Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
File:                     2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft (raw, json)
Hash identifier:          wRG8NXXL1hB7jlIHegnsMl1jRhthursdHYRvGriRPFk=
Subject key identifier:   1B:E6:46:07:32:C0:D7:D4:EB:FA:70:65:F2:E1:C7:E1:8B:91:14:CA
Authority key identifier: D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7
Certificate issuer:       /CN=F3695E06AF/serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
Certificate serial:       05C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
Manifest number:          05C2
Signing time:             Fri 25 Apr 2025 02:19:59 +0000
Manifest this update:     Fri 25 Apr 2025 02:19:58 +0000
Manifest next update:     Sun 27 Apr 2025 02:19:58 +0000
Files and hashes:         1: 2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl (hash: qHYn2LB0IeIXCta7A4QcnzCMcI1hOmOJTmUGq6VF2jM=)
                          2: 6B702572C5B611EB874E825FF8AEA228.roa (hash: TuOEHMyp7ZkGMu80eO/vkZfJHkaFNIwGb2ogLtbprVA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695E06AF, serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
        Validity
            Not Before: Apr 25 02:19:58 2025 GMT
            Not After : Apr 27 02:19:58 2025 GMT
        Subject: CN=680af14f-4745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:18:1f:50:03:85:57:34:b3:3a:c9:7c:29:
                    f4:9e:60:6f:27:48:84:23:82:5e:58:b8:26:d5:42:
                    d5:8f:97:51:93:16:a1:1f:ea:db:c6:13:07:0f:d2:
                    62:28:44:d5:ac:ca:41:33:75:cc:ed:b1:1f:65:a8:
                    dd:bc:21:c3:54:96:dd:fc:61:44:1d:b9:40:32:0b:
                    2b:a8:25:ce:b9:4b:5e:82:54:c2:8e:0d:f2:fa:86:
                    35:ab:02:b7:6a:95:83:44:9f:7a:60:03:2e:7a:eb:
                    70:81:e5:3f:fc:06:e5:e7:32:6a:dd:44:6e:70:ce:
                    d9:2e:52:bc:b1:00:1b:20:33:ab:2e:17:4d:fc:7e:
                    5b:32:ef:19:e6:a9:f8:93:05:c3:33:88:7e:c3:a6:
                    51:78:3c:e0:2f:8f:e2:99:e8:d8:f7:ec:c0:5b:83:
                    68:49:aa:f7:b0:20:33:e8:fd:46:30:10:a8:30:75:
                    7b:71:9e:74:06:6d:20:7f:0e:8c:51:69:26:e0:c4:
                    8a:66:0b:a7:04:c6:14:a1:ea:39:e1:91:7b:48:f3:
                    5b:f1:64:0e:38:c5:5e:91:ab:98:5c:12:f9:8c:59:
                    9d:f0:b5:b1:93:23:0c:d7:c9:98:23:dd:44:72:b3:
                    2a:02:94:92:f0:68:cb:cc:8a:0c:25:f2:2c:ce:25:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E6:46:07:32:C0:D7:D4:EB:FA:70:65:F2:E1:C7:E1:8B:91:14:CA
            X509v3 Authority Key Identifier:
                keyid:D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:42:fd:50:43:2c:50:40:cf:ca:ce:36:f0:e9:16:58:2c:
         7d:07:c4:90:84:6e:84:20:8e:65:b7:3c:2c:5d:b2:03:82:d1:
         92:64:79:11:59:ab:86:38:ea:24:09:88:94:4d:75:82:50:fe:
         97:b7:1f:5f:95:77:fe:51:3b:d2:0c:5b:63:3c:d6:e7:27:5b:
         4e:4b:31:e9:17:48:b6:4f:a2:30:7e:8d:60:a2:6d:1c:25:f8:
         e7:72:8c:03:40:46:02:cc:1c:7e:f0:4f:69:1f:74:f9:38:31:
         91:a0:9b:9f:55:3d:f7:bf:69:2e:0f:ef:5c:7d:3d:e5:56:e0:
         94:d3:26:6a:02:96:dc:41:de:ac:09:19:4f:26:57:7c:fe:17:
         b7:92:ee:94:51:5d:ea:07:87:78:53:0a:0c:7c:91:7b:95:90:
         59:fc:b0:2e:5d:85:44:f0:8c:bb:49:ba:ad:f9:95:7a:12:44:
         06:78:1e:14:99:95:a7:33:a9:6c:6d:5b:dc:42:e8:e6:d3:91:
         4a:9b:e3:81:1e:79:70:2f:ce:fa:3b:e4:a2:47:08:7c:b9:c5:
         25:05:cb:5a:06:d1:86:6c:1a:a7:81:7c:28:c8:76:f2:61:56:
         18:56:d1:cd:ae:c9:ea:65:fd:b3:b3:0b:87:0a:3c:b3:f1:08:
         e6:7c:05:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----