Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
File:                     _wMoIAB4rDbwLXEB0DS3vll-oVg.mft (raw, json)
Hash identifier:          JccuQmJ9OsvfsJ3TY1QCIINgbT34uMq//JR8EJlkYRg=
Subject key identifier:   2D:32:76:21:B3:C0:E9:87:AA:47:B2:0A:7C:3B:B1:85:65:0A:F5:FE
Authority key identifier: FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
Certificate issuer:       /CN=F36EC712AF/serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Certificate serial:       0339
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
Manifest number:          0337
Signing time:             Sun 11 May 2025 03:34:05 +0000
Manifest this update:     Sun 11 May 2025 03:34:04 +0000
Manifest next update:     Tue 13 May 2025 03:34:04 +0000
Files and hashes:         1: _wMoIAB4rDbwLXEB0DS3vll-oVg.crl (hash: sSKyECc/s7IeFICljpwdOsklyTk4c9Oj6I2zehoO4wA=)
                          2: A1A5CE94563C11EE88D6F1324AD9E6FC.roa (hash: saKiwJ8KKnppgVVbmjEBrSXoNu9lhnFM5zhR+5yMxKU=)
                          3: 70135CE8563C11EE84A463324AD9E6FC.roa (hash: FAzApSbefpRaVqlqwSbC+qhl5egdnzLXqnPgFd8tD84=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC712AF, serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
        Validity
            Not Before: May 11 03:34:04 2025 GMT
            Not After : May 13 03:34:04 2025 GMT
        Subject: CN=68201aad-9230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:37:2d:22:28:0c:90:98:e8:7f:55:77:b9:
                    e5:d2:65:67:62:fc:2e:bf:e2:19:12:4e:94:25:2d:
                    72:16:56:01:e2:2a:5e:03:85:b9:b4:2b:04:e9:df:
                    a4:6e:0e:1a:b8:0f:d9:96:5a:ce:c2:8a:8a:41:90:
                    78:d8:a2:3d:01:ff:20:19:cf:df:2f:e6:49:0c:d8:
                    98:e7:af:60:6d:a3:b7:df:b7:fc:da:9b:b8:c9:a1:
                    35:09:db:71:d3:84:26:ed:3c:4e:85:48:1e:09:7b:
                    3a:7f:1b:a3:ca:1b:63:98:bb:ae:ae:df:e0:29:47:
                    76:1c:cf:f7:7d:6f:7c:e9:70:2e:65:55:98:76:ec:
                    bb:5e:65:e3:f4:79:ba:09:38:39:79:22:35:3e:f5:
                    4e:97:a0:03:b4:21:e9:d6:94:7e:53:a8:93:8b:e8:
                    af:71:92:fa:83:2e:70:a6:b4:91:4a:f5:0c:29:0e:
                    a4:8c:c5:75:cb:fd:8f:2f:a0:80:5a:6e:75:a7:94:
                    02:7f:ef:00:ff:58:d2:10:02:69:f5:64:0f:a3:31:
                    f3:0a:f5:00:df:37:f6:c0:03:e0:b2:2f:70:bf:6c:
                    43:db:b9:3f:a2:b7:a3:ce:97:47:90:f6:53:57:8d:
                    2d:3e:37:91:21:3e:b2:ca:ff:07:e6:78:83:5b:51:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:32:76:21:B3:C0:E9:87:AA:47:B2:0A:7C:3B:B1:85:65:0A:F5:FE
            X509v3 Authority Key Identifier:
                keyid:FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e6:d3:45:43:18:3c:84:f9:10:95:7e:2b:5e:e7:80:45:f7:
         3d:9e:1b:c9:31:67:50:62:b6:e3:5b:57:a6:75:1a:2f:78:8a:
         ce:90:fc:ad:1b:4f:b2:39:43:de:9e:e7:46:f1:b8:ec:dd:b4:
         0b:70:f4:55:df:8d:da:15:0b:ce:7f:ac:cb:ed:92:b9:3c:92:
         e5:f4:d4:0c:e0:26:92:e8:9f:7e:92:ce:07:ec:5b:bb:2c:cc:
         7c:e3:5f:33:91:91:18:20:80:29:38:9d:bf:db:29:b4:51:48:
         c0:ba:90:c6:88:39:44:9f:1f:69:61:13:a8:5d:b3:9e:69:fc:
         eb:c5:52:b0:54:c6:cd:be:a2:40:ac:32:66:78:08:1b:41:ae:
         7b:4d:1b:b3:a3:6f:34:2f:d0:79:fd:17:cc:43:fa:08:86:61:
         1e:31:3f:3d:1f:75:3b:cb:1d:c8:5a:08:ef:60:1e:cd:19:67:
         b3:e0:c9:66:d4:b8:4f:2f:77:51:10:99:df:83:b6:b3:5e:5b:
         a0:1a:01:47:42:f8:7b:d7:50:c8:a3:c0:39:6d:fd:11:ac:a4:
         09:82:5a:65:4a:68:99:a0:06:70:37:61:d3:bf:ee:33:d4:55:
         f9:17:b2:3e:72:08:5d:75:cd:fd:2e:7e:5a:63:79:9b:6a:b0:
         02:8c:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:48:26 2025 by rpki-client