Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
File:                     qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json)
Hash identifier:          wCCbLv6+PWyP7N4YrJ/7cEU2yglwYGKNyD5rJJ8BBIo=
Subject key identifier:   F4:33:E2:75:55:B0:E8:DD:FB:64:21:9B:1A:C0:EA:21:DA:12:DE:17
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Certificate issuer:       /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial:       04CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
Manifest number:          04CA
Signing time:             Mon 05 May 2025 02:48:52 +0000
Manifest this update:     Mon 05 May 2025 02:48:51 +0000
Manifest next update:     Wed 07 May 2025 02:48:51 +0000
Files and hashes:         1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: Nl2OCmBUXGJbu0EsyaxwGFKhdJnP3xlrIJyXkRhiVrA=)
                          2: B4CDDFBA096511F09EE29CA4762E951A.roa (hash: AGjlXws4tctUuB4WUyHecSclAJY+HCC3k/CqmlHphvQ=)
                          3: 4A7BCEDE833411ECA330C8B25A40D577.roa (hash: w7j8NF07MRPRcWLZHO+fmpCs8k7Jimz6EpCqZnbOkz8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 02:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1228 (0x4cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628E9AF, serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
        Validity
            Not Before: May  5 02:48:51 2025 GMT
            Not After : May  7 02:48:51 2025 GMT
        Subject: CN=68182713-7583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:31:95:14:e6:ae:66:dd:ac:6b:62:06:cb:
                    e4:c0:44:29:d4:77:21:cf:2a:69:a3:b2:44:87:d4:
                    fb:f2:a2:01:ac:84:54:3b:cf:3e:31:46:01:16:91:
                    d4:8f:7d:f0:38:0e:09:5c:fb:e7:44:be:c6:ac:dc:
                    58:7b:a5:a4:01:01:b5:57:0c:ea:b1:42:2f:67:0b:
                    a2:29:57:88:ab:11:30:ab:af:12:2c:1a:ed:67:49:
                    4a:4b:38:50:9e:b7:63:a7:c0:6a:9a:e5:f4:26:5b:
                    89:d0:87:0c:7e:4a:9b:e1:6e:20:f8:3e:d8:a3:2c:
                    e3:c7:53:18:c1:01:bc:48:c6:b6:43:72:d9:e6:17:
                    5e:05:a1:01:6c:e2:14:47:ff:2b:01:ce:66:80:b0:
                    c8:0a:e0:b4:cd:ff:13:9d:6d:b0:19:49:04:51:a0:
                    d1:fa:be:88:9d:e0:a9:46:2f:b6:be:cf:cf:d1:0e:
                    a1:4f:46:4c:49:39:51:9b:3d:d2:20:2a:a0:a0:21:
                    b5:f7:f3:fd:c3:3c:7b:1f:44:15:64:7d:6f:56:fa:
                    1c:b7:33:5f:ad:4d:62:da:a3:7f:f9:e2:71:64:96:
                    5c:59:77:da:9f:80:55:07:9f:52:f0:1f:90:8d:cb:
                    49:9f:a7:95:a2:85:af:80:f7:ca:75:95:5e:47:f1:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:33:E2:75:55:B0:E8:DD:FB:64:21:9B:1A:C0:EA:21:DA:12:DE:17
            X509v3 Authority Key Identifier:
                keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7b:16:b4:06:cd:ea:dd:d4:7a:7d:60:40:15:77:aa:22:c4:
         e3:a6:35:1a:49:84:14:a5:03:fa:08:81:af:90:62:f9:54:3b:
         e3:0f:f5:da:69:20:50:b3:c6:5c:fb:e5:14:90:eb:66:95:06:
         ca:0e:13:9b:cb:2f:00:d4:9f:24:44:63:c8:de:b4:2e:e9:e9:
         b9:db:b6:32:74:a1:04:94:28:db:96:aa:48:c1:92:5c:08:01:
         58:b8:f2:1a:bd:e6:82:6e:79:de:c0:64:c9:84:26:48:49:9f:
         a4:35:a5:cc:ab:f5:15:d6:9d:6d:24:1a:49:99:92:b6:dd:2d:
         08:d2:d7:5b:9e:67:4f:7e:f6:3a:d9:89:fa:30:47:71:4b:d7:
         c1:8f:aa:65:0b:49:de:40:87:6c:10:4f:3c:c3:88:7e:fe:fe:
         8f:b7:c1:02:fd:ec:b4:91:28:68:8c:ce:44:46:d6:5a:2d:3f:
         39:0c:b1:e2:73:9c:4b:65:4a:77:58:e5:49:c5:e5:40:2d:d7:
         70:c6:3a:05:44:4b:48:a9:a0:64:bc:aa:af:9b:a7:d7:8e:ff:
         0b:73:44:3c:ab:10:d1:a0:49:70:15:05:bb:06:bf:51:62:5d:
         c1:15:d8:51:4a:0d:ae:8a:87:f5:ed:49:1b:28:a6:77:f6:26:
         cb:65:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:19:22 2025 by rpki-client