Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
File:                     nHonja2J7WPpPiUhm0zaALEAYZM.mft (raw, json)
Hash identifier:          MTHGbl2U0mDdsf2sqQLvo6aXLJs18BkfTIp/cTtQ2tA=
Subject key identifier:   42:43:4A:35:D2:52:BA:7B:F6:9F:85:12:8F:27:3F:4F:15:5A:F0:DD
Authority key identifier: 9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
Certificate issuer:       /CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Certificate serial:       0564
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
Manifest number:          0561
Signing time:             Sun 11 May 2025 02:32:44 +0000
Manifest this update:     Sun 11 May 2025 02:32:43 +0000
Manifest next update:     Tue 13 May 2025 02:32:43 +0000
Files and hashes:         1: nHonja2J7WPpPiUhm0zaALEAYZM.crl (hash: CIeH982iwjUN0RzT68T5+bo22nf2KfREOfnYUgzrLg4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1380 (0x564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36974EEAF, serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
        Validity
            Not Before: May 11 02:32:43 2025 GMT
            Not After : May 13 02:32:43 2025 GMT
        Subject: CN=68200c4c-85b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:b9:0d:2a:2c:2e:d7:6b:e4:62:e3:65:be:
                    ee:99:d1:ec:8c:25:94:59:4f:4a:39:57:dc:c9:3d:
                    39:01:c2:30:d4:87:62:51:90:3d:a4:49:51:0a:70:
                    14:bf:e0:bf:53:93:5f:f8:14:be:f9:84:7a:82:4e:
                    8c:90:71:fe:bb:a9:f1:77:7a:52:86:23:c2:2b:1b:
                    ac:f7:5a:c6:99:6c:25:b7:5e:e8:b9:c5:45:42:28:
                    d8:6f:8f:f2:d1:30:e0:5a:d1:9e:31:52:aa:5b:fa:
                    4c:09:51:19:15:46:5e:a2:a4:25:35:41:62:81:38:
                    0d:38:b9:26:00:a4:93:fa:87:42:d7:6d:1e:a1:53:
                    fd:75:75:d3:fc:9e:75:15:46:5e:ac:b3:6f:f5:83:
                    0d:4f:55:ca:10:1e:86:23:8d:23:25:a9:65:88:ad:
                    90:0e:1d:1c:5d:48:dc:bb:3e:a3:3f:fa:cb:39:92:
                    c5:8d:d5:40:6c:67:67:ea:cc:91:c8:a8:c0:97:83:
                    e0:4e:c6:55:53:8b:0b:be:a0:f2:c2:87:20:56:22:
                    37:14:94:16:8d:b3:22:cf:05:69:83:6c:da:fb:d2:
                    bc:8d:9d:6e:4b:2a:72:95:33:0e:e7:78:d3:3e:3b:
                    cf:79:b2:7a:4e:60:43:70:3f:64:66:19:0c:71:df:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:43:4A:35:D2:52:BA:7B:F6:9F:85:12:8F:27:3F:4F:15:5A:F0:DD
            X509v3 Authority Key Identifier:
                keyid:9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:56:e4:de:05:ca:3d:eb:76:06:6c:72:a5:6f:8a:dc:b6:28:
         b2:38:43:04:75:5e:a2:32:09:e8:b7:5a:54:5e:0a:c8:ad:1c:
         a5:5d:42:d3:15:7c:59:f4:0b:33:74:4a:9b:f4:ac:e9:b2:b9:
         97:a5:fc:98:ec:5c:4d:18:4e:fc:0c:f5:bb:83:47:58:2e:f2:
         62:c4:4d:1a:7a:3a:67:b3:c4:c3:56:79:e2:8f:a9:91:d0:f6:
         83:9c:5e:3e:34:58:7d:ad:23:bf:05:b1:bc:bd:42:0b:46:b3:
         bc:4a:e3:2f:d7:9a:39:07:83:a2:9d:82:3f:56:df:d5:5a:60:
         3d:96:da:fd:95:81:94:fc:68:b9:37:27:17:82:76:50:49:71:
         11:22:65:89:8f:ea:24:4c:2d:92:1b:0a:1e:ea:a9:be:c5:29:
         bb:b1:76:a1:9c:b9:b9:32:8f:ee:d5:ff:ee:c2:22:1c:31:9d:
         d5:47:74:f2:fd:c8:1d:3f:e3:cf:09:78:c7:63:7e:58:84:d3:
         69:4c:61:0b:b1:79:c8:19:6a:25:46:82:79:7f:28:8d:64:cd:
         aa:3a:00:85:48:97:37:6b:c3:af:91:0e:08:8e:e3:9c:4b:59:
         dc:d6:1e:9d:0f:84:10:34:c6:c4:79:50:2f:19:dc:bd:f6:a2:
         41:32:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:33:12 2025 by rpki-client