Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
File:                     g9HRV2Bl4FAfLXR0TVFF001qcqo.mft (raw, json)
Hash identifier:          EcXDLyGkCIYm+P8Dy8vygtGuSAVGVyaGBCfH9fTSG0w=
Subject key identifier:   E8:B1:C0:1E:F3:D4:3C:7E:C6:A9:D5:5C:F3:90:57:FE:F9:27:74:C9
Authority key identifier: 83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA
Certificate issuer:       /CN=F3690D01AF/serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
Certificate serial:       025E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
Manifest number:          025D
Signing time:             Sat 10 May 2025 04:01:14 +0000
Manifest this update:     Sat 10 May 2025 04:01:13 +0000
Manifest next update:     Mon 12 May 2025 04:01:13 +0000
Files and hashes:         1: g9HRV2Bl4FAfLXR0TVFF001qcqo.crl (hash: iQMLL8pebWeywKFjHA+7nnPIPjf6usNie3zlrJCtVRk=)
                          2: B5BAB51C637E11EEBB2D437E4AD9E6FC.roa (hash: lTgo88jgYIBRxqWVkQ/cnQHAMBRJfU2wE+z/YeI8Onc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690D01AF, serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
        Validity
            Not Before: May 10 04:01:13 2025 GMT
            Not After : May 12 04:01:13 2025 GMT
        Subject: CN=681ecf8a-3cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fd:22:54:ea:10:1c:0d:4b:5c:52:80:99:e7:
                    fe:d3:10:d4:04:10:92:7a:d2:40:c2:81:24:f5:dc:
                    03:f0:91:01:ac:41:25:72:2d:2d:b6:46:b7:f5:8d:
                    44:92:69:b6:15:5e:2b:b4:46:80:1a:fd:d6:4d:25:
                    a0:d4:e0:cb:80:8f:a0:8f:23:79:fe:5b:3d:ce:a0:
                    24:e9:90:f5:6d:ea:40:7f:56:19:d9:fb:4e:67:89:
                    3d:a4:d9:7c:3e:1a:eb:57:ac:aa:14:1f:bf:14:af:
                    ec:e1:a6:c8:db:74:74:a9:39:5e:cf:25:3e:aa:e6:
                    a3:0d:66:c4:47:ec:19:22:21:da:e3:f9:91:65:ee:
                    ea:28:04:2d:d0:67:d2:96:11:ae:c1:91:8a:cf:8b:
                    c4:5d:2a:f6:59:2d:84:a4:02:3d:9e:ef:76:9c:22:
                    d1:f8:24:50:42:15:0d:d8:4d:62:92:52:91:36:4f:
                    f0:ed:d4:e8:59:38:51:79:03:04:c8:63:2a:d1:75:
                    c0:be:2f:6d:48:7b:21:40:7e:70:8a:89:8c:e0:5f:
                    b3:92:b8:3e:45:71:6c:57:64:85:cb:1e:48:e0:ca:
                    c8:e7:f0:00:e0:b5:d1:83:45:07:a5:d6:cb:58:d1:
                    18:2b:0d:51:ae:e5:63:99:d9:f5:8f:00:b7:bd:9a:
                    41:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B1:C0:1E:F3:D4:3C:7E:C6:A9:D5:5C:F3:90:57:FE:F9:27:74:C9
            X509v3 Authority Key Identifier:
                keyid:83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:92:d3:c6:82:eb:1c:52:71:fb:82:7b:11:b0:c0:e1:96:92:
         96:87:92:67:67:8b:a5:f7:bf:99:94:82:4f:01:3f:5a:b0:34:
         e5:cf:96:df:05:22:40:1d:37:2d:73:55:78:db:0a:34:b7:f1:
         52:e6:5a:19:c4:75:cf:1f:af:19:23:12:1b:e8:09:4a:66:7f:
         a3:5f:3f:08:34:e1:bb:b7:7b:dd:ef:fe:47:cb:0a:ea:0e:2d:
         52:3f:ff:13:b9:46:24:fa:5a:e4:b9:c6:8d:2f:1f:e3:25:b4:
         8c:8f:f5:9f:60:87:c0:57:67:06:8a:8e:19:3f:f3:ec:6a:6a:
         43:a5:a6:0d:30:8a:34:58:b3:c3:1b:a5:ed:8f:94:5f:7e:10:
         33:86:c3:37:4d:33:6e:ab:71:9a:08:02:bd:67:5e:5f:0b:10:
         9a:63:1e:90:11:fc:37:2f:c3:61:23:75:d6:f2:a5:a5:82:41:
         2a:d1:a2:6a:83:11:08:61:93:11:5e:7d:50:0a:5f:d9:92:26:
         85:78:b9:95:81:46:cd:75:03:b5:14:65:f1:2d:5f:ef:b4:2f:
         e6:9d:45:ad:0d:e8:7a:4f:d8:a6:1c:5e:c2:fa:30:ac:d8:34:
         0e:d8:d9:66:7d:54:8f:7f:66:92:7d:71:90:6c:5d:6d:6a:89:
         a4:44:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:16:41 2025 by rpki-client