Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File:                     KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier:          1QEkQNg85h+yRNTQI7OYmJOhsgL5uYNQlEhDb5BYdhU=
Subject key identifier:   B8:CB:1D:C0:CC:7C:5D:66:2F:AB:90:BE:0C:6F:74:4C:F5:E8:21:22
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer:       /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial:       0472
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number:          046A
Signing time:             Sun 11 May 2025 02:56:43 +0000
Manifest this update:     Sun 11 May 2025 02:56:42 +0000
Manifest next update:     Tue 13 May 2025 02:56:42 +0000
Files and hashes:         1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: AkuoAcmV6OAgsjgbZCE8Dm29MdOzRzQS5yD3pe/JpRI=)
                          2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
                          3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
                          4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
                          5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
                          6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
        Validity
            Not Before: May 11 02:56:42 2025 GMT
            Not After : May 13 02:56:42 2025 GMT
        Subject: CN=682011eb-d6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:60:e7:cf:f5:6e:77:9b:52:37:bc:a1:a8:d6:
                    9f:9c:7a:1b:90:17:96:fa:c7:c8:3a:90:cc:31:2b:
                    54:27:e0:39:33:f2:fc:66:56:b2:61:f8:f3:87:91:
                    d0:3e:5e:33:0c:c2:53:a8:33:a0:02:36:df:d9:86:
                    c5:73:8c:d6:11:97:18:bb:d8:a5:8d:10:3a:b1:fe:
                    e3:06:46:75:83:b8:b8:ff:39:42:e1:af:93:71:5d:
                    ed:e7:43:ce:e7:69:e8:1d:e3:95:53:2b:04:6b:bc:
                    ee:af:bb:78:5d:3a:31:c7:9a:a2:34:84:ea:c3:c3:
                    5e:21:83:dc:c2:3e:e4:84:c1:d9:9b:ec:2e:cd:15:
                    81:3e:b9:79:22:37:9d:8d:b1:4c:3d:99:a9:70:1f:
                    17:71:99:52:8d:7a:c2:4f:e1:e6:ac:b5:9b:33:07:
                    68:e5:a3:14:06:9c:3f:04:b0:cb:9a:b4:ad:8a:0a:
                    43:f5:fb:18:72:aa:fd:a3:65:85:62:34:7c:e5:3c:
                    c0:a3:a2:5b:03:c4:f2:09:be:7d:40:3d:1a:30:30:
                    eb:3e:46:9b:da:af:a6:39:c6:7a:55:5b:82:93:44:
                    bd:e5:f3:aa:75:c7:79:b1:e3:c8:fc:53:52:ed:4e:
                    f6:af:e7:56:dc:97:d2:9e:fe:b8:57:99:0c:a5:3d:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CB:1D:C0:CC:7C:5D:66:2F:AB:90:BE:0C:6F:74:4C:F5:E8:21:22
            X509v3 Authority Key Identifier:
                keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c8:ac:5b:3b:40:45:8d:81:20:22:c9:dc:b2:0e:da:6c:bb:
         33:08:60:3a:95:ae:4e:5e:d1:6f:2f:08:ee:78:c8:e1:33:50:
         0f:4c:38:70:82:03:46:db:f2:4f:d7:a7:d0:91:03:b6:24:fa:
         1a:84:31:6b:4c:d5:42:7d:0d:7b:2c:63:0c:d2:2e:ee:e7:8e:
         2e:05:a6:e5:13:d2:f8:d0:e8:57:cf:80:84:b4:7c:09:68:6d:
         3a:ab:b6:f9:d2:9b:e9:14:07:f1:5d:a1:4a:0d:71:93:03:3e:
         d4:00:a8:03:a7:1a:a7:9b:f6:e0:83:28:c4:fd:d0:7c:f2:66:
         5f:ba:1f:bd:7b:22:92:71:06:0a:93:19:52:ae:2c:e3:ad:b9:
         93:a2:c4:01:ed:cd:f6:cb:23:5d:60:a1:c5:84:83:66:c6:bd:
         28:17:d1:39:8a:e5:83:1c:4d:2c:d5:17:e9:d0:39:92:9c:88:
         22:0f:5d:a5:3d:72:ba:e5:ac:e9:ab:ff:23:c1:0e:71:00:1c:
         b4:e2:e4:95:f2:d2:47:b5:e9:1f:4d:c4:7a:0c:94:f8:6c:59:
         08:22:f9:a3:37:36:84:65:cb:7f:66:e0:ad:b9:16:6c:c5:ab:
         f4:d6:f8:22:76:33:1f:23:ed:ba:b6:58:39:6e:2d:6f:67:29:
         7c:bb:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:51:20 2025 by rpki-client