Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
File:                     HD250CDCm_5JEPoUqlAU9gSkJn8.mft (raw, json)
Hash identifier:          7U8aGLPev3EoEnmaLaArZhRX7g2YWJ3PDxrHlQFGjNU=
Subject key identifier:   D7:3E:F4:1D:FC:27:A6:81:2A:66:F5:74:29:EC:10:65:51:E3:49:76
Authority key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
Certificate issuer:       /CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Certificate serial:       07A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
Manifest number:          07A1
Signing time:             Wed 07 May 2025 01:47:48 +0000
Manifest this update:     Wed 07 May 2025 01:47:48 +0000
Manifest next update:     Fri 09 May 2025 01:47:48 +0000
Files and hashes:         1: HD250CDCm_5JEPoUqlAU9gSkJn8.crl (hash: UefgyNeSx+VFb4RgBXgS/q0vWz6kSLd39Dmw9UHVjh8=)
                          2: CDF0081C70F711EAA281FF20F8AEA228.roa (hash: fFYrreAZo5U4KWtK7vRj8cUH2mjucnzUUJT2VrDYVDc=)
                          3: 57DC8B94594311EAB1EE2E61F8AEA228.roa (hash: 9IdSgdrivSza8u+XWxxC8YvqMBQsdLiCPyERfG7cngg=)
                          4: A936AAF870F711EA8C00D420F8AEA228.roa (hash: h7Qbm3X2TCVgdgM0/cTt4WYwz33KdG8jIAvDj0CvfDA=)
                          5: EC2721A870F711EA94C12321F8AEA228.roa (hash: H0RK+OL9qt2hdg5NTBlkcYhhkAHhYl2IgSl91pWodCw=)
                          6: 8A7230BA70F711EAB773C020F8AEA228.roa (hash: +UY6ocsMAssEaQx/2vFU1pZTXFT3vRCaWp9MYhngoW4=)
                          7: 34EC88D2594311EAB19C1B61F8AEA228.roa (hash: YNJO/Fu0d3uU51SAVuG+ftYS08KKoUW6lE8R11S/eF8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 May 2025 00:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1959 (0x7a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E2BDAF, serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
        Validity
            Not Before: May  7 01:47:48 2025 GMT
            Not After : May  9 01:47:48 2025 GMT
        Subject: CN=681abbc4-2298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:58:33:6b:87:55:ee:8c:8b:0e:fd:08:bd:
                    a1:73:a0:52:6c:f7:2f:60:47:42:28:58:0b:11:45:
                    c5:6e:f6:90:8f:eb:6d:69:49:0f:f7:7d:78:2c:ad:
                    be:e9:61:9e:3c:2b:4f:51:22:ed:5b:02:2a:69:81:
                    80:3a:4f:2b:4b:00:fe:22:a0:57:9b:17:2c:d1:f9:
                    6a:dd:4d:69:53:06:41:74:26:df:73:98:73:dc:7a:
                    b0:bf:82:ab:9f:a5:01:7f:51:fc:f5:81:f8:52:86:
                    f5:5d:d6:e1:7d:b5:66:1e:28:ae:1d:f0:44:02:00:
                    c4:ec:76:a5:41:ac:ad:16:b4:a9:96:15:73:c9:23:
                    58:6b:59:de:43:5a:58:e7:57:e0:1a:e9:d5:39:90:
                    65:4e:27:f1:b8:64:e5:2d:a2:bf:b0:31:d4:8e:24:
                    0c:9f:bd:fa:76:2d:93:7d:d5:d8:b1:99:05:75:fc:
                    e5:7e:04:d5:3f:15:2a:5b:29:9e:7a:5c:07:58:4a:
                    f0:dd:b0:b6:4a:22:14:2c:4c:cd:d4:a3:2f:8e:37:
                    77:73:08:9e:9a:83:8e:72:3e:f7:a3:55:80:7e:6a:
                    f0:68:3d:02:27:c5:d6:39:c4:c6:1f:5c:70:be:98:
                    2a:0b:8a:05:cf:dd:d0:08:ec:ac:e9:aa:82:99:16:
                    90:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3E:F4:1D:FC:27:A6:81:2A:66:F5:74:29:EC:10:65:51:E3:49:76
            X509v3 Authority Key Identifier:
                keyid:1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:12:bb:88:45:aa:06:c9:88:50:ce:9f:de:f5:d6:fa:30:
         64:83:e1:62:67:2a:9f:4d:81:33:32:6e:5d:0e:17:2a:c1:5f:
         af:8c:d0:b8:26:54:d7:08:63:9f:00:18:18:ea:64:c7:1b:54:
         d1:da:c5:fe:d9:19:40:a8:25:d9:a6:fe:a3:5f:84:ae:25:d4:
         74:9b:60:86:c6:c9:1c:90:14:bf:30:24:0a:53:89:af:8d:7b:
         25:b6:87:ed:36:43:41:ff:34:b7:6e:e4:66:72:d9:53:04:6d:
         63:de:77:53:d1:dc:6f:1a:39:c1:0a:f2:2d:84:2c:68:67:09:
         9b:e7:11:e4:05:5e:38:7b:ea:3b:73:2f:65:bc:a1:73:e1:ff:
         f9:62:28:08:78:43:9c:42:0e:d9:43:3c:1c:82:0e:6c:73:a3:
         b4:cc:23:bd:3e:7d:ac:f7:17:6b:77:36:cb:1f:a7:bd:a9:ac:
         17:23:62:2c:90:d8:c2:7f:a2:a1:bb:ea:2c:db:1a:0a:74:9a:
         94:17:6e:11:17:67:1f:dc:ab:81:74:b1:b5:2f:f8:12:15:25:
         91:15:3e:89:09:38:50:6d:e1:f3:56:b8:c4:db:fd:98:45:46:
         d7:8b:c0:8c:06:ee:f6:07:6f:1d:b4:ab:c7:5c:38:08:1f:87:
         54:9f:1b:f4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUUyQkRBRjExMC8GA1UEBRMoMUMzREI5RDAyMEMyOUJGRTQ5MTBGQTE0QUE1MDE0
RjYwNEE0MjY3RjAeFw0yNTA1MDcwMTQ3NDhaFw0yNTA1MDkwMTQ3NDhaMBgxFjAU
BgNVBAMTDTY4MWFiYmM0LTIyOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9OVgza4dV7oyLDv0IvaFzoFJs9y9gR0IoWAsRRcVu9pCP621pSQ/3fXgs
rb7pYZ48K09RIu1bAippgYA6TytLAP4ioFebFyzR+WrdTWlTBkF0Jt9zmHPcerC/
gqufpQF/Ufz1gfhShvVd1uF9tWYeKK4d8EQCAMTsdqVBrK0WtKmWFXPJI1hrWd5D
WljnV+Aa6dU5kGVOJ/G4ZOUtor+wMdSOJAyfvfp2LZN91dixmQV1/OV+BNU/FSpb
KZ56XAdYSvDdsLZKIhQsTM3Uoy+ON3dzCJ6ag45yPvejVYB+avBoPQInxdY5xMYf
XHC+mCoLigXP3dAI7KzpqoKZFpADAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1z70
HfwnpoEqZvV0KewQZVHjSXYwHwYDVR0jBBgwFoAUHD250CDCm/5JEPoUqlAU9gSk
Jn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFMkJELzAwRjI5QjhFNTk0MzExRUFCREM2RTE2MEY4QUVBMjI4L0hEMjUw
Q0RDbV81SkVQb1VxbEFVOWdTa0puOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hEMjUwQ0RDbV81SkVQb1VxbEFVOWdTa0puOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUUyQkQvMDBGMjlCOEU1OTQzMTFFQUJEQzZFMTYwRjhB
RUEyMjgvSEQyNTBDRENtXzVKRVBvVXFsQVU5Z1NrSm44Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBwRK7iEWqBsmIUM6f3vXW+jBkg+Fi
ZyqfTYEzMm5dDhcqwV+vjNC4JlTXCGOfABgY6mTHG1TR2sX+2RlAqCXZpv6jX4Su
JdR0m2CGxskckBS/MCQKU4mvjXsltoftNkNB/zS3buRmctlTBG1j3ndT0dxvGjnB
CvIthCxoZwmb5xHkBV44e+o7cy9lvKFz4f/5YigIeEOcQg7ZQzwcgg5sc6O0zCO9
Pn2s9xdrdzbLH6e9qawXI2IskNjCf6Khu+os2xoKdJqUF24RF2cf3KuBdLG1L/gS
FSWRFT6JCThQbeHzVrjE2/2YRUbXi8CMBu72B28dtKvHXDgIH4dUnxv0
-----END CERTIFICATE-----
Generated at Wed May 7 17:17:07 2025 by rpki-client