Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
File:                     m4nQTrnUft-_pgddFSb5yb_koPU.mft (raw, json)
Hash identifier:          krKGI5G7HHPc8GHiK5OcA03Ef44Zd0XH6QcRAP2cx5g=
Subject key identifier:   DE:FF:28:C5:23:5F:79:04:C1:77:1B:16:F1:51:32:7E:1C:69:BF:6B
Authority key identifier: 9B:89:D0:4E:B9:D4:7E:DF:BF:A6:07:5D:15:26:F9:C9:BF:E4:A0:F5
Certificate issuer:       /CN=F36C94E7AF/serialNumber=9B89D04EB9D47EDFBFA6075D1526F9C9BFE4A0F5
Certificate serial:       0158
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
Manifest number:          0156
Signing time:             Mon 05 May 2025 04:39:03 +0000
Manifest this update:     Mon 05 May 2025 04:39:02 +0000
Manifest next update:     Wed 07 May 2025 04:39:02 +0000
Files and hashes:         1: m4nQTrnUft-_pgddFSb5yb_koPU.crl (hash: 0fEip9bYnSBlNSbdAGSd60ZSA/CE/IEKiNtJA38o6QA=)
                          2: 704926D8280111EF84F6804E7DDC24C2.roa (hash: 3vt49i2b05v3GXaZFK4O6BAWjRmYDlAAsj6Uqb28tW0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 00:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C94E7AF, serialNumber=9B89D04EB9D47EDFBFA6075D1526F9C9BFE4A0F5
        Validity
            Not Before: May  5 04:39:02 2025 GMT
            Not After : May  7 04:39:02 2025 GMT
        Subject: CN=681840e7-8444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:6f:69:a1:35:f9:63:2c:4d:a4:e4:4c:af:
                    00:9f:f0:31:9d:1f:98:48:6a:67:5c:44:cf:fd:bb:
                    e7:95:38:2a:27:55:7c:a0:5a:c8:94:e9:a7:35:7f:
                    3c:eb:62:c1:14:ef:e6:02:81:2b:bd:a4:e9:ce:aa:
                    7f:7a:a8:c8:5c:25:fa:2c:49:b4:db:8b:57:03:37:
                    fb:e5:74:10:c3:59:13:57:6b:cd:64:d4:ad:5e:41:
                    00:a1:78:cd:e9:51:60:cc:0d:a4:f9:64:95:75:1e:
                    77:30:1f:ec:d6:ce:7f:b2:fb:4a:d2:48:6f:4b:53:
                    97:67:15:8c:86:60:e9:ac:89:f1:7a:26:b0:cd:28:
                    9b:60:62:a5:3f:6d:cf:ea:b9:a5:b6:fd:b8:ec:53:
                    69:f2:0c:d1:10:f7:72:08:53:49:17:ab:4d:87:6f:
                    02:6e:61:36:72:ab:6e:44:6e:49:e5:10:97:c8:d1:
                    c6:f6:40:05:0e:1a:85:21:bf:37:9f:c6:07:5d:9f:
                    84:93:ae:ce:b6:ec:16:14:e7:8d:bd:21:9c:5e:ec:
                    ce:70:84:38:96:03:10:e4:9f:05:4a:25:0d:1a:b9:
                    5e:4c:f3:97:8e:b2:2a:f1:83:57:a6:de:c6:08:e5:
                    21:6e:20:7a:1f:50:03:66:0a:cb:a5:76:79:18:95:
                    9a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FF:28:C5:23:5F:79:04:C1:77:1B:16:F1:51:32:7E:1C:69:BF:6B
            X509v3 Authority Key Identifier:
                keyid:9B:89:D0:4E:B9:D4:7E:DF:BF:A6:07:5D:15:26:F9:C9:BF:E4:A0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m4nQTrnUft-_pgddFSb5yb_koPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C94E7/2857400427FB11EF8F6E74247DDC24C2/m4nQTrnUft-_pgddFSb5yb_koPU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:71:a6:d2:dd:3c:48:b4:a4:63:c9:f9:f8:d7:7f:4b:7e:bd:
         8a:1a:f4:70:0e:d5:60:95:62:d0:8f:4b:36:80:e9:97:c5:54:
         50:9a:d6:73:d3:a1:26:58:05:d6:f4:9e:a6:f8:77:12:65:5f:
         a7:ff:61:a1:bf:fa:88:ed:7d:a9:d9:5f:03:ff:bb:60:91:9b:
         4b:87:76:f4:df:43:c2:da:f9:bc:8d:74:7d:1c:99:0c:d6:3e:
         7d:ae:10:7f:22:8e:98:7c:0e:80:ae:b9:08:ec:28:54:57:d1:
         d3:11:f3:e4:02:64:b5:1e:11:db:d1:aa:31:87:2f:a1:2c:5f:
         e3:6e:78:da:03:f6:d0:c3:e3:27:dc:49:11:a8:5e:ec:ef:49:
         1d:21:ac:25:9f:60:5c:53:16:79:84:da:7f:1c:b9:c9:78:db:
         bc:5c:8c:9f:c0:6a:c0:1d:50:09:27:98:a6:5a:66:97:c0:d9:
         ed:4c:43:4b:78:d8:d7:f9:e7:a6:55:fd:a3:dd:58:f0:d4:a2:
         5c:1f:a3:02:c6:1c:0a:0d:e8:71:31:b4:31:13:8a:15:f6:5d:
         fc:a7:82:7b:4f:98:3d:95:e3:c6:b1:94:93:c9:1a:ae:3d:13:
         3e:e5:85:6c:c3:cb:48:08:b1:4e:e6:d4:b5:24:84:99:ab:ef:
         2d:1a:ac:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:15:27 2025 by rpki-client