Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
File:                     xel4rPl9qfSdxLKEr_AldPEDGH8.mft (raw, json)
Hash identifier:          mSpuDKHAN//cD1h8m+M6d5dk16sV1AbdBub8CcLdLLQ=
Subject key identifier:   A3:E2:52:17:18:10:8B:B1:0B:12:78:AB:89:8D:CA:D4:36:AA:36:41
Authority key identifier: C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F
Certificate issuer:       /CN=F36E6AB8AF/serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
Certificate serial:       05A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
Manifest number:          05A2
Signing time:             Fri 25 Jul 2025 02:40:51 +0000
Manifest this update:     Fri 25 Jul 2025 02:40:50 +0000
Manifest next update:     Sun 27 Jul 2025 02:40:50 +0000
Files and hashes:         1: xel4rPl9qfSdxLKEr_AldPEDGH8.crl (hash: M+wmZFtSJgYGXPR3KPfKeFRPzmdDcmgV3epy4nnAD5Y=)
                          2: 1C9E519E1BDD11ECA0560768D8A014CE.roa (hash: FU98lPpwZTQalULqUls0soaKI9pnCPgBWGxAh0GDG/g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Jul 2025 00:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6AB8AF, serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
        Validity
            Not Before: Jul 25 02:40:50 2025 GMT
            Not After : Jul 27 02:40:50 2025 GMT
        Subject: CN=6882eeb3-6a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:06:e0:18:bb:5b:3b:c5:d4:6e:c5:e8:18:a3:
                    11:2e:48:60:e7:f0:91:d7:ff:81:64:ae:06:8b:fb:
                    a1:71:cc:64:00:68:52:76:2e:21:5c:f9:bb:16:35:
                    d6:81:4f:49:0c:0b:19:6a:bc:20:af:2d:6a:15:c3:
                    d7:4f:00:87:f7:dd:4d:ff:5b:9c:d7:91:6e:ad:e3:
                    09:92:7d:b5:81:c2:2d:20:d7:da:a1:f0:65:0d:2d:
                    20:7c:bf:ec:a1:6a:a9:bb:53:cc:7b:12:69:ea:da:
                    45:2e:1a:3b:2a:d9:8f:b1:73:42:aa:15:e7:6d:4f:
                    36:1e:8f:01:13:56:ce:9a:3d:46:23:2e:a3:d2:3c:
                    7e:22:21:5d:1a:87:6a:f0:ac:4e:a0:b5:d4:59:78:
                    a3:a8:36:c3:3a:9d:af:d1:cc:32:9c:18:40:63:24:
                    99:39:79:86:db:3a:9c:58:34:52:f6:d4:83:d1:6a:
                    eb:ef:0b:f9:bf:46:53:a0:94:b7:25:77:c8:2e:cf:
                    99:e0:e2:e6:92:0e:e6:f8:fa:86:24:67:38:ef:bd:
                    e1:f1:fc:30:ea:11:d8:1e:97:57:58:c2:1d:ae:2c:
                    75:04:66:db:a5:47:68:b4:15:15:3d:ee:46:4c:a2:
                    5e:31:42:c7:2e:d2:1c:c5:3e:d1:7c:8a:f7:0a:16:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E2:52:17:18:10:8B:B1:0B:12:78:AB:89:8D:CA:D4:36:AA:36:41
            X509v3 Authority Key Identifier:
                keyid:C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d8:a8:ba:05:f8:a3:b8:38:9e:41:fc:9e:97:c1:a3:1f:49:
         91:38:23:18:6a:1e:05:2a:cf:d4:d8:90:5d:07:51:ff:a2:4d:
         37:c0:54:1a:13:12:69:52:26:5c:e0:b9:f8:df:f1:27:c5:5a:
         a9:4d:90:8c:27:d2:c5:e0:fd:54:a8:78:32:59:6e:dd:a7:a3:
         92:61:ce:05:63:4f:71:51:c2:5c:a9:91:35:e8:06:04:9e:60:
         91:d6:16:0a:29:73:3a:92:a0:1e:3d:a6:63:e5:ee:7c:fc:bf:
         12:37:0a:d1:b0:dc:89:4a:9c:7d:c6:d4:30:20:83:18:09:90:
         1e:6d:bb:34:81:8e:25:d3:cc:a9:d0:30:09:79:e4:d0:b7:11:
         79:96:a9:2c:53:7f:2e:b0:60:83:60:e1:c3:aa:35:01:7e:1b:
         29:10:72:41:d4:e5:88:92:f8:48:96:af:00:ec:89:09:47:78:
         a6:dd:38:41:62:04:4e:ab:62:9e:ef:7b:ba:c9:7d:46:25:b8:
         d6:bf:31:ef:9c:94:b4:8b:15:7b:b0:23:22:8e:12:35:a6:41:
         d0:c9:5d:7f:99:b0:a2:39:2f:9c:ba:42:b8:fd:fa:09:8a:b5:
         53:d2:2f:40:50:fe:69:10:2a:46:16:60:e4:44:eb:b5:ba:e9:
         9b:8c:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:47:33 2025 by rpki-client