Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
File:                     2KoAqxWVGabWVnDenlmLc99qssE.mft (raw, json)
Hash identifier:          jisq8DQpJqTZDUKNqtp0ebOO4zt2S9ZlhlkzesEIVAI=
Subject key identifier:   5F:78:6F:2A:92:37:D7:FD:A7:0C:12:03:74:12:AF:83:A8:69:8A:A2
Authority key identifier: D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
Certificate issuer:       /CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Certificate serial:       B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
Manifest number:          B0
Signing time:             Tue 06 May 2025 05:04:21 +0000
Manifest this update:     Tue 06 May 2025 05:04:20 +0000
Manifest next update:     Thu 08 May 2025 05:04:20 +0000
Files and hashes:         1: 2KoAqxWVGabWVnDenlmLc99qssE.crl (hash: xbT86MZqIwZd7GIYHpN3hiMKW9Bw1YQvLHPN+VJO4p0=)
                          2: 678B7098E48D11EFB0502A6E762E951A.roa (hash: jonAE1XfJY/5m4j4uM2w3HbC11SG5Uy6EkEVqN0G0Cw=)
                          3: 8612CEC8A8A911EFB887DDA0762E951A.roa (hash: GTU21iNyjdIeL6dIGxKDjmWXXd/5ZvujPdaZWrQ4o/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 May 2025 00:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F273DAF, serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
        Validity
            Not Before: May  6 05:04:20 2025 GMT
            Not After : May  8 05:04:20 2025 GMT
        Subject: CN=68199855-d611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:69:95:d9:17:17:76:e3:91:02:73:78:b7:
                    9f:9f:05:3b:5b:13:d9:0e:97:fd:29:8a:ee:66:00:
                    27:50:69:85:ae:7b:b0:6a:5b:59:a1:c3:69:9f:eb:
                    ce:05:af:bc:a7:ce:41:a7:4b:d8:1a:51:41:7e:53:
                    72:13:8a:62:9a:f6:62:63:db:a9:7b:6f:ff:96:bb:
                    93:58:6f:3c:2d:84:1a:9c:21:8d:d5:3c:fe:9e:62:
                    a4:fa:cf:f1:6a:16:e4:55:2c:8a:dc:c1:86:76:9e:
                    36:4a:5f:b2:09:c4:6b:b6:f5:20:10:de:40:08:e5:
                    5e:16:fd:33:82:88:15:1d:b0:7e:95:c6:71:b9:ed:
                    9d:90:21:e2:2d:3b:b8:eb:a4:d8:8a:5f:ce:c1:23:
                    f7:ef:a9:dc:bd:6c:dd:bd:25:d0:c9:30:b1:42:bd:
                    a7:f9:18:d3:f3:09:b7:e7:8b:2f:66:7d:59:e5:a7:
                    8c:d8:1f:29:a6:11:e7:43:dd:1a:c2:ac:d5:c0:46:
                    28:24:73:c5:25:52:d3:74:cf:39:75:7d:dd:e9:9c:
                    43:20:a2:c4:e7:a2:f4:46:08:10:67:4b:5d:00:6f:
                    dd:0d:2d:27:d0:49:ff:dc:f7:46:26:b6:cb:8a:ab:
                    1e:be:d7:25:3e:67:b4:92:ca:82:01:90:53:4e:f8:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:78:6F:2A:92:37:D7:FD:A7:0C:12:03:74:12:AF:83:A8:69:8A:A2
            X509v3 Authority Key Identifier:
                keyid:D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:16:fc:d1:29:62:00:dd:7d:f8:98:e8:a3:0e:2f:bf:79:65:
         9f:81:ab:af:1d:7d:83:15:15:df:1e:67:ae:9a:f6:89:14:5c:
         e7:d9:d5:de:41:30:55:fc:ac:ef:91:a9:9c:b2:9a:50:c6:fc:
         52:fa:9e:32:e0:67:fb:26:04:24:d0:22:80:81:42:3d:b9:26:
         27:e5:7d:b0:b6:61:65:9b:5b:a9:52:1f:a7:8f:90:c4:c9:76:
         1c:81:53:a5:46:25:ca:e4:d1:1a:7c:b5:0e:7e:65:c1:c9:16:
         01:bf:96:dc:02:6d:11:fc:f2:29:0b:5e:a4:1b:63:0f:00:2c:
         5f:21:3f:fb:39:e5:7a:ef:bb:86:48:59:88:36:a8:96:fb:2b:
         d1:0a:c6:59:31:d0:a8:ba:e6:68:4e:9f:b6:28:44:8a:67:0c:
         a6:a3:10:5b:37:33:b0:f7:34:c1:61:13:3c:77:d2:b2:a6:da:
         f0:4c:0e:2b:32:03:e6:16:b1:b9:40:6a:7d:ad:04:04:e1:cb:
         d6:f9:b8:83:45:d6:e9:87:c9:2e:3c:26:a9:90:0a:b5:81:ca:
         76:77:91:d1:8a:76:26:98:da:9f:67:89:87:64:d8:2f:78:3e:
         64:5a:6a:01:4c:0f:77:0a:7c:55:da:3a:8d:f2:80:09:f1:04:
         1e:d5:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:17:58 2025 by rpki-client