Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
File:                     7GwN3it-gbOk5sxGye8OxVb-0zo.mft (raw, json)
Hash identifier:          pmYcoFL/9k4cKVpAm7DlmNIlAMFSOCu4SN34Ut/ax9o=
Subject key identifier:   20:5B:6B:02:42:57:A2:B5:17:15:23:43:55:DF:B1:F0:5B:16:4D:3E
Authority key identifier: EC:6C:0D:DE:2B:7E:81:B3:A4:E6:CC:46:C9:EF:0E:C5:56:FE:D3:3A
Certificate issuer:       /CN=F3620624AF/serialNumber=EC6C0DDE2B7E81B3A4E6CC46C9EF0EC556FED33A
Certificate serial:       0287
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7GwN3it-gbOk5sxGye8OxVb-0zo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
Manifest number:          0285
Signing time:             Mon 28 Apr 2025 04:01:26 +0000
Manifest this update:     Mon 28 Apr 2025 04:01:25 +0000
Manifest next update:     Wed 30 Apr 2025 04:01:25 +0000
Files and hashes:         1: 7GwN3it-gbOk5sxGye8OxVb-0zo.crl (hash: FQOGvtd5DLBVS7s3fdqCDeMjY6MJp10LsgWkkoahgU4=)
                          2: 44B6BBCA3C2F11EE828F83524AD9E6FC.roa (hash: KBkFV6KhcBCrxzqWrsJlJzC0Smcm+dsmEDXDCESEL9Q=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7GwN3it-gbOk5sxGye8OxVb-0zo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620624AF, serialNumber=EC6C0DDE2B7E81B3A4E6CC46C9EF0EC556FED33A
        Validity
            Not Before: Apr 28 04:01:25 2025 GMT
            Not After : Apr 30 04:01:25 2025 GMT
        Subject: CN=680efd96-b3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:32:86:5f:08:e8:2f:a0:8d:ea:1e:20:16:
                    aa:07:e7:1f:b4:a1:55:14:a4:a2:0b:dd:4c:a7:3c:
                    e9:ba:e6:15:b6:5b:32:39:6c:ba:69:76:97:86:f1:
                    a9:a8:b7:20:01:dc:dd:00:16:5c:59:22:af:41:8a:
                    5a:a4:0d:df:59:65:15:0b:16:fc:16:06:7a:c0:40:
                    66:03:fb:e6:29:a4:e0:b6:fb:3f:24:f1:b6:db:15:
                    bb:e0:da:18:1b:fa:d0:d1:ff:63:d0:c9:55:73:5b:
                    2c:ef:f4:6d:de:c2:e0:8e:77:c0:01:7d:e5:b9:b0:
                    93:e6:fa:9d:a4:62:de:bb:20:1a:b2:19:5a:62:6b:
                    a7:5c:4d:ff:95:e2:4c:df:42:cb:d6:36:54:88:aa:
                    86:80:ec:c7:ed:38:09:05:a8:90:d5:eb:2f:21:f7:
                    f7:ab:bb:f4:b0:3f:19:9a:9f:da:9f:1a:4b:b0:26:
                    e5:97:a2:3a:63:aa:60:dc:80:1a:e3:ab:8d:95:78:
                    53:b3:c9:1a:c5:44:1a:d2:e6:5c:8e:95:19:bf:23:
                    c3:13:22:52:e2:51:7b:e5:4c:2b:3a:75:2e:a1:4e:
                    cd:89:28:ca:f9:eb:90:c3:75:31:30:96:e2:3a:f6:
                    91:26:1c:17:44:c1:47:ce:27:65:28:12:ed:93:70:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5B:6B:02:42:57:A2:B5:17:15:23:43:55:DF:B1:F0:5B:16:4D:3E
            X509v3 Authority Key Identifier:
                keyid:EC:6C:0D:DE:2B:7E:81:B3:A4:E6:CC:46:C9:EF:0E:C5:56:FE:D3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7GwN3it-gbOk5sxGye8OxVb-0zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f5:0a:28:d7:a3:a1:c7:bb:ad:f9:38:86:6c:fc:51:c8:67:
         c8:47:35:9b:79:c7:d3:ff:a8:be:e9:0c:ac:ef:e9:af:56:e9:
         a1:36:8d:12:88:45:29:a4:f3:51:6e:b8:a6:03:de:7e:1d:17:
         1a:2f:10:8d:e1:0e:cc:1b:bd:50:d0:11:5c:57:34:e6:d7:66:
         7e:00:e9:42:44:ec:8b:f8:18:52:5a:0b:1e:f2:fd:43:74:ed:
         82:da:7e:2b:bc:7b:f7:19:1d:47:fd:bc:38:4a:06:b9:82:1e:
         e9:23:59:d1:4d:b1:2f:4b:e3:2c:a8:24:7d:bc:eb:e7:86:a8:
         cd:07:76:3b:5a:71:32:5e:d3:55:8a:ba:0c:7c:12:4f:4f:85:
         9d:1b:5e:1c:b3:ca:9b:b9:47:c7:1d:f7:6a:a6:61:fa:0b:b5:
         28:23:7d:89:aa:6e:43:9e:e2:e9:e2:07:79:04:e0:33:d3:8b:
         6f:f0:97:27:4d:0f:b8:39:f1:57:52:69:06:07:88:2a:01:c1:
         8f:bd:6c:47:91:51:27:63:00:ed:fb:41:ca:f6:c9:cf:7a:62:
         0b:70:48:06:e1:42:60:8b:24:de:0e:93:09:8e:b5:10:9a:e8:
         c2:04:58:ae:4d:63:ad:00:d9:f7:ca:ca:b7:a2:b9:08:3e:82:
         0a:9b:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----