Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
File:                     i_LUycasChgyjdPrbLWQRBc3zug.mft (raw, json)
Hash identifier:          psKmWIqJMe+LIPvrEKdwZJricpUE6kYTzo0pJIZeywc=
Subject key identifier:   96:34:97:5F:61:91:39:19:CB:5C:A3:C7:BD:92:91:C7:FE:3A:E2:0B
Authority key identifier: 8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8
Certificate issuer:       /CN=F369442EAF/serialNumber=8BF2D4C9C6AC0A18328DD3EB6CB590441737CEE8
Certificate serial:       068E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
Manifest number:          068D
Signing time:             Sun 04 May 2025 02:03:27 +0000
Manifest this update:     Sun 04 May 2025 02:03:27 +0000
Manifest next update:     Tue 06 May 2025 02:03:27 +0000
Files and hashes:         1: i_LUycasChgyjdPrbLWQRBc3zug.crl (hash: n4BCgRzKRNIRzotM1lxwRQ03JE0MsAmoaGcujju8M8Y=)
                          2: CA4847F0260111EBACE81C12F8AEA228.roa (hash: wvHb/Kw9w+IZBIpt5st+Xz0N4A4tUwQJ6TE8L7LFn7U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 May 2025 02:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678 (0x68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369442EAF, serialNumber=8BF2D4C9C6AC0A18328DD3EB6CB590441737CEE8
        Validity
            Not Before: May  4 02:03:27 2025 GMT
            Not After : May  6 02:03:27 2025 GMT
        Subject: CN=6816caef-1e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:42:87:90:b3:53:a5:6b:39:53:98:d6:c0:
                    65:49:bf:67:0c:7d:5a:7c:08:1f:6e:c9:14:dc:b2:
                    9f:be:97:98:d0:bd:e4:97:8b:05:57:84:87:fc:98:
                    2c:4b:5f:7a:f0:12:5c:7d:4b:d7:e2:ab:57:27:cc:
                    c5:64:44:7c:fd:a1:79:67:1d:df:3d:68:eb:90:08:
                    a7:30:6e:82:0c:fe:de:f4:e5:60:48:63:17:ad:55:
                    e9:7a:9e:d5:9f:b0:be:47:dd:0a:88:68:2b:e4:85:
                    fd:27:37:57:97:01:16:af:19:28:45:64:2c:31:dd:
                    dd:a1:bb:01:01:1e:f5:dd:5c:bc:2b:f1:3a:ff:b4:
                    01:12:1b:72:86:87:8a:d7:80:3c:03:ea:57:aa:4e:
                    11:0b:e5:4c:cb:ae:d7:95:26:df:e1:70:44:dc:be:
                    0b:81:df:4d:6d:07:ed:fd:01:1f:32:4e:97:3b:44:
                    8e:b3:71:88:0e:50:a7:7d:d4:10:d6:ba:73:f1:cd:
                    b3:11:58:51:4d:d2:d7:ec:d3:c8:a7:1b:cf:f6:66:
                    5c:6e:aa:76:84:e4:7c:7d:da:76:63:32:be:be:ac:
                    f7:77:44:d8:cd:01:d2:fd:6d:70:c7:3d:33:9b:7e:
                    c4:b3:2c:01:33:52:e8:31:52:0a:d4:ab:73:f3:82:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:34:97:5F:61:91:39:19:CB:5C:A3:C7:BD:92:91:C7:FE:3A:E2:0B
            X509v3 Authority Key Identifier:
                keyid:8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:23:b4:d1:ad:69:b6:ae:c8:99:c5:04:2f:0a:53:fa:ef:
         da:2d:00:f8:41:1b:15:df:a8:e9:c9:f0:4b:65:d2:d3:77:c3:
         36:8d:86:a5:4c:bb:8a:de:b5:53:d5:32:eb:bb:d7:81:00:93:
         4d:f0:8f:73:24:20:86:e8:24:26:67:4c:23:16:60:eb:58:13:
         42:f4:48:c2:71:b7:f5:99:70:f9:06:f6:40:d1:38:2a:0f:33:
         cd:54:20:f2:04:61:a1:68:44:ff:a2:a6:29:9e:4e:d4:bc:8f:
         d0:71:03:1d:ed:02:c0:da:6f:95:be:24:9a:42:01:43:bc:03:
         88:c0:6b:81:92:52:b9:9c:10:fd:8b:b4:80:6d:e6:98:95:9d:
         a9:1f:89:d4:3b:ab:d4:15:7a:c7:11:a1:dd:9e:af:58:f7:08:
         d0:44:b5:98:ec:d7:b9:fa:69:11:f4:4e:cf:93:fa:0a:85:7d:
         4f:65:16:9e:3b:e9:f2:af:70:b8:3a:3b:4d:4f:f3:82:bb:6f:
         79:ae:44:c5:24:86:0d:c2:08:77:c7:12:da:0a:4f:ed:cb:1d:
         56:4c:9e:d7:3b:60:79:5a:6a:3b:56:73:dd:da:de:41:8e:62:
         9a:0b:cb:c5:33:9c:99:56:68:87:10:07:4f:fd:c2:49:4b:46:
         eb:44:ef:9a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTQ0MkVBRjExMC8GA1UEBRMoOEJGMkQ0QzlDNkFDMEExODMyOEREM0VCNkNCNTkw
NDQxNzM3Q0VFODAeFw0yNTA1MDQwMjAzMjdaFw0yNTA1MDYwMjAzMjdaMBgxFjAU
BgNVBAMTDTY4MTZjYWVmLTFlNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIVkKHkLNTpWs5U5jWwGVJv2cMfVp8CB9uyRTcsp++l5jQveSXiwVXhIf8
mCxLX3rwElx9S9fiq1cnzMVkRHz9oXlnHd89aOuQCKcwboIM/t705WBIYxetVel6
ntWfsL5H3QqIaCvkhf0nN1eXARavGShFZCwx3d2huwEBHvXdXLwr8Tr/tAESG3KG
h4rXgDwD6leqThEL5UzLrteVJt/hcETcvguB301tB+39AR8yTpc7RI6zcYgOUKd9
1BDWunPxzbMRWFFN0tfs08inG8/2ZlxuqnaE5Hx92nZjMr6+rPd3RNjNAdL9bXDH
PTObfsSzLAEzUugxUgrUq3PzgssJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUljSX
X2GRORnLXKPHvZKRx/464gswHwYDVR0jBBgwFoAUi/LUycasChgyjdPrbLWQRBc3
zugwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk0NDJFLzVDOTdEQzc0MjVGRDExRUJBNzVGOEQwREY4QUVBMjI4L2lfTFV5
Y2FzQ2hneWpkUHJiTFdRUkJjM3p1Zy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2lfTFV5Y2FzQ2hneWpkUHJiTFdRUkJjM3p1Zy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTQ0MkUvNUM5N0RDNzQyNUZEMTFFQkE3NUY4RDBERjhB
RUEyMjgvaV9MVXljYXNDaGd5amRQcmJMV1FSQmMzenVnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCK/iO00a1ptq7ImcUELwpT+u/aLQD4
QRsV36jpyfBLZdLTd8M2jYalTLuK3rVT1TLru9eBAJNN8I9zJCCG6CQmZ0wjFmDr
WBNC9EjCcbf1mXD5BvZA0TgqDzPNVCDyBGGhaET/oqYpnk7UvI/QcQMd7QLA2m+V
viSaQgFDvAOIwGuBklK5nBD9i7SAbeaYlZ2pH4nUO6vUFXrHEaHdnq9Y9wjQRLWY
7Ne5+mkR9E7Pk/oKhX1PZRaeO+nyr3C4OjtNT/OCu295rkTFJIYNwgh3xxLaCk/t
yx1WTJ7XO2B5Wmo7VnPd2t5BjmKaC8vFM5yZVmiHEAdP/cJJS0brRO+a
-----END CERTIFICATE-----
Generated at Mon May 5 02:48:01 2025 by rpki-client