Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
File:                     YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft (raw, json)
Hash identifier:          eg8AXZxnAb/VWhb7IqLXOyGE/pqRh+Hxj6UOa0zPkWM=
Subject key identifier:   83:DD:2E:D9:0A:5C:6C:9B:E4:0A:8B:3D:1D:B5:D6:7D:83:3C:1C:7E
Authority key identifier: 62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
Certificate issuer:       /CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Certificate serial:       05CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
Manifest number:          05C8
Signing time:             Sun 11 May 2025 02:21:21 +0000
Manifest this update:     Sun 11 May 2025 02:21:20 +0000
Manifest next update:     Tue 13 May 2025 02:21:20 +0000
Files and hashes:         1: YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl (hash: 5NfgnN70GHGbPlGnIvKfpHdwYYmO1Ccm/vVk6PioXzY=)
                          2: 2D2708F6CC2A11EB97CFD22AF8AEA228.roa (hash: XeVu0P9Nd9zY+QntGG6Z2ZTJviS6Sz4HHhq7O1QS9sw=)
                          3: C54E19D822A311EC90664B16D8A014CE.roa (hash: S4ZF6FWOA8WU+IlkBebTTGuItZqjsyF/6HiGxB7bOuM=)
                          4: 954F64EAFFC811ED8FCE30624AD9E6FC.roa (hash: dfhGabIAAHxuN6e18OQhuqwD7Wt4GKbIL/xRCP/tZwE=)
                          5: 5561B7F8DAED11ECA54A8396F1222468.roa (hash: vLjSdhCmLer54968GqLaX3fP0+rzPHJ4Ex+Bjc7yIXY=)
                          6: BB347E28DAEB11EC81FC9691F1222468.roa (hash: 6gsgx7DxEzqoXkYw7Xs1C83YWv7zKqmZvViXYneFQZg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486 (0x5ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FAF9BAF, serialNumber=627533ECBAB7D89BD9570B20054666053669A759
        Validity
            Not Before: May 11 02:21:20 2025 GMT
            Not After : May 13 02:21:20 2025 GMT
        Subject: CN=682009a0-133f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:23:c7:d1:6d:af:39:75:8b:34:b3:9a:7d:91:
                    b8:0e:e0:3e:e6:0d:46:eb:08:19:b3:cb:9d:47:0d:
                    7c:9c:17:85:a3:2b:6e:92:ca:56:7e:b4:dc:35:07:
                    df:ed:be:14:d7:8a:6b:d4:f1:ff:e0:21:1d:13:0f:
                    bb:1b:22:04:bb:3b:f9:a2:30:3a:34:a8:aa:fc:df:
                    4c:48:83:d5:e2:31:ab:10:2e:5e:ed:a4:9c:cb:e6:
                    0b:c4:61:44:c1:56:a6:da:87:48:1d:73:c4:66:fb:
                    a3:15:4c:c7:d8:d5:cc:3b:ac:9a:5a:23:94:07:21:
                    c0:5d:ea:71:df:36:10:19:a2:0f:bc:a1:5f:93:af:
                    bb:7f:7e:1d:09:00:62:55:f0:c8:26:4c:44:e4:e3:
                    de:87:99:b2:71:4a:4c:e6:0a:eb:97:76:8f:ac:26:
                    fe:27:8c:d8:db:ed:07:dd:d2:bc:81:48:c4:b7:92:
                    46:4b:15:b7:a5:fe:3e:22:c8:a5:cf:60:46:ad:b6:
                    ce:47:ef:dc:1f:96:e8:04:3a:a8:29:83:2f:02:2e:
                    0c:d7:a4:c2:da:17:18:b3:07:72:44:b3:9b:90:ae:
                    c3:c7:c0:99:a7:7b:a7:5a:e3:bd:3c:27:99:07:aa:
                    85:bd:8e:b3:8c:e3:57:f4:d9:0b:cf:8d:f3:5a:44:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DD:2E:D9:0A:5C:6C:9B:E4:0A:8B:3D:1D:B5:D6:7D:83:3C:1C:7E
            X509v3 Authority Key Identifier:
                keyid:62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:a9:5e:5f:5c:b6:7b:d2:c4:44:5f:51:3b:be:e0:bb:fe:
         21:10:04:d9:fc:0a:24:ad:c4:b3:ea:ba:23:76:8d:7b:63:6e:
         28:52:f8:29:04:8f:5b:da:a9:15:98:b3:09:5c:36:50:19:f8:
         25:9a:a1:49:c5:c4:a0:43:e0:f8:83:a2:75:03:52:53:97:f8:
         5b:6c:6c:f7:82:47:13:50:91:b7:a4:8e:40:5e:83:0b:b6:9f:
         d8:67:7d:ad:2d:a0:b5:3c:a9:26:1e:d5:0f:9f:c1:ae:a3:5d:
         df:2d:9d:de:87:e8:71:24:d6:1a:a4:2b:f5:b2:84:8f:fd:a5:
         cc:97:d6:51:6f:97:64:97:0b:c6:f5:ff:3b:55:d3:18:57:0d:
         6a:6b:ed:03:73:39:f3:f5:ce:35:51:f9:10:60:a7:72:9e:5f:
         da:fe:5d:5f:d3:d1:8a:64:08:19:a2:64:be:c7:bb:52:ed:8d:
         7a:dc:50:c9:52:f8:0a:e2:70:83:80:84:4a:68:62:15:e5:e9:
         ca:32:dc:8b:1d:59:34:2e:83:3f:44:fe:98:3b:40:ff:f6:b3:
         89:7f:3a:10:93:42:8c:b4:cb:73:75:78:72:59:0a:2b:31:25:
         66:37:f5:c7:a7:65:b1:22:66:4f:40:11:fe:ff:26:42:85:dd:
         03:61:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:50:02 2025 by rpki-client