Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File:                     62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier:          Z5TvjkxJsTO/b+Tuee0EXstW8uBtOv2Rv3Mp+cp0NCE=
Subject key identifier:   17:E3:5A:DB:AC:AB:0A:2F:26:43:76:60:E8:1E:24:5E:B2:4F:D5:4E
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer:       /CN=AfriNIC-Root-Certificate
Certificate serial:       54
Authority info access:    rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access:      rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number:          C1
Signing time:             Tue 22 Apr 2025 11:45:21 +0000
Manifest this update:     Tue 22 Apr 2025 11:45:20 +0000
Manifest next update:     Thu 29 May 2025 11:45:20 +0000
Files and hashes:         1: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
                          2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
                          3: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: YPfbNs5E6AhImm64a+vIX0zq6sglrg3fUpiPFtX/sN8=)
                          4: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
                          5: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
                          6: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 May 2025 11:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AfriNIC-Root-Certificate
        Validity
            Not Before: Apr 22 11:45:20 2025 GMT
            Not After : May 29 11:45:20 2025 GMT
        Subject: CN=68078150-8a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:52:e7:46:d7:9a:cb:df:0c:d2:da:54:04:
                    28:62:1a:fe:a3:31:27:6d:93:75:5d:c1:0d:ca:90:
                    02:25:54:50:d9:36:a0:85:74:41:9e:a6:79:8a:a4:
                    f4:89:98:29:cc:ab:8e:e9:e0:66:9d:bf:1d:0f:e7:
                    4e:d2:49:c8:95:12:a6:8b:b5:b9:fd:1a:27:61:33:
                    b6:a6:8e:e2:7f:56:99:f4:14:aa:37:be:cb:8c:51:
                    e3:02:a6:e1:98:94:f8:54:45:63:6a:6d:fb:4f:30:
                    ef:1b:34:09:2b:4b:96:de:db:25:23:a8:09:cf:c3:
                    9e:45:59:24:78:09:b5:66:b4:5f:cb:eb:68:7b:7f:
                    5e:e3:62:25:93:bb:97:07:de:47:16:03:24:dd:e8:
                    78:73:f0:f2:e6:3f:7c:f8:da:fa:f8:25:8b:05:04:
                    1f:09:82:83:2b:b5:15:5e:1a:7b:c6:5b:90:33:1f:
                    4f:95:19:9d:1d:f5:59:be:1b:7c:55:0d:44:55:c1:
                    42:fb:33:10:da:69:64:7b:28:bd:1c:4b:a7:83:d4:
                    21:60:57:2d:ce:7d:bd:6e:b7:f9:37:42:ff:a2:c3:
                    bf:a8:3d:cb:11:39:37:cf:11:e8:6b:f2:47:5b:e4:
                    c4:78:99:fb:85:8c:7a:e6:e7:d1:0e:22:48:9a:a5:
                    c9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E3:5A:DB:AC:AB:0A:2F:26:43:76:60:E8:1E:24:5E:B2:4F:D5:4E
            X509v3 Authority Key Identifier:
                keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:63:87:28:6e:33:32:4c:ae:4e:d9:23:13:4e:1c:96:7d:f3:
         3f:56:6c:44:1e:66:f7:af:23:6b:81:37:58:10:1d:6c:f6:8c:
         53:7e:35:ab:1a:db:06:e6:51:df:16:75:ef:8c:90:8a:31:eb:
         0f:89:76:47:e8:d2:0b:a4:b4:88:e9:28:86:5c:db:65:4d:81:
         e2:cc:b1:99:87:e3:86:45:83:52:cb:80:e5:83:47:c5:63:34:
         51:d1:a4:d8:83:48:c0:de:aa:4a:e9:6a:7b:a4:78:36:de:d1:
         51:c6:cb:78:39:92:1b:dc:67:0a:8c:e1:9c:d7:89:93:8f:e3:
         9c:52:5f:bf:95:26:c0:0b:07:4a:71:89:a9:4e:4a:1c:aa:ce:
         66:4c:e1:2d:20:af:6a:4a:d7:c0:72:ad:67:db:53:95:18:a8:
         6c:21:c0:8b:c5:74:f5:f8:89:b2:33:14:8b:99:c7:78:b7:19:
         ca:68:c5:29:9a:f1:74:16:eb:9e:35:63:11:ce:86:69:f5:ae:
         ff:ae:f8:f3:85:a5:60:ba:8a:33:2c:79:c2:05:52:68:11:02:
         52:28:ab:ef:6d:99:cc:31:16:b6:f8:dd:c4:61:09:cd:68:9f:
         ab:44:e5:5d:57:be:30:ab:2c:59:d7:e6:35:8e:74:75:ff:77:
         f0:80:ec:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:53:04 2025 by rpki-client on console.sobornost.net