEBRMoM0YwRUVBNTkxOTZEMTRBMzJBRjM1REExNzEwRjE1
MEQ1RjlEREREODAeFw0yNTA1MTIwNDE0MTBaFw0yNTA1MTQwNDE0MTBaMBgxFjAU
BgNVBAMTDTY4MjE3NTkyLWFlMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtCukJMCDX8CWauwRIxoBRKBxd1EHTvtfVYf6y8q4Zuu8jlTwnaz93P0YP
trd9eYhjMdAYXjUaJDkK4TwXAhn2zG/MsXnf3y2aPZYVi0IyxMMA/T0DJkX0NXY4
h/yhN4zMiC/mUdZQNvSjsOdS/4919WZ9NGWEo9BBFjcHCYPaf7yAHjM3bFgaFkXk
h3hfT41asEwOKQfqGIOKrMWFF90i7vkCZzzHediGgrA7t0zhHBOLHo6hkWXKpZm1
GFSU6BRd2tkyciddU/dADmVysh+2y/BOMce/CGrFOTbtPFsIxXiMe0x7FyoGgf9k
bKUVwoKY0z/mRHOYn/1LeYtX4MwNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUozdp
AyDKtIZeJE0phF03QF1WAIAwHwYDVR0jBBgwFoAUPw7qWRltFKMq812hcQ8VDV+d
3dgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUyQzNBL0Q2MDdDRjI4OUE4MTExRUU4QTdCRjEyQkQyNUJFNDY1L1B3N3FX
Umx0RktNcTgxMmhjUThWRFYtZDNkZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1B3N3FXUmx0RktNcTgxMmhjUThWRFYtZDNkZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTJDM0EvRDYwN0NGMjg5QTgxMTFFRThBN0JGMTJCRDI1
QkU0NjUvUHc3cVdSbHRGS01xODEyaGNROFZEVi1kM2RnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsiMBANrizGpXdKqR0wQyoOdZ9rPtW
ULS//6jQErL01xk5PG02BRCndMP3kAnG5oQwGUxnngprbhX9rar7GA+O9EWdgJR5
6Od8UBOogF7EkG1MCAgCop5Dh+m0q7hJel0mdGIEWFy1fNO8QOlWdVJdenK+RNV7
ZGnCkdd0LP42tnaGG4jgPawrkGhboxCf/RuZB9pjePvHaijOLMaVBlZlkryE26Vk
NzI/xIUJUGSC93MiF+htz6lkvGhTca4S2yQEs2ZOzTMiKwvxVnLh0WAbpdmsDte+
EeuCaATs3aBy/OzrW90+Bd3pX94Zl68kVdjlRsvwb/VJsOGGrOUnsDkX
-----END CERTIFICATE-----
Generated at Mon May 12 21:39:42 2025 by rpki-client