Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
File:                     BiCXPEqhlLafR32b7VWXyU0N0Pg.mft (raw, json)
Hash identifier:          EA5bOlYE8EWU7LuDyOTzkYaRaHtKGtT9wAbHNWr8+Sk=
Subject key identifier:   87:B3:26:96:15:03:39:CA:45:6E:34:63:4F:12:34:33:76:7C:95:DC
Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
Certificate issuer:       /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Certificate serial:       03F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
Manifest number:          03F0
Signing time:             Fri 09 May 2025 03:14:15 +0000
Manifest this update:     Fri 09 May 2025 03:14:14 +0000
Manifest next update:     Sun 11 May 2025 03:14:14 +0000
Files and hashes:         1: BiCXPEqhlLafR32b7VWXyU0N0Pg.crl (hash: PXGjr0VseoPz8YfuEPzjhwJKkKavka+0nIxmKWaDhLU=)
                          2: 7EF51C66B09411EF816A837D762E951A.roa (hash: dK+s/XqGvJ2z+H1yiumGDgbO/rdLvkiEGWr5WQScXNE=)
                          3: 835DF5F834EE11ED901FCEEDF1222468.roa (hash: 7FPE0FhlSAjUMelmubiUwThbu0o5YNAG9Z3oUXP8EmA=)
                          4: 5B430E4AB09411EF9DCD797D762E951A.roa (hash: 4jVWIqFk1exxKlsXmJSXOLUstbW11Mv50NKI1fpU+9w=)
                          5: 18EA1A1EEFEA11EDBAF5D7884AD9E6FC.roa (hash: Suhxb/oULjMaEZsuBizxaGFSrHq0egh0mczTJVoAnnw=)
                          6: 4540A8D0EFEA11EDA6943F894AD9E6FC.roa (hash: YdysxgceL5KQtLTnwMeNCOiB4lPOcf1FskePKjG3oJk=)
                          7: BDCCC46234EE11EDACB45CEEF1222468.roa (hash: bWeTuDjLwjcjXXalbVQak4qGcRcTM2Bs7Q2hhXrJ914=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 May 2025 03:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DA43AF, serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
        Validity
            Not Before: May  9 03:14:14 2025 GMT
            Not After : May 11 03:14:14 2025 GMT
        Subject: CN=681d7307-4ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:44:3a:47:1d:fd:f1:56:c0:d5:14:74:9f:
                    e9:f7:7f:53:3e:87:4b:6f:db:fe:4d:7a:09:35:db:
                    b0:88:19:cb:35:cb:c1:70:1e:2c:81:b4:22:b0:21:
                    8a:a1:39:45:08:0a:d1:f1:db:66:cb:9a:d3:2d:f1:
                    08:e6:70:e0:86:85:7a:13:3c:d2:c5:99:1b:66:2b:
                    10:2a:02:ee:0c:3b:41:16:89:93:c0:a7:a3:7e:d9:
                    79:bb:2d:ac:ca:8a:f3:6c:4e:38:fc:26:9f:a2:cd:
                    f6:95:1d:bf:03:d9:9a:9a:2b:1b:5e:5b:8a:35:ee:
                    17:57:7d:64:34:a9:d8:c8:81:c9:18:3f:93:06:d9:
                    f6:03:4c:fc:4a:00:da:c8:32:68:31:84:77:13:31:
                    7f:db:c6:8d:c4:86:9c:84:a4:f1:9a:0e:02:f0:26:
                    21:db:95:66:5e:86:f7:ed:be:40:75:c0:a1:bc:03:
                    cb:46:94:1a:61:f8:1f:2a:3e:64:15:2c:72:9f:b8:
                    c8:b4:57:18:de:46:7c:75:70:0c:eb:2c:5c:07:89:
                    f1:82:e4:a6:72:32:ce:e0:c0:ab:5b:18:32:58:b4:
                    d5:8c:8b:4e:aa:98:06:05:43:8f:5c:49:55:3b:7f:
                    f7:48:11:6a:64:93:2a:43:09:1a:95:5e:47:6f:27:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B3:26:96:15:03:39:CA:45:6E:34:63:4F:12:34:33:76:7C:95:DC
            X509v3 Authority Key Identifier:
                keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:23:07:43:58:50:a4:3c:98:44:c7:56:70:62:8d:a9:e9:a7:
         bc:4d:61:08:97:4a:25:1f:f4:dd:ca:a2:ce:a3:5b:28:7d:28:
         1e:8c:f5:9a:37:af:b5:59:80:c3:23:34:ae:8d:02:e9:30:a3:
         42:43:a1:76:de:3b:9b:d5:6b:26:b0:86:ab:19:e0:df:c7:ea:
         b5:bb:4f:af:bc:14:b7:59:76:5c:75:91:68:1a:46:4d:b2:2f:
         d3:21:87:9c:dc:b5:1a:a0:a6:d6:cf:fa:0b:5e:7b:02:06:8f:
         10:2c:e2:39:ad:39:b8:64:3f:64:76:e1:08:d8:00:73:d8:3a:
         56:3c:97:fd:c5:98:b8:d6:29:e4:b0:42:db:9a:fb:94:82:99:
         7a:ff:2c:a1:44:a6:23:42:b1:ef:8b:5a:6a:94:de:ff:8e:54:
         a1:90:db:8b:40:91:e9:c4:fc:3f:2b:ea:ae:8b:4c:e7:27:b8:
         44:66:2b:71:fd:ce:13:b0:f5:ce:90:1c:80:44:3a:04:3f:21:
         68:82:09:17:f9:8d:f2:74:83:4f:89:22:35:a9:2b:a7:e1:5e:
         1f:1b:e8:81:34:c5:0f:c8:64:73:7f:63:43:22:72:f6:ac:56:
         c8:27:59:c1:9c:f5:74:e7:ae:3c:78:27:7e:ec:94:8c:16:5c:
         e6:89:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:31:20 2025 by rpki-client