Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
File:                     gvHGYRo6FGfbPXikpf7VCgilexM.mft (raw, json)
Hash identifier:          U6s+WJsWvPFnZMkD9Rw+a99E3Qd9vccoa9NctsBqowk=
Subject key identifier:   2C:08:93:3B:80:D9:C1:7E:25:05:ED:1B:C0:E1:1F:48:A1:34:1E:4A
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Certificate issuer:       /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial:       05ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
Manifest number:          05CB
Signing time:             Mon 05 May 2025 02:29:26 +0000
Manifest this update:     Mon 05 May 2025 02:29:25 +0000
Manifest next update:     Wed 07 May 2025 02:29:25 +0000
Files and hashes:         1: gvHGYRo6FGfbPXikpf7VCgilexM.crl (hash: HyiUnRq8ULYYCuy+Y4vGkwSDswLeHelyjrzZ508s49M=)
                          2: 8C266FAEC0BC11ECB6B937B8F1222468.roa (hash: LWvmdfRyuuShkSq5nvy5VVYhaFiedLSRZGh/sW4VoMQ=)
                          3: C02A73A2567E11ECA2238761D8A014CE.roa (hash: cFnUhnC13xlP5TD/7yV6xNwGQ5BruaAC4MIqLANVH3s=)
                          4: 9224A498414611ECB18B9C4AD8A014CE.roa (hash: XPzMQpRyXNj7tfbthuedXxw7eoOCCt4TWOt0ECkjiSw=)
                          5: FCFB2C46429311EF932F40BD762E951A.roa (hash: aj7dKtZkdlsVdxJmDsYKu4bL2W4gvGpRJEhdeSSyuFM=)
                          6: DD2ED276554811ED808E48E0F1222468.roa (hash: o9F5NASkXJeGRpOxZTi10DlR3PhpAb42z8vnQSf1W6Y=)
                          7: 56D48534366511ECAAF07024D8A014CE.roa (hash: 9qlP2hqRYd4Iy/H8X2UWaaYT/2UVtHIcp+5pW7Qt6Lk=)
                          8: 5634B5344B2D11EEB602566E4AD9E6FC.roa (hash: RXMYhudjIg+5B4S6A7PfziGVGL2i90FJjq9kDBWz4BY=)
                          9: 971C03BE6E9011EEBC47C1344AD9E6FC.roa (hash: FEtfb6h/Qjj5+1EDaqJAUTaRNW+izq+4MGEPVm7WQu4=)
                          10: 664C2930DBAA11EEBDCFF69B775412E6.roa (hash: jXvx3Rxn9FpNmCMQtH/GLTAUSkTFxeG70DHFMH0gCrs=)
                          11: C0F8837027AE11EEB3D5C11B4AD9E6FC.roa (hash: U9lrbioleJrfDazSStxWONg+gePpOFN84WZgOOuwefs=)
                          12: 4A88B5706B5211EDA0EA3F88F1222468.roa (hash: FO1Dj1s2/gzgT9jLou3n+Fly82D5SCTFYMrpFqZDnjk=)
                          13: B539B9C439CE11EDA2E2E4CCF1222468.roa (hash: L8tv2tXp84t94j7so0pE6pjeZqF4W79+avnFF/AtOjc=)
                          14: 09FAFAEA4FE911EFAC30AC4F762E951A.roa (hash: xrcP6Mtrc5qzAh2bF+djzR18bQ7En6DPKHoIPS7kqyo=)
                          15: 26AF521EA44F11ECAA08306F5A40D577.roa (hash: EcPn6/6HlIpqU2DVcgtdl0S9cxELvsIzT/v9a33Hhbc=)
                          16: AC4B6082210C11ECAD741215D8A014CE.roa (hash: AtxMUNLLrkxyey3dAGtkIWE+tCR3TEwc6YhmNlJxQio=)
                          17: 23D6AEEE13D911EDB46DE9BDF1222468.roa (hash: l28mywAfwN/N3mAJ5uusY3xTHQqgOweo5f2TzG8SlCU=)
                          18: 1530CE00EBE911ECAA0878D2F1222468.roa (hash: +MPXKqkSfw55uXv63KcDQA0uk/2t7djdRht6zW2wMbY=)
                          19: 094210AEC41411EE88C9EDA3775412E6.roa (hash: d6MjgYyVOT5Zjb/xnHtqT0+LbviGAM5BCPUU3e5A5oc=)
                          20: A398E3A0F13D11EBB63B911FD8A014CE.roa (hash: v/uCWtn5mJZb+o9+Q5aNz15BP+IXm6kUIIRfortJmRE=)
                          21: 38270294F36311EDBEFE48354AD9E6FC.roa (hash: JCpUwcLlyeyID1rok4mjUMaVBm5RDKXVOymn9hFwm98=)
                          22: 4BEC690082F511EEBBB42B674AD9E6FC.roa (hash: ASnfqkuhQSFv0giROiw8EEeT1sMeoGjHEd6cWLcq/WE=)
                          23: A4E1241E5FD211EF867BDA77762E951A.roa (hash: zKqkWjXQKLviduKuQs8CcF6kO9y5LGaxWQboRjofXP4=)
                          24: 8895C070E02811EC98F4E491F1222468.roa (hash: hD4lS4pjWF7aAeKADbA1StyEyHLEar0949VpnchH3NY=)
                          25: B2ABC5C08DA911EC804C33E45A40D577.roa (hash: IDD186STTmdWGeqHCysVf0QPkT7GBsIIrvPyxHmrdtc=)
                          26: 65989AD8BC3311ED9E2B88B5F1222468.roa (hash: xeuVwfGkXyt1z3GydC6wSInWF5cPlZls2ZzQPi+g8P0=)
                          27: 10E66CAA858011EFA65B285B762E951A.roa (hash: lCBqjCpnLebiZhdULUm/2pXJNsFL2JTGwIc/hckdIcU=)
                          28: 9E5D6708928111ED9F33B1E9F1222468.roa (hash: IFudCUkdHq1Zpz3PyDrq/xUDpQ0MHKE8CA1etAVXR0g=)
                          29: 4577EBD2124811ECB3765C5ED8A014CE.roa (hash: C6keONk5pX9vxi2GbZolDI5QMW6KdyBmAMv7Kf4uGPQ=)
                          30: 3D6F6E96F37711EBAC8D9D1AD8A014CE.roa (hash: 9VXniEQa7EvwyuNK+E+0ZuAUlWwrOJps+Bu2VlcENpI=)
                          31: 6AF017587A0811EDBFC04983F1222468.roa (hash: 2CrRYRu/rPDODQF+1u1w+NJEjDucfctIyM+OcrCAuXQ=)
                          32: D98A56900ACE11EEA9A723454AD9E6FC.roa (hash: EKbiex9REKFqFg3KeIAaHxBhBnGQAgLlrP3B5Rpt+ew=)
                          33: 11AC7B6A124811ECA010225ED8A014CE.roa (hash: NuKKPHhieBdz0VtTkdtt2pca0XP6l2AgJ2AAzjs2NuY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 02:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1517 (0x5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
        Validity
            Not Before: May  5 02:29:25 2025 GMT
            Not After : May  7 02:29:25 2025 GMT
        Subject: CN=68182286-b891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:7a:10:f5:2c:4d:0d:c7:77:02:c3:44:26:
                    b7:5b:c7:48:3e:42:b6:c9:fc:26:b8:82:5a:73:9b:
                    b7:21:76:67:83:e9:27:83:e0:2c:c7:52:dc:bc:22:
                    1b:cb:2a:30:d6:aa:76:0c:9a:d8:27:b1:e6:65:52:
                    4f:f5:4c:1a:7d:33:b0:1a:66:94:54:6c:8f:66:a9:
                    fe:8b:5e:ba:20:19:be:98:f2:d6:b2:98:4a:e8:8a:
                    27:15:d2:8c:ec:af:a1:9a:5d:bd:91:4b:dd:d6:78:
                    9b:62:66:ae:41:bc:c7:7e:89:21:7a:95:a8:ee:b9:
                    a7:b3:a0:be:94:0a:6b:cb:1d:a3:02:84:9a:24:e2:
                    d1:20:8a:24:79:da:24:82:c6:9e:51:22:20:00:cb:
                    3a:05:e5:f0:07:e3:34:d4:93:68:24:fd:ca:80:3d:
                    9b:44:e7:b2:3c:f5:9f:63:6b:81:1c:a9:8d:25:d9:
                    b0:6f:cd:0a:12:5d:c2:9e:64:d0:e0:dd:ff:51:10:
                    37:85:f0:8d:93:22:aa:2b:99:a5:e6:76:0c:63:0d:
                    34:c8:df:98:d4:fb:9b:ff:0f:a2:4b:f4:04:1b:c1:
                    fe:ad:4d:28:9e:1d:1a:99:6a:53:f6:bc:6a:15:ba:
                    bf:0f:6b:97:f2:1c:e0:3e:9a:fa:b4:5b:fe:83:39:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:08:93:3B:80:D9:C1:7E:25:05:ED:1B:C0:E1:1F:48:A1:34:1E:4A
            X509v3 Authority Key Identifier:
                keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:14:e5:72:0f:54:69:20:41:e2:20:d7:b2:ee:dc:3e:91:ee:
         89:20:07:f6:19:69:05:7f:10:28:b1:17:e9:eb:b7:dc:ec:0b:
         42:bf:29:f8:b0:16:39:74:75:24:b3:cd:00:f5:c8:e1:12:8b:
         50:11:87:90:ac:7a:d0:41:fb:a1:32:de:f9:6f:60:c6:13:13:
         54:6e:d5:61:b4:8d:71:3b:cc:9c:1b:da:0d:63:67:ab:6c:fc:
         29:87:e5:84:d9:9a:c4:ca:d0:e7:29:ba:79:1a:a3:3e:92:bc:
         4e:4e:31:e9:57:ab:43:70:a8:5f:13:17:b7:ed:de:d8:c4:c5:
         1c:72:b0:5e:8d:40:57:04:bc:80:43:dc:7a:03:ee:c3:0a:95:
         57:44:1a:58:2a:31:18:83:d1:d2:ca:8f:13:d0:2a:3c:53:e3:
         26:56:2e:40:64:86:f8:1a:d4:75:d3:7e:55:12:e9:e8:eb:85:
         c4:48:2b:03:41:a2:6e:57:4b:05:45:39:83:12:8f:d9:75:44:
         ee:67:02:8e:6f:25:4c:ed:cb:63:b2:cd:c2:ad:b6:4c:41:45:
         86:b9:4d:57:f1:08:49:bc:6a:25:88:b3:b5:04:89:df:13:13:
         3a:c0:b1:f4:cf:8e:13:37:da:32:6b:49:ce:16:f7:e8:1a:88:
         4e:71:b8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:07:04 2025 by rpki-client