Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
File:                     9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json)
Hash identifier:          fa86dO+XOsQ4JjCp6WXv9I7u/PJhDSyQdvpVz5RIkQU=
Subject key identifier:   3B:9F:80:BF:8C:F5:4F:39:16:72:86:03:17:F3:3A:89:56:90:DF:EE
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       0411
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
Manifest number:          03F4
Signing time:             Sun 11 May 2025 03:15:54 +0000
Manifest this update:     Sun 11 May 2025 03:15:53 +0000
Manifest next update:     Tue 13 May 2025 03:15:53 +0000
Files and hashes:         1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: /3zR+fx2jfRfZ0b3sAje3Z8cYZEufQcSgpBCv0/q+Bw=)
                          2: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=)
                          3: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=)
                          4: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=)
                          5: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=)
                          6: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=)
                          7: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=)
                          8: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=)
                          9: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=)
                          10: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=)
                          11: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=)
                          12: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=)
                          13: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=)
                          14: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=)
                          15: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=)
                          16: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=)
                          17: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=)
                          18: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=)
                          19: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
        Validity
            Not Before: May 11 03:15:53 2025 GMT
            Not After : May 13 03:15:53 2025 GMT
        Subject: CN=6820166a-020e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:65:06:62:89:d5:26:f3:49:0c:24:37:a5:
                    a9:39:a5:4b:bc:a6:d2:59:a7:5b:78:fa:1b:d3:27:
                    9d:63:f1:d1:69:42:c7:f3:91:05:9d:c9:dc:25:c9:
                    2c:fd:5e:77:81:0b:c6:92:f6:9e:2e:9b:30:aa:3b:
                    8a:38:1f:60:3c:53:e8:91:cc:3a:f7:af:ac:a9:52:
                    e0:27:8c:3f:de:77:82:d7:a3:fd:10:16:08:cd:21:
                    43:82:f1:29:1b:60:f6:2c:17:69:ff:fa:2f:10:bf:
                    47:28:8d:49:d4:25:d1:cf:94:58:7e:b9:99:92:03:
                    0c:2f:33:3e:0c:6d:0d:ce:f7:d7:a8:88:78:d9:e7:
                    e9:00:93:59:0d:b8:0c:5a:9c:fe:47:7d:48:8b:1e:
                    a3:26:50:b3:60:70:b5:37:d5:38:2e:81:76:c7:62:
                    31:13:92:6c:bd:b6:bf:af:ad:29:bc:25:6a:cf:30:
                    46:46:f1:81:da:e2:b7:8b:af:0b:65:1d:53:0a:5f:
                    15:08:cf:b9:ff:d7:99:18:d2:1b:b1:71:27:98:d8:
                    f8:c1:74:b9:18:b2:92:80:c7:52:de:6c:95:80:c1:
                    a8:f4:24:02:c6:00:2e:a4:35:03:08:46:ed:a3:93:
                    02:05:ca:da:9a:56:ac:9a:38:23:d5:ab:d5:10:1c:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9F:80:BF:8C:F5:4F:39:16:72:86:03:17:F3:3A:89:56:90:DF:EE
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:d7:e9:42:1a:44:26:d6:bd:4c:95:45:cd:ae:c8:22:11:
         0a:8d:02:b1:61:42:84:c2:99:e2:e8:01:db:78:ba:0c:f8:63:
         46:9b:08:11:4b:68:d5:60:6b:c5:f3:0b:dd:99:f8:dc:6f:87:
         87:c0:5f:c3:b6:c2:6e:06:bf:8e:3e:e2:cd:17:f8:9c:39:a2:
         28:d9:12:1b:65:39:1e:0f:3e:7b:f7:66:7c:51:4b:d9:d8:f2:
         42:bb:56:1d:b2:db:62:06:a5:57:91:e7:df:1f:bd:70:f6:7e:
         41:a0:73:16:de:f3:9b:1b:83:a4:67:6a:57:db:31:67:3c:65:
         f8:34:43:e6:8f:b0:76:9d:cf:48:d4:6e:a0:2a:a8:2e:17:e0:
         9b:30:ce:af:de:a8:c4:ab:dc:e2:a4:26:73:0c:c2:d8:ec:09:
         b8:59:8c:ee:84:f1:58:69:71:48:64:5d:66:32:6e:d6:62:cf:
         f5:87:2c:5f:3c:1a:51:7f:3a:27:8a:8c:ad:1d:cf:ae:b4:ac:
         a7:cd:09:2d:af:ed:91:5e:ca:3c:17:6a:9d:c1:03:b8:03:4e:
         d8:4b:99:00:9b:36:94:ba:15:72:82:a5:9c:35:2b:76:93:73:
         03:b3:ff:57:7b:45:ca:2e:cb:cd:2b:3b:ab:99:11:7a:42:f2:
         8e:93:18:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:21:02 2025 by rpki-client