Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          y0IYoNOOJ3tsBrpYsVjvL5x1CK27NncOcRqb528zRLM=
Subject key identifier:   37:AD:92:53:20:CB:89:3D:3A:BD:67:F4:6B:66:34:8F:D3:21:4B:3A
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       04D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          04D8
Signing time:             Mon 12 May 2025 02:47:31 +0000
Manifest this update:     Mon 12 May 2025 02:47:30 +0000
Manifest next update:     Wed 14 May 2025 02:47:30 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: NydT/9W6n4+JUqTU3AJ0Nt26EupZmkfJhpGxkqk7vU8=)
                          2: DBE0F6EE7E8C11EC9A551E885A40D577.roa (hash: e+LkqN78DWuhBsqL8FFr5mWtusQpgR9pzmjfGcJQ5/w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
        Validity
            Not Before: May 12 02:47:30 2025 GMT
            Not After : May 14 02:47:30 2025 GMT
        Subject: CN=68216143-3a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:fc:b7:b6:13:54:c7:c0:e5:63:1b:39:92:
                    4b:e0:ae:10:02:56:5d:09:f4:be:3c:82:3a:50:30:
                    95:bb:24:95:7e:09:74:4d:6f:e8:05:e0:d9:01:bf:
                    b3:3f:a0:df:3d:f1:7e:63:ab:f5:a9:a2:a0:41:b1:
                    79:b0:cd:36:0b:53:b1:18:c8:4b:9b:83:58:9e:a2:
                    eb:4c:82:6e:09:65:78:23:22:b2:e5:5c:c4:b2:e6:
                    1c:23:18:b0:6e:62:62:77:11:70:e5:b3:df:19:10:
                    4c:11:a1:a9:91:ee:e7:63:30:df:24:d8:c9:e9:b7:
                    8b:15:c6:79:e2:ab:1a:f7:20:d6:14:f0:cd:1e:fe:
                    10:4c:ce:eb:34:ef:41:5c:46:5e:7b:9f:2b:8c:f0:
                    a0:be:aa:2b:44:77:5a:2b:d6:a2:35:72:28:14:9c:
                    9d:0d:c3:f5:af:e6:83:56:a7:00:d8:42:4f:18:da:
                    b7:ae:43:10:77:ef:6c:cf:f9:a1:80:17:60:53:57:
                    29:ef:e2:16:83:28:6c:f2:4a:57:1e:96:e1:d4:07:
                    17:ed:c9:9e:b8:50:9d:89:5e:89:a7:7b:f1:17:d8:
                    7e:16:80:83:ff:ac:4f:a1:42:81:58:4c:5c:af:20:
                    3c:3b:62:86:97:82:71:48:7e:1e:e3:b3:13:6b:be:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AD:92:53:20:CB:89:3D:3A:BD:67:F4:6B:66:34:8F:D3:21:4B:3A
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ad:a6:f0:c6:84:4b:2f:a8:b9:20:fa:45:92:b0:c4:a0:e7:
         b8:5c:51:5a:39:5d:ba:be:f0:a3:e0:b4:31:c6:90:9c:a5:d0:
         15:d5:a5:d7:eb:a6:70:7b:97:b1:e8:54:c9:a8:65:3a:98:25:
         b5:24:8a:c0:02:0b:9f:c2:2d:76:67:81:0a:ac:87:f4:5c:1b:
         da:21:ed:90:83:d1:c1:e3:ce:7b:95:d7:d3:90:36:fc:e9:3f:
         e9:af:c8:6f:87:bd:b8:a4:26:ff:98:7b:b3:48:3a:7f:d2:86:
         1a:68:c5:7f:ac:23:39:76:ff:4f:24:17:1c:a7:27:ee:97:bf:
         e2:c0:4b:63:cb:12:b3:7c:5a:f7:b7:2a:82:fb:a1:9b:d8:87:
         01:c5:ca:90:73:75:d1:4a:7e:12:34:a7:7b:f0:e5:3d:11:e1:
         60:e6:44:14:60:74:8f:a3:02:b0:d0:f7:9f:b3:a9:6d:67:82:
         6c:eb:fd:33:5e:7a:1f:f7:16:c0:e3:06:b7:66:16:db:5b:9b:
         e1:88:d6:76:d7:d9:d2:db:84:cd:04:91:1c:8b:31:48:05:64:
         15:a0:26:4a:50:89:8e:09:7d:4b:b3:ec:da:b1:dd:88:28:99:
         0a:67:71:3e:7b:b4:72:15:80:07:f0:b0:31:01:6c:69:27:b8:
         64:16:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:20:45 2025 by rpki-client