Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
File:                     QDrQFAXpeziMuD5pbQudgLuguLg.mft (raw, json)
Hash identifier:          aoPeD0fDJS8ImGZC7Kx0Azw6goGKnkN3+b+7TmqtsTQ=
Subject key identifier:   27:78:0D:4B:A3:49:04:CB:09:4D:2C:39:53:A2:00:11:79:42:7C:50
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Certificate issuer:       /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial:       066B
Authority info access:    rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
Manifest number:          066A
Signing time:             Mon 12 May 2025 02:11:03 +0000
Manifest this update:     Mon 12 May 2025 02:11:02 +0000
Manifest next update:     Wed 14 May 2025 02:11:02 +0000
Files and hashes:         1: QDrQFAXpeziMuD5pbQudgLuguLg.crl (hash: WpuGmVNaTB5T5YoQVjQsIfs8mnp0Ikw3xesyIzOOYSA=)
                          2: 2295CF68523711EEB515D05D4AD9E6FC.roa (hash: KlQWt1tn1KH/CPgIYBRda65+Ao1w8Du+dkLesEZUQIQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                          rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1643 (0x66b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
        Validity
            Not Before: May 12 02:11:02 2025 GMT
            Not After : May 14 02:11:02 2025 GMT
        Subject: CN=682158b6-e48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:51:e8:3b:70:83:f4:11:b6:e3:62:04:d3:
                    5f:f0:6c:16:fb:e5:dc:d9:c3:18:23:4c:7e:5f:7a:
                    6f:a5:2e:ec:b0:dd:d9:d6:53:e6:85:f1:07:cd:37:
                    fb:af:0f:e7:13:a2:cb:cb:52:37:02:d9:24:08:a6:
                    05:97:6d:d4:58:93:27:40:ae:c4:c9:64:de:4e:e8:
                    96:99:3d:fa:4d:ba:fe:72:f0:ce:e2:5c:8c:a1:e9:
                    fa:19:30:a5:2d:2a:5a:3b:2c:a1:d3:f8:bd:ee:4a:
                    4a:71:fc:c4:c8:58:cd:35:3d:2a:d5:1c:00:66:4e:
                    da:50:46:eb:ee:b3:23:5c:6f:d9:50:21:30:8e:74:
                    fe:4b:6d:53:0e:3e:71:b5:38:34:ab:32:b6:c4:ad:
                    3c:d4:14:25:30:28:62:5e:8b:76:43:0d:d3:0c:6c:
                    75:60:e5:a5:e2:06:39:95:9e:af:70:d9:31:12:56:
                    f7:f2:3f:cc:9c:07:32:7a:80:32:fc:e4:75:ba:a5:
                    28:c5:df:2d:20:87:1e:1a:5a:48:2d:a2:05:2f:d5:
                    39:b2:41:3d:55:3e:1d:12:6c:75:37:6f:aa:6c:83:
                    1d:ac:43:ad:de:b9:a8:ed:d5:6a:ff:de:86:d2:4d:
                    26:04:6e:22:46:c6:30:eb:a0:4f:fb:b0:25:a0:c3:
                    b9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:78:0D:4B:A3:49:04:CB:09:4D:2C:39:53:A2:00:11:79:42:7C:50
            X509v3 Authority Key Identifier:
                keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9b:02:c7:a6:bc:f4:d5:f5:bf:81:58:f0:17:9b:52:c7:84:
         5c:2a:e7:90:76:e6:e6:67:65:30:af:2e:52:95:40:a3:e1:38:
         10:b1:cb:fe:1f:14:b1:ad:8a:74:72:96:71:fe:15:ec:b4:70:
         c4:a6:81:22:55:eb:b2:8d:5c:13:73:9f:2b:69:78:81:93:73:
         84:59:fb:31:c4:74:33:a4:58:51:71:cf:6e:5f:9a:0c:5f:6d:
         46:a9:c0:f6:73:cc:68:53:03:09:8f:1d:b8:27:a0:05:82:f5:
         b0:82:fa:10:40:48:11:48:59:11:25:e9:78:38:00:d5:a3:81:
         7c:96:87:9e:58:17:a4:3c:2e:af:e4:ba:f7:f8:95:4e:be:28:
         0e:62:88:94:ad:32:84:38:be:e3:08:7a:90:ff:52:d9:6f:1f:
         2a:16:9d:2c:1c:57:22:fc:21:67:4c:1f:06:49:ea:b5:52:64:
         36:c3:43:74:f7:6b:ec:d8:b7:0a:f7:39:17:94:e3:3c:52:5f:
         c2:ad:8e:9b:9b:fd:f7:ba:0d:84:73:61:71:49:e4:05:8b:d5:
         1a:b5:26:41:cd:c5:7e:73:29:e1:51:fd:0f:71:3e:74:d1:36:
         90:d1:36:a3:75:89:14:e5:5e:94:90:70:ef:7c:34:28:02:1e:
         dd:83:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:07:06 2025 by rpki-client