Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
File:                     HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft (raw, json)
Hash identifier:          E1dOaSSI1icCzP126HfgA+KhKuXzc5T5ADzBdecoTb0=
Subject key identifier:   07:AA:88:0A:C2:0D:48:59:4F:79:4B:BA:B4:24:0C:0E:0F:97:3F:4C
Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
Certificate issuer:       /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Certificate serial:       02A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
Manifest number:          02A2
Signing time:             Mon 12 May 2025 03:55:23 +0000
Manifest this update:     Mon 12 May 2025 03:55:22 +0000
Manifest next update:     Wed 14 May 2025 03:55:22 +0000
Files and hashes:         1: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl (hash: jKyK2t8/iuALTMqUeqWYzfRPmJJ7ln8agcY3Bete/34=)
                          2: 146B2AA8374F11EE8C7415794AD9E6FC.roa (hash: ctcRoXeX+WjrHPxrmzGzA7un7tUh7u0StB40cjvt+SU=)
                          3: F145B322374E11EE8F129E784AD9E6FC.roa (hash: MBk8OyWgetmt/dAZbGXNZYY9i8llqzp1g5jqzySwP50=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F143FAF, serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
        Validity
            Not Before: May 12 03:55:22 2025 GMT
            Not After : May 14 03:55:22 2025 GMT
        Subject: CN=6821712b-fac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:da:74:1d:5f:79:08:59:b7:51:3e:a7:23:
                    9e:2f:60:f4:2a:c2:e8:a0:ba:57:39:35:5a:95:81:
                    11:c3:80:ab:af:1e:37:3e:08:af:45:c5:a6:c4:ca:
                    31:b6:2e:7e:8b:1c:b1:97:c9:40:aa:98:88:6f:1b:
                    ac:ea:78:5f:36:1c:18:fb:20:81:80:10:31:10:43:
                    7b:c4:56:f6:7c:67:a6:d2:41:ed:cf:0b:f6:0b:53:
                    db:3c:1a:93:4e:9e:53:da:6e:27:0e:96:b1:81:f2:
                    43:69:b2:52:14:8b:ab:4e:ab:28:e2:75:59:f0:b4:
                    98:c8:2e:d7:5a:b7:9f:90:4b:4d:76:f5:b3:92:44:
                    0f:d6:95:f3:90:b8:36:79:3e:74:42:54:c8:14:98:
                    1e:4b:36:4a:86:bc:7e:07:41:8b:06:77:52:ec:2b:
                    ea:77:7d:a9:79:b4:fa:40:ef:91:4d:ae:c0:b7:b1:
                    f7:dd:0a:ef:40:8a:ae:c7:37:2b:cb:14:60:6c:d6:
                    cf:28:fd:2f:49:82:af:27:23:a7:72:28:d3:f8:c6:
                    28:3d:31:e8:3a:1a:b7:b6:b3:ed:64:27:b2:75:8c:
                    a6:1c:a1:b1:2c:60:a1:40:f4:24:1b:6b:a2:b0:db:
                    b6:08:84:b1:51:8d:e0:4e:04:57:b4:3e:4d:5c:cb:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AA:88:0A:C2:0D:48:59:4F:79:4B:BA:B4:24:0C:0E:0F:97:3F:4C
            X509v3 Authority Key Identifier:
                keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:73:57:b4:56:50:57:15:e1:83:6a:40:4d:96:1b:95:78:1b:
         f8:d4:bd:b3:6c:64:4f:3f:f6:1f:b3:9e:f2:56:7b:e1:1b:bb:
         e3:68:42:de:71:20:ed:60:74:eb:b6:89:68:66:7e:d4:38:b9:
         ed:96:eb:c0:fd:21:23:f9:1e:9f:53:6b:70:c3:b5:57:a3:6e:
         88:f3:1a:cd:2b:e0:ac:5a:a2:d4:75:e7:29:3a:15:6d:f3:35:
         9c:df:99:11:04:76:ee:ab:15:d6:a5:c9:fb:08:f1:21:ad:f2:
         1d:94:b6:7b:1a:99:0d:55:83:89:04:70:81:55:7b:e1:48:dd:
         36:10:ee:00:0c:74:68:28:cf:b1:ac:a9:de:1f:bc:7d:f8:6e:
         11:cc:75:d1:6f:90:7c:72:c2:29:30:2f:ff:d4:8a:b1:e9:c0:
         4d:89:3b:74:c2:32:2f:50:d9:21:46:31:1c:e0:de:6b:9a:ec:
         c8:fc:2e:a6:d8:c0:d6:29:5a:74:e5:f8:80:8e:c5:30:56:d5:
         e4:6d:83:89:31:e4:e7:8c:8a:3c:cb:bb:23:d5:cb:96:f8:b8:
         d6:c0:ae:a4:1a:6f:47:3a:4d:a6:c7:1c:1c:a8:4d:0a:47:5e:
         09:ce:f0:c8:85:c6:de:06:62:dc:f8:6e:24:65:48:d0:7c:54:
         fc:02:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:08:30 2025 by rpki-client