Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
File:                     uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft (raw, json)
Hash identifier:          lPahD61ljKf4+Y8KY07FD5crZqwEXsQAWCJk+rgQ+i4=
Subject key identifier:   4C:B0:07:9D:76:EB:91:C3:82:F3:6C:65:10:B2:CA:4F:AC:F9:9B:2A
Authority key identifier: B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
Certificate issuer:       /CN=F3686B65AF/serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
Certificate serial:       0236
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
Manifest number:          022D
Signing time:             Wed 14 May 2025 04:13:22 +0000
Manifest this update:     Wed 14 May 2025 04:13:21 +0000
Manifest next update:     Fri 16 May 2025 04:13:21 +0000
Files and hashes:         1: uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl (hash: rrv16S8yA0Vymd+CpmhroKjjrj5WA9cHpFjJF0zSd3U=)
                          2: 41353ABCC22111EEB2919A95775412E6.roa (hash: oXcQymFlE/krOOEr4NVVaSaifs3aMH0vQz8dpJbk6Hw=)
                          3: 8E74FB4879B211EF8A6E278A762E951A.roa (hash: HVgCoNFWTE1lwq+yr47vjP6O5PwPrCMNfBORofraa3A=)
                          4: 431E183C79EE11EFAA7EEE76762E951A.roa (hash: 7aSukpXTBzkjxwef0CwTrreS0uSqRQoE76LmOrIjIRE=)
                          5: 59BC8CC8704211EF9670AC4C762E951A.roa (hash: YHGbrYfTK/XykaZGHLmnPu2OovDDz4Wf7WXTsS/BDLI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 May 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3686B65AF, serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
        Validity
            Not Before: May 14 04:13:21 2025 GMT
            Not After : May 16 04:13:21 2025 GMT
        Subject: CN=68241862-0e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:fc:3f:00:b6:02:7b:e3:5b:15:8c:49:1f:
                    a5:4a:42:e0:c2:f2:ca:e8:56:59:df:be:29:9c:92:
                    73:49:ea:4e:c2:b6:f9:03:69:9e:4f:6f:d2:4a:0b:
                    82:ff:2d:dd:92:12:93:b5:6b:91:1c:3a:15:37:69:
                    86:f5:75:b7:bc:ee:a5:28:4e:e0:c7:28:96:48:41:
                    c8:36:b5:ea:ce:24:16:91:bf:25:95:1b:9d:f3:f4:
                    12:75:45:37:16:98:1c:07:bc:05:4b:d0:12:45:62:
                    cc:d5:3e:85:52:34:8a:b2:9d:06:18:e3:82:d8:96:
                    5f:a8:91:38:6c:32:7f:60:35:20:45:5e:2a:8c:d5:
                    22:3b:cf:1f:c2:ee:10:11:78:de:47:55:4d:22:a2:
                    3a:08:f6:86:c7:4a:0b:92:7b:5e:5d:f2:5f:cd:3b:
                    07:b3:db:f9:69:5d:b2:3c:8a:e5:de:1b:e0:5b:86:
                    69:1f:64:59:ce:06:b3:e8:38:85:0e:f6:13:4f:41:
                    74:a1:c2:8f:6f:0d:fa:9c:aa:4b:00:50:e4:ff:8e:
                    8b:24:75:cb:a1:c1:87:95:24:7c:5c:a2:5d:0a:6a:
                    be:7b:e1:38:5d:e6:32:0e:04:03:3d:47:ec:b4:24:
                    03:ed:6d:3e:bf:6d:37:8b:a6:7a:ee:7f:4c:f1:72:
                    58:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B0:07:9D:76:EB:91:C3:82:F3:6C:65:10:B2:CA:4F:AC:F9:9B:2A
            X509v3 Authority Key Identifier:
                keyid:B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:dd:fa:37:61:53:bf:36:dd:5f:b8:b7:d4:3c:a4:60:d0:52:
         2a:7c:cc:b9:6f:b8:26:11:77:e4:70:ee:78:86:46:f7:3d:98:
         82:39:b1:a2:58:94:a4:4d:7f:db:ec:21:76:51:99:e1:a1:bc:
         72:53:e7:0b:2e:27:35:56:50:8f:46:e5:bf:8f:38:df:be:87:
         a0:b7:39:88:a3:2a:28:9f:7c:04:43:a1:ab:f9:63:33:98:a0:
         52:7e:43:76:47:e8:10:a7:64:3e:a9:90:41:34:5b:16:0a:21:
         a8:e1:5c:de:d9:04:4c:98:83:e5:c9:07:a4:a4:d8:90:99:73:
         1d:bf:81:de:a7:19:5e:58:90:ab:e2:2a:31:3d:c9:da:3c:25:
         3f:a1:91:ff:d5:35:92:4e:a1:ed:93:d5:a8:f6:b4:04:3e:88:
         8f:f1:6e:40:4f:8f:cc:58:b0:77:03:9b:eb:0a:ff:0e:e7:b3:
         28:2f:e1:5d:3f:2d:1f:4a:9d:8b:9e:79:85:2a:20:d7:1f:a9:
         ea:a5:30:cc:40:98:9b:14:6a:b2:01:25:ae:8f:37:fd:ef:d4:
         1b:dc:23:cd:6e:ee:6a:4f:ae:ed:41:5c:83:ba:ec:98:e3:81:
         b8:a3:64:af:b1:c3:a1:cb:a5:04:76:a8:44:94:50:93:b3:28:
         e5:a1:a0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:25:30 2025 by rpki-client