Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
File:                     DRUACGUUibpRRLPxfr7M37lFZAs.mft (raw, json)
Hash identifier:          Mz1+Cf9DtUeUBevBeKd4xaEaT5wvlrQRta45YxVa60k=
Subject key identifier:   D2:CB:45:03:87:AF:6F:28:16:71:E2:59:CB:95:97:E5:CA:4F:EA:A2
Authority key identifier: 0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B
Certificate issuer:       /CN=F36FBB68AF/serialNumber=0D150008651489BA5144B3F17EBECCDFB945640B
Certificate serial:       0646
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
Manifest number:          0641
Signing time:             Mon 05 May 2025 02:10:10 +0000
Manifest this update:     Mon 05 May 2025 02:10:09 +0000
Manifest next update:     Wed 07 May 2025 02:10:09 +0000
Files and hashes:         1: DRUACGUUibpRRLPxfr7M37lFZAs.crl (hash: PEqxdHCE9LJTPHlNui5KPiV99qpLRhsGAVh81QdVD7U=)
                          2: C7A8EB58767411EBA6B0766EF8AEA228.roa (hash: GWda8GOSrIMVnjZRMSaotXSgFivJyI4WaCZCa+WMK0A=)
                          3: F3595C487D9E11EBB0CF4425F8AEA228.roa (hash: 13YoJMcN+dmv+b0H3AQ2M8ild3BcGQ6ON48XMKrEX5o=)
                          4: 89DF6E2A767711EBB4347171F8AEA228.roa (hash: RdloHLAK4gQJgsID0wnpZ6wew4Gn1opmX/BleJBr/IY=)
                          5: 1A0BC3C08B1A11EBA3BE1F71F8AEA228.roa (hash: CDicO0MqFxvbqD7XBDkV7o1kgQGQHL9fYvIZb+N7K30=)
                          6: A3872CCA767511EBAC7F576FF8AEA228.roa (hash: hmLqvNXuyAn9YBf05pAIuD+kdW8/EhKCnZYOAEKh1yU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 02:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1606 (0x646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBB68AF, serialNumber=0D150008651489BA5144B3F17EBECCDFB945640B
        Validity
            Not Before: May  5 02:10:09 2025 GMT
            Not After : May  7 02:10:09 2025 GMT
        Subject: CN=68181e02-a88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:82:93:79:5e:43:e0:2c:71:81:e1:90:48:
                    8c:1b:a3:45:a9:8c:db:f8:b2:62:f8:1d:cc:1e:1f:
                    b9:3b:1a:24:36:37:44:92:98:c7:5f:2a:f2:31:06:
                    49:dc:61:12:31:b5:1a:55:06:9f:69:a0:a9:1a:1a:
                    06:0f:55:fd:e3:53:10:76:0a:9c:1e:7e:f5:61:ea:
                    e4:f5:40:59:a5:69:31:df:d3:56:52:98:3f:e8:5d:
                    04:6f:0d:13:2f:5b:7b:ee:a9:71:3b:82:6f:b8:b0:
                    6a:a0:d6:29:9b:ba:2a:d3:59:82:bd:e1:0b:29:01:
                    0c:37:f5:27:fa:f8:9e:f0:8b:b3:5d:24:b5:9a:12:
                    23:95:6b:09:0f:6f:b9:ba:19:78:2a:88:ca:63:63:
                    7d:fc:5b:5d:fc:df:e6:d8:e8:d1:49:3b:73:c4:a4:
                    57:e0:58:1d:e5:b5:9f:ce:2a:be:e3:14:95:3d:28:
                    da:d8:0b:c1:ea:38:3c:a9:ab:0a:be:89:dd:8b:88:
                    11:55:34:46:c6:9a:51:df:4b:71:81:78:9c:1b:67:
                    0d:2b:31:75:24:cc:5d:fc:d7:bc:53:cb:df:ec:7b:
                    47:e2:86:ba:96:c3:c2:76:b9:f9:69:17:49:76:4c:
                    31:22:5e:6a:65:c3:31:90:98:5b:ab:55:3c:96:32:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CB:45:03:87:AF:6F:28:16:71:E2:59:CB:95:97:E5:CA:4F:EA:A2
            X509v3 Authority Key Identifier:
                keyid:0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f7:16:d1:d6:db:37:23:37:33:96:51:5e:cc:c1:8d:99:4b:
         cf:a4:a0:ed:56:f3:c0:b5:21:01:d8:8b:fb:7d:36:9b:9b:0e:
         3e:85:79:57:29:62:c0:69:fc:b6:ac:a3:61:7e:c6:ce:2a:a7:
         c9:71:da:a2:53:27:fb:22:b7:6d:ce:f1:fb:81:a2:07:3e:5e:
         e5:5e:e2:4c:6b:fc:e0:c5:07:e1:60:55:7a:9e:f2:50:d5:80:
         7d:f4:de:07:19:9c:54:54:2f:80:b6:da:1e:f7:a4:bb:f7:17:
         47:7e:56:31:88:41:bb:72:e8:87:0c:e2:c9:42:cf:51:16:2c:
         5e:5b:f0:02:ca:3a:5a:de:1e:27:a6:8e:38:05:08:eb:34:83:
         b3:10:24:3b:55:af:c4:04:a3:b9:e4:71:a9:19:5a:33:93:e6:
         72:b6:66:e2:0e:28:0d:d8:fc:14:d3:64:29:eb:4c:03:ff:58:
         13:ce:03:af:47:74:fb:a8:0b:01:8c:68:bf:54:35:7a:b1:8b:
         a6:b6:0f:e3:18:14:26:b4:7b:7f:73:d6:25:72:20:38:f2:82:
         0f:aa:4a:2e:b9:9b:8f:55:ab:2c:6b:00:44:70:da:63:6b:54:
         98:82:fa:19:52:83:10:7e:2a:9f:81:9e:d5:c6:e8:f9:e0:17:
         3d:43:1b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:26:09 2025 by rpki-client