Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
File:                     SGm5dfSdmA_lFc7dSaDEDruBrKI.mft (raw, json)
Hash identifier:          Wx1pKsJePxLPNcOdG/x3hDabdb2KvGkQawRqT/6rSU0=
Subject key identifier:   BE:5C:D3:1A:78:B1:27:3F:21:72:21:6A:74:3C:29:D3:C0:67:8C:A6
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Certificate issuer:       /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial:       0382
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
Manifest number:          0380
Signing time:             Sat 17 May 2025 03:21:51 +0000
Manifest this update:     Sat 17 May 2025 03:21:50 +0000
Manifest next update:     Mon 19 May 2025 03:21:50 +0000
Files and hashes:         1: SGm5dfSdmA_lFc7dSaDEDruBrKI.crl (hash: GnCkeXSvaw0CSwogzhSTwX+VrFyLZOr71sQP/OJYkN8=)
                          2: D17F6EEC902411ED9E7767D2F1222468.roa (hash: JO/7laMxt+UsHBnYsLId8OjP3XjZJzj6vEh7zTGEoAg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                          rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 May 2025 00:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
        Validity
            Not Before: May 17 03:21:50 2025 GMT
            Not After : May 19 03:21:50 2025 GMT
        Subject: CN=682800cf-2f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:ef:50:59:74:13:71:3f:5f:2e:ac:da:59:
                    b9:2d:cb:60:c6:7d:ef:68:d2:fd:e8:9a:2b:40:58:
                    84:14:f6:04:4e:b2:ed:9d:09:99:cd:ed:b5:d5:99:
                    50:51:8e:f0:84:1a:f0:42:50:10:a8:f7:87:8a:54:
                    26:88:60:07:78:94:70:7f:63:61:28:98:03:a6:78:
                    a2:5d:d7:eb:b3:b5:33:e2:71:40:b5:4f:21:57:1a:
                    d5:f2:e0:b5:18:a8:6e:ec:5e:8b:07:b2:7e:0f:d3:
                    2c:af:84:bc:d9:fb:9a:20:99:48:fa:55:dc:39:5f:
                    ac:72:85:b3:58:38:26:b7:15:2c:55:fd:38:bd:48:
                    ed:e5:4a:fd:b9:dd:ba:01:33:a3:0f:92:1e:ea:14:
                    09:34:4c:a7:a9:a0:c4:39:0f:54:3a:aa:b8:f7:3f:
                    c5:c7:56:7c:f7:8b:15:a9:e9:ce:92:8a:7c:c4:26:
                    42:75:76:ed:c7:35:a8:54:d3:09:fb:80:2c:47:da:
                    06:14:d8:07:87:c9:ec:61:ef:23:6b:ac:ca:88:39:
                    52:ce:2a:f2:e6:6b:81:c0:c6:7c:72:dd:1f:f7:52:
                    0d:7f:4d:14:2a:46:4b:a4:43:18:60:e9:8a:59:a7:
                    bb:d9:d7:8a:c4:c2:b8:6a:a3:04:de:e8:d0:17:7d:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5C:D3:1A:78:B1:27:3F:21:72:21:6A:74:3C:29:D3:C0:67:8C:A6
            X509v3 Authority Key Identifier:
                keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:14:75:9c:ed:e2:47:68:a9:7d:0f:7f:6d:a0:43:f7:69:89:
         78:be:9e:22:dc:a9:04:6a:75:94:f9:50:78:81:4f:0e:50:5c:
         7e:c4:b8:ec:21:06:b6:15:1b:96:79:31:e3:5a:91:62:0f:57:
         81:bb:5f:85:cd:68:94:f2:22:14:2a:aa:19:db:f6:04:40:8a:
         e9:ef:a4:c5:24:d0:10:7b:ea:9c:b2:ff:ec:ad:17:4f:4c:f3:
         95:46:74:ec:bb:1d:67:62:a3:be:0d:c2:a9:b5:99:66:2f:3c:
         ec:49:de:f1:8b:12:a1:d3:d9:c8:59:1b:f2:be:f3:18:09:e4:
         41:26:91:c9:53:e1:48:ef:45:9b:f6:37:28:31:af:93:93:03:
         08:72:65:9b:cf:2c:37:9b:f0:f0:fa:31:0f:e7:58:18:58:48:
         52:a1:df:72:7e:36:92:d1:5d:16:18:ea:56:48:cc:dd:86:96:
         13:cc:6a:60:07:8d:b1:db:08:41:f4:0a:81:e7:4a:23:a4:44:
         64:a7:8e:af:20:88:f7:99:73:3a:74:d2:ef:2f:5d:f5:b3:c2:
         ff:77:9d:59:cf:36:00:ab:30:4c:5b:d0:13:73:98:86:d5:f6:
         bf:74:66:28:2b:82:7b:0f:29:4a:fb:1c:a1:5c:1a:de:fe:96:
         a4:72:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:29:59 2025 by rpki-client