Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
File:                     g2HVptDz1JxnYMDqaGxnxBSd1t8.mft (raw, json)
Hash identifier:          iovcAod+v1Lwxnlf8+OC7zgK0mD/+ncEQOYrrk4vAwI=
Subject key identifier:   94:0F:C1:A6:21:BA:E4:73:E5:3D:0E:23:4C:89:AA:0B:60:36:16:22
Authority key identifier: 83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF
Certificate issuer:       /CN=F36580B0AF/serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
Certificate serial:       028C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
Manifest number:          0288
Signing time:             Mon 05 May 2025 04:01:47 +0000
Manifest this update:     Mon 05 May 2025 04:01:47 +0000
Manifest next update:     Wed 07 May 2025 04:01:46 +0000
Files and hashes:         1: g2HVptDz1JxnYMDqaGxnxBSd1t8.crl (hash: 1Lec6IhEFZFXZkBZ82vA06aQMD91msSJGEP7qVq+AuQ=)
                          2: 1C32F8941A4511F0A5CA51D56DB8BCC6.roa (hash: KQ8ojeNuY+CC6+HeJZiLg2NTwLb/0OvPStW386IgOFQ=)
                          3: 5CA7913C41CF11EEABA50B154AD9E6FC.roa (hash: mPw4RDOXZXo/bpdC9fVPFx1LHe7Ee57R4RWVqSxmsVQ=)
                          4: 1E76759CB6E311EFB3CF7A44762E951A.roa (hash: W/c0Kk3I+J2yYg1lYlt6Jh0twnCYr8+m8FqL7jZfB8o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 04:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36580B0AF, serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
        Validity
            Not Before: May  5 04:01:47 2025 GMT
            Not After : May  7 04:01:46 2025 GMT
        Subject: CN=6818382b-f297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:0b:41:39:bd:bb:3d:bb:dd:8c:41:9f:8e:
                    24:01:2c:b7:ef:bf:5d:82:f8:3f:81:85:c4:5c:e7:
                    0f:0f:59:64:62:09:93:37:52:e5:e6:c6:07:3f:57:
                    81:61:d8:5c:12:be:27:2c:f6:35:3d:ac:f8:57:d1:
                    47:e4:4d:fb:45:95:68:78:e4:f8:47:0b:8f:00:df:
                    4b:bf:6a:b6:3f:cf:4d:b9:0b:52:bb:d4:38:1d:03:
                    51:f1:44:79:71:c1:59:8f:1a:b5:e0:eb:82:38:ee:
                    ce:3e:f3:a1:db:4f:ae:4c:70:b6:30:c4:d3:77:cd:
                    93:0c:57:f5:d9:ae:89:dc:de:7b:d5:db:e6:52:4e:
                    77:31:fe:4d:68:e4:8f:c8:0e:bc:46:64:1b:23:d3:
                    5e:ab:f0:93:12:70:36:61:c9:63:43:cf:7d:e4:fd:
                    48:b7:81:dd:8e:08:14:b9:8b:e0:81:99:34:3f:e6:
                    f8:60:de:20:e3:25:8d:8a:ca:f5:7c:da:b1:e0:d4:
                    78:3f:77:7f:2e:c0:41:fa:0a:31:27:9e:af:bd:e5:
                    1a:45:5b:ba:29:32:01:62:a1:3f:fa:8a:70:f6:a7:
                    27:f3:4c:1a:fe:f0:fd:4c:6e:6d:7b:9c:cc:cb:49:
                    62:2b:07:30:1a:17:c9:f8:05:aa:be:c5:52:b5:e2:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0F:C1:A6:21:BA:E4:73:E5:3D:0E:23:4C:89:AA:0B:60:36:16:22
            X509v3 Authority Key Identifier:
                keyid:83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:b9:b6:13:38:e0:00:40:9a:88:3d:70:c8:1d:89:87:77:
         c4:00:a7:ca:8c:20:df:e2:4c:47:4f:37:f8:ae:95:e0:91:fb:
         e3:12:28:af:25:f4:73:2c:35:ba:08:88:2d:69:a7:51:3b:43:
         5c:a8:37:82:4f:01:d8:3e:0d:02:ee:ae:fa:1c:11:44:03:df:
         14:0b:56:79:65:2a:4e:57:b4:e6:98:62:08:b8:7c:09:83:70:
         b8:34:3e:f7:b5:40:d0:36:bf:fe:d4:4e:ce:6b:90:43:b8:10:
         d4:54:8e:b4:10:84:b2:8d:26:dd:16:d4:92:05:22:0f:6e:3f:
         7d:cb:0c:a0:30:2e:30:d0:d3:ec:e0:d9:37:7c:60:f8:12:cc:
         4d:e5:69:0d:ab:91:4d:17:38:e3:9e:99:50:96:a7:6e:c9:16:
         1a:49:cf:96:02:22:57:9a:2d:73:48:5f:b2:af:15:55:e5:43:
         90:96:23:46:c6:a3:97:71:73:a0:70:1d:e4:59:69:97:f9:de:
         f1:14:6f:f2:27:34:da:8f:53:77:46:c8:d4:0c:c5:5d:7a:5d:
         d7:43:13:4f:23:b2:d0:19:6e:c1:5c:bf:19:db:16:d7:63:d9:
         7b:ce:74:c3:ad:7b:e7:d7:1d:d0:d9:f1:6f:de:21:d1:a3:46:
         4e:43:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:43:43 2025 by rpki-client