Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
File:                     0RDaMi-Zhc--woypzoUgREhmujc.mft (raw, json)
Hash identifier:          TN4PSN4vQ5I0UcRiz0h1Is2JuhXmlRfDDB3LqVhSvU8=
Subject key identifier:   D3:0F:30:B7:2F:AD:67:B5:F4:1A:89:8F:82:70:37:FF:86:6B:E7:52
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       0311
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
Manifest number:          0309
Signing time:             Fri 06 Jun 2025 03:43:13 +0000
Manifest this update:     Fri 06 Jun 2025 03:43:12 +0000
Manifest next update:     Sun 08 Jun 2025 03:43:12 +0000
Files and hashes:         1: 0RDaMi-Zhc--woypzoUgREhmujc.crl (hash: 43VGCZtHLawP5uBixnZThMYn3KSO05aiHePYepLi+Po=)
                          2: BFFF93DCB91C11EEADB54E9A775412E6.roa (hash: sdzYfCyDwg/PUEGK3tXmINjr+Wb452fyHwxFLwrRQCs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF, serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: Jun  6 03:43:12 2025 GMT
            Not After : Jun  8 03:43:12 2025 GMT
        Subject: CN=684263d1-e59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:45:48:6a:53:b5:85:a8:9f:d1:df:27:1e:
                    35:0d:4e:5e:5d:8a:48:a0:3d:4e:5f:d7:ad:4c:6a:
                    bd:b0:40:bd:74:5d:36:f3:4f:37:41:f3:ec:4b:c4:
                    9a:9b:8f:82:13:7d:c1:00:f5:89:64:bf:1a:9d:26:
                    bf:98:81:09:21:f6:eb:c2:c5:fe:6a:72:e2:85:37:
                    4f:ff:77:77:09:c4:ec:a7:86:9f:a3:26:7d:0c:cf:
                    00:72:d8:ee:ec:0f:26:1c:d2:f9:0f:d6:13:75:a6:
                    15:e4:12:a8:c9:ad:03:03:e7:89:03:f2:f0:69:1a:
                    c9:38:08:40:d7:9c:1d:a4:6d:bf:0f:f0:dd:1f:d8:
                    4a:46:07:79:bf:ac:41:e6:d4:b6:17:48:91:8b:9a:
                    69:d7:f9:40:75:36:09:93:0b:c0:49:8a:a2:92:80:
                    4b:03:3a:48:36:87:44:dc:0d:33:0f:2a:19:8c:5b:
                    7e:06:94:99:77:98:63:3d:d7:d5:b5:d1:ec:9c:32:
                    a4:93:a2:fb:49:33:b1:c7:8e:40:c0:25:07:9e:81:
                    90:28:ed:f4:08:05:13:e1:b0:7f:8f:f6:cb:e5:ac:
                    00:32:65:4d:e1:40:d1:01:38:ab:b6:e3:1d:9a:02:
                    a2:47:da:b6:3d:a1:e4:89:fa:d1:9c:3e:d0:d0:27:
                    fe:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0F:30:B7:2F:AD:67:B5:F4:1A:89:8F:82:70:37:FF:86:6B:E7:52
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:d0:fa:3c:3a:44:98:87:aa:a5:cf:4e:a2:f0:2b:68:2b:
         d2:ac:66:e0:5f:29:86:e7:14:5a:e5:94:f7:36:ad:f6:2d:60:
         40:0e:03:85:fd:4e:06:8d:f8:1a:2a:06:e4:77:c2:2f:66:8b:
         ef:2c:cc:f5:f2:2d:90:f2:86:c2:57:69:07:99:3f:87:c4:bd:
         a7:dc:57:67:95:ba:f0:5e:1c:6c:ef:51:fe:4d:b8:32:21:a3:
         4a:11:1b:0f:18:7f:e0:84:ac:7f:0c:2a:8d:6f:6b:cd:f0:22:
         59:b0:df:1f:40:89:34:b7:75:bc:e8:2a:69:01:42:58:cb:1e:
         02:68:27:01:ea:ef:ef:8c:9a:0f:f8:83:3e:41:24:4c:23:db:
         28:3b:3f:ad:4a:71:50:9a:93:7e:15:06:d6:3a:7c:67:34:ee:
         38:1c:42:67:64:be:2c:53:61:7c:46:ed:42:6d:6b:5b:54:3f:
         80:d6:95:5c:58:e9:38:fc:04:4c:8c:5f:f4:fb:48:da:cd:de:
         74:fc:0e:f2:2f:b8:10:5e:5f:75:02:96:e6:f3:30:98:ab:c0:
         92:b3:1d:62:4e:e7:0e:84:19:de:6c:17:03:29:80:4b:28:9d:
         a1:0f:28:33:3e:91:19:58:fb:d4:be:ec:ec:89:a0:31:b2:11:
         7b:4e:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:30:19 2025 by rpki-client