Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
File:                     -YeB5n2eqWryWAashtEAb4IfqjY.mft (raw, json)
Hash identifier:          dUjXsTT1NIYY5r7KLaUO0CJCqo90AwBRl/iHYTTl1Oo=
Subject key identifier:   72:78:7F:D8:A4:F5:F1:57:B9:D5:5B:65:E6:40:93:56:F2:7C:2F:38
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Certificate issuer:       /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial:       022D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
Manifest number:          0228
Signing time:             Sun 11 May 2025 04:12:13 +0000
Manifest this update:     Sun 11 May 2025 04:12:12 +0000
Manifest next update:     Tue 13 May 2025 04:12:12 +0000
Files and hashes:         1: -YeB5n2eqWryWAashtEAb4IfqjY.crl (hash: fcAv+jIeOv1KlPRemrQ+20d3eiFhFuRkXwPFnqoidw4=)
                          2: F3D28466A49B11EE881B3A7CD25BE465.roa (hash: 8ql7+vusURAXXO1QjIU3wb4N2LTfHKWe3IzCBlZgxWQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D98AF, serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
        Validity
            Not Before: May 11 04:12:12 2025 GMT
            Not After : May 13 04:12:12 2025 GMT
        Subject: CN=6820239d-bddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:f4:b7:df:94:ab:f7:17:9f:ea:d6:69:bf:
                    92:8c:65:58:51:af:cc:41:ef:3b:c5:9f:26:86:0c:
                    7b:71:ae:c0:ac:85:e0:30:d1:a0:74:90:4f:c5:3e:
                    75:39:5b:2a:d9:d1:ba:ef:31:80:d0:c3:6e:6f:70:
                    a8:7a:bd:ba:72:ef:68:ee:23:14:08:e2:5c:69:ca:
                    72:c0:c6:2e:0c:93:18:e4:ee:ec:19:e7:cf:9b:79:
                    a8:10:9a:73:80:b1:71:11:89:97:8e:1b:89:22:26:
                    47:2c:24:1b:49:5c:be:99:9a:8c:8f:65:68:26:42:
                    7c:c0:29:1f:8d:df:bc:d4:7d:82:97:3a:33:a5:f4:
                    66:37:5d:33:8c:7f:19:dd:71:b5:f7:fb:e9:66:bc:
                    31:2b:a8:9c:a6:a5:50:85:03:11:f2:e2:d5:f9:f6:
                    d5:82:66:75:03:02:e8:71:81:0f:29:5a:d2:8f:2e:
                    60:8a:58:aa:89:38:b6:e0:a8:f2:a9:01:dc:29:c1:
                    48:73:3c:ea:44:cb:16:27:fd:87:3e:40:27:0e:3c:
                    73:fb:5d:e1:bf:ef:06:ea:f0:af:17:de:a1:69:99:
                    28:0a:76:d3:2b:61:00:36:70:66:4b:9f:25:e9:a0:
                    92:8f:7e:9a:f3:2d:90:a2:c1:8d:f2:5d:c0:b5:40:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:78:7F:D8:A4:F5:F1:57:B9:D5:5B:65:E6:40:93:56:F2:7C:2F:38
            X509v3 Authority Key Identifier:
                keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:80:7d:a8:67:6f:7e:10:3c:5a:a6:65:ec:1a:9a:b4:96:e6:
         c8:45:ac:6f:62:9f:72:ac:c5:02:a5:26:e7:43:88:d1:1c:23:
         a3:a6:1f:f2:d6:ca:b6:c7:b7:fd:61:7c:6b:e1:9b:c8:7f:e4:
         ee:cb:b7:fc:35:fd:75:2a:25:f1:f6:5f:fb:f5:50:63:fd:04:
         d1:77:b3:13:4e:10:83:b6:be:e0:5d:74:06:00:17:eb:0a:9b:
         a0:b1:0d:cc:9b:5c:ab:be:fa:4d:0d:3b:b3:33:00:94:98:f4:
         12:66:ee:08:48:0b:56:cb:ce:ef:66:d4:a6:b4:b9:93:ce:ec:
         9b:9e:b6:90:99:70:32:6d:65:0e:c7:31:fa:68:45:10:29:10:
         e2:b6:b0:30:2a:f8:52:1d:28:df:6c:7e:a3:a6:a8:a7:2c:24:
         7b:da:c3:b1:98:3f:ff:30:03:19:93:01:59:a5:2d:76:c3:97:
         06:ef:d0:76:08:ea:1b:7a:82:cd:a8:9e:69:cf:1d:3f:e2:43:
         b3:0b:5c:1b:1d:11:40:23:2e:e4:84:a4:71:ef:e4:1b:fc:3f:
         48:3a:dc:71:13:54:b9:bd:01:71:55:1f:b1:62:30:84:43:51:
         4c:d4:f9:7c:c7:5b:00:d6:dc:d1:46:dc:b5:a6:a5:27:03:00:
         98:8c:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:51:11 2025 by rpki-client