Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
File:                     EMcGKPchX_ouw73-RZaG9Fy-5S4.mft (raw, json)
Hash identifier:          A/VaEiZ1SNsMoCLv+yackNIft31K0KczcyiK3gNaY/k=
Subject key identifier:   7E:82:CD:65:36:55:8B:B9:44:77:FC:A8:EE:85:35:A6:C0:0C:EF:13
Authority key identifier: 10:C7:06:28:F7:21:5F:FA:2E:C3:BD:FE:45:96:86:F4:5C:BE:E5:2E
Certificate issuer:       /CN=F365C895AF/serialNumber=10C70628F7215FFA2EC3BDFE459686F45CBEE52E
Certificate serial:       08BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
Manifest number:          08B6
Signing time:             Mon 12 May 2025 01:29:10 +0000
Manifest this update:     Mon 12 May 2025 01:29:10 +0000
Manifest next update:     Wed 14 May 2025 01:29:10 +0000
Files and hashes:         1: EMcGKPchX_ouw73-RZaG9Fy-5S4.crl (hash: DM1CNYfxyoVD4G1PTcexuo6xwOTjsQ0b53X1Zpcb8uA=)
                          2: 83C04DF87FD711EF9C880ABC762E951A.roa (hash: ggerVZ8oxKy4TyGLqVXU81zJkDdDT0rA41TUPmGkZHU=)
                          3: 2AA5A7D285E011E997E8B40DF8AEA228.roa (hash: VfUn7y+D/eUw5QPrvAz8bUM3+CwQQrtxhfnK7NHDRNU=)
                          4: 14A1446E85E011E98CAAA10DF8AEA228.roa (hash: Sgkr/to7RBtXBA77fd9LenKbclUgWxlt/gVGw8PMj9A=)
                          5: 41630AC496B911EFB90ECA7D762E951A.roa (hash: W8GoEk1Hec2kR8dxLquNRRSceZnEwSA9nGWQsIB2aK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2234 (0x8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C895AF, serialNumber=10C70628F7215FFA2EC3BDFE459686F45CBEE52E
        Validity
            Not Before: May 12 01:29:10 2025 GMT
            Not After : May 14 01:29:10 2025 GMT
        Subject: CN=68214ee6-a8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:22:7e:40:29:34:c5:3f:51:4e:5b:f0:7f:
                    d7:87:03:db:24:f5:fc:2b:e4:83:dc:c6:eb:f2:ad:
                    14:6c:f2:59:3e:90:71:75:b6:8f:ed:2f:67:b8:56:
                    26:8c:d7:39:8e:e4:98:63:83:6c:3f:13:4d:2c:eb:
                    1f:c0:90:93:ea:72:09:f4:1b:dc:c6:44:98:aa:83:
                    40:ff:4b:bc:37:00:89:c3:e7:9a:38:b8:28:fb:6e:
                    94:c3:e0:05:5e:3d:ac:29:2b:26:36:46:3b:55:28:
                    84:08:8f:11:79:5b:6a:ec:44:9d:89:a5:18:7c:84:
                    39:ac:5d:d4:40:93:c6:09:dd:0e:c5:a6:3a:8a:4d:
                    fe:df:3a:25:61:08:8a:7a:9a:65:cb:b1:04:93:04:
                    ae:52:07:03:3c:30:a8:1f:7c:d3:9b:21:5d:4b:26:
                    24:6b:eb:f0:5f:4d:c9:02:24:60:5f:f8:cb:7b:31:
                    f1:31:ba:b9:f1:6d:ea:2a:a4:09:3a:c5:7c:c8:62:
                    65:f6:54:1e:05:e3:5c:9f:d9:b0:fd:09:96:0e:fd:
                    45:7c:bb:4b:07:7a:86:ea:58:2b:b6:55:19:23:3f:
                    1d:5f:34:5c:57:86:f6:a2:c6:a6:ab:4b:32:f0:e0:
                    a7:a9:b1:fa:48:4b:ae:7a:d3:36:89:05:ee:0b:50:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:82:CD:65:36:55:8B:B9:44:77:FC:A8:EE:85:35:A6:C0:0C:EF:13
            X509v3 Authority Key Identifier:
                keyid:10:C7:06:28:F7:21:5F:FA:2E:C3:BD:FE:45:96:86:F4:5C:BE:E5:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b3:bd:ec:ff:b2:2c:f9:02:ba:72:aa:47:37:04:28:95:fc:
         47:c1:3a:6a:0b:eb:eb:38:12:d8:9f:cd:49:14:17:e7:20:0c:
         a9:63:1f:2e:5d:66:d6:3b:9c:2d:2f:a4:b3:8a:6b:93:e6:be:
         e3:9d:1e:10:f7:cb:8f:63:0d:96:2d:76:f9:86:ae:25:ac:49:
         e5:d5:33:4f:5e:81:ed:5e:08:a2:f1:03:c7:cd:bc:07:26:49:
         74:03:63:29:1f:1f:fe:b0:2e:10:32:e4:77:d8:7d:0a:5a:e2:
         0e:0d:5d:c3:b0:55:4e:a8:70:fc:86:30:e8:cd:3a:a4:01:20:
         0b:2b:5b:b8:78:ba:07:ec:6a:e4:b3:ba:b4:58:af:b8:66:7b:
         a9:fe:d9:86:ee:5f:df:92:05:b4:d3:ff:ae:a5:90:14:35:2c:
         96:cf:1c:99:59:2d:98:7f:78:32:f1:2a:bd:e7:ad:e3:28:38:
         53:28:91:fe:44:22:ed:b6:f3:79:b0:43:b2:97:21:55:37:ab:
         73:f8:e0:9c:8b:53:a9:80:c2:1a:17:7b:6d:4d:9f:37:55:33:
         dc:0e:af:26:a9:75:ee:d7:33:7a:7f:dc:ad:7f:42:38:56:32:
         c7:b6:82:ad:62:1a:90:b9:6f:18:7b:93:d4:a2:37:45:4e:ca:
         5b:3c:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:28:53 2025 by rpki-client