Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
File:                     DoVnb92LLIvqeU6JUNJzTz-JMME.mft (raw, json)
Hash identifier:          7AXkVV4xgWzOPEZAK2QbHCYhSZHkvfZ5rm6BanA8rfQ=
Subject key identifier:   5D:BC:4B:4C:35:22:5D:0C:81:96:0B:28:86:5E:48:19:98:1B:0C:BB
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Certificate issuer:       /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial:       C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
Manifest number:          C4
Signing time:             Thu 08 May 2025 05:03:28 +0000
Manifest this update:     Thu 08 May 2025 05:03:28 +0000
Manifest next update:     Sat 10 May 2025 05:03:28 +0000
Files and hashes:         1: DoVnb92LLIvqeU6JUNJzTz-JMME.crl (hash: vxwXl7yCFcQTtDklfLazIs/pCQGAO+tcpyoEzOMC2Ws=)
                          2: 0F329508984711EF85483C4D762E951A.roa (hash: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 May 2025 05:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3694A3EAF, serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
        Validity
            Not Before: May  8 05:03:28 2025 GMT
            Not After : May 10 05:03:28 2025 GMT
        Subject: CN=681c3b20-2bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:78:13:a4:2f:bf:a5:dc:d8:5a:2f:ef:12:
                    f7:71:af:47:70:b4:4b:b8:77:fd:68:aa:de:b3:07:
                    c1:ca:66:77:17:e8:de:10:4d:e8:2c:24:0f:78:3b:
                    a3:40:0f:cd:bf:52:ef:81:0a:2e:b7:41:9f:35:84:
                    87:ac:ae:2d:73:d0:ee:6c:4b:9d:b4:d3:90:b3:8b:
                    a0:b8:5a:6a:f8:cd:20:61:fa:03:9a:21:19:36:c0:
                    03:a0:28:b7:df:4a:e0:fe:d4:1d:88:09:1f:c9:9f:
                    37:54:82:a4:0d:79:b7:71:9e:4a:4f:04:e9:f7:e7:
                    49:10:36:d9:aa:cf:18:81:20:96:99:de:a5:ef:59:
                    bb:ab:67:07:45:22:0f:e8:1e:16:ba:1b:5f:d5:99:
                    17:c4:05:98:4c:45:23:6c:52:ac:e7:ae:94:35:8c:
                    ff:e8:2e:bd:e5:e5:0f:ed:19:02:fb:69:c8:91:34:
                    f0:41:24:9f:b3:f4:51:cb:ba:49:d2:f5:1d:99:b4:
                    dd:3a:3e:5a:f5:7e:13:99:8f:6d:3a:ee:ef:dc:3f:
                    23:b6:8b:ac:b8:1b:c8:91:c0:2b:fb:f1:b5:20:0f:
                    5a:b2:7d:9a:f4:79:38:87:f2:e8:30:76:1c:c9:fc:
                    70:c2:67:60:9d:a4:e3:1b:02:28:1a:fa:b3:69:40:
                    87:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BC:4B:4C:35:22:5D:0C:81:96:0B:28:86:5E:48:19:98:1B:0C:BB
            X509v3 Authority Key Identifier:
                keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8d:51:3c:a9:68:b3:23:fa:8c:2b:e6:c9:ea:db:8a:68:27:
         51:bf:e2:52:24:0b:56:33:06:91:bf:54:04:fa:3a:3c:1e:5e:
         db:d9:ff:8d:5d:d7:51:e2:5b:fc:f4:b8:d0:3b:f0:29:f1:8f:
         4e:05:71:b1:1e:b2:51:0d:40:22:d3:d9:2b:39:92:12:8f:40:
         d2:b1:0b:e5:e2:c4:dd:2e:1c:ef:b7:bf:0d:4c:72:9a:91:ca:
         07:8a:25:0d:ce:88:9f:fa:4b:f9:71:db:ab:e7:7d:54:92:04:
         46:80:da:fc:31:87:37:90:c7:c4:40:fe:1d:0b:9f:5d:43:34:
         59:d7:25:50:f1:d6:90:f6:8d:67:1f:4b:4a:5f:ef:21:41:ba:
         9c:d5:3d:33:af:72:12:57:2e:92:08:15:43:cf:95:73:52:4f:
         50:8c:03:2e:a2:d2:2b:d2:1a:f8:d3:ab:98:3d:df:ec:6a:29:
         3d:70:5b:84:57:17:a2:ca:d4:7d:bf:77:92:bd:e9:4e:d3:fe:
         80:fd:1c:72:4d:15:18:93:ab:41:90:0b:ef:c4:b0:08:fd:ec:
         d9:03:26:0a:a4:12:66:1b:5d:a8:5e:37:c7:ec:47:fb:dc:62:
         77:76:68:90:18:6d:bd:fd:db:10:1a:c2:ee:c5:b5:bc:12:8b:
         b9:8d:d7:21
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTRBM0VBRjExMC8GA1UEBRMoMEU4NTY3NkZERDhCMkM4QkVBNzk0RTg5NTBEMjcz
NEYzRjg5MzBDMTAeFw0yNTA1MDgwNTAzMjhaFw0yNTA1MTAwNTAzMjhaMBgxFjAU
BgNVBAMTDTY4MWMzYjIwLTJiYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCe7HgTpC+/pdzYWi/vEvdxr0dwtEu4d/1oqt6zB8HKZncX6N4QTegsJA94
O6NAD82/Uu+BCi63QZ81hIesri1z0O5sS52005Czi6C4Wmr4zSBh+gOaIRk2wAOg
KLffSuD+1B2ICR/JnzdUgqQNebdxnkpPBOn350kQNtmqzxiBIJaZ3qXvWburZwdF
Ig/oHha6G1/VmRfEBZhMRSNsUqznrpQ1jP/oLr3l5Q/tGQL7aciRNPBBJJ+z9FHL
uknS9R2ZtN06Plr1fhOZj2067u/cPyO2i6y4G8iRwCv78bUgD1qyfZr0eTiH8ugw
dhzJ/HDCZ2CdpOMbAiga+rNpQIfnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUXbxL
TDUiXQyBlgsohl5IGZgbDLswHwYDVR0jBBgwFoAUDoVnb92LLIvqeU6JUNJzTz+J
MMEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk0QTNFL0E0MDVCNTkyOTg0MzExRUZCOTcwRjRCNjc2MkU5NTFBL0RvVm5i
OTJMTEl2cWVVNkpVTkp6VHotSk1NRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RvVm5iOTJMTEl2cWVVNkpVTkp6VHotSk1NRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTRBM0UvQTQwNUI1OTI5ODQzMTFFRkI5NzBGNEI2NzYy
RTk1MUEvRG9WbmI5MkxMSXZxZVU2SlVOSnpUei1KTU1FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCajVE8qWizI/qMK+bJ6tuKaCdRv+JS
JAtWMwaRv1QE+jo8Hl7b2f+NXddR4lv89LjQO/Ap8Y9OBXGxHrJRDUAi09krOZIS
j0DSsQvl4sTdLhzvt78NTHKakcoHiiUNzoif+kv5cdur531UkgRGgNr8MYc3kMfE
QP4dC59dQzRZ1yVQ8daQ9o1nH0tKX+8hQbqc1T0zr3ISVy6SCBVDz5VzUk9QjAMu
otIr0hr406uYPd/saik9cFuEVxeiytR9v3eSvelO0/6A/RxyTRUYk6tBkAvvxLAI
/ezZAyYKpBJmG12oXjfH7Ef73GJ3dmiQGG29/dsQGsLuxbW8Eou5jdch
-----END CERTIFICATE-----
Generated at Fri May 9 05:10:51 2025 by rpki-client