Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
File:                     OwiJEFfOiidoEQQFlcyqxAjfUaY.mft (raw, json)
Hash identifier:          jBjIoFSybKkEaOUMEdWGA6DK8xHqIP5eM3kmSM5zjBY=
Subject key identifier:   62:8A:15:0B:A9:6B:AE:31:E6:5E:A2:E5:41:1A:24:76:21:16:75:D8
Authority key identifier: 3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Certificate issuer:       /CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Certificate serial:       056F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
Manifest number:          056E
Signing time:             Thu 31 Jul 2025 02:45:19 +0000
Manifest this update:     Thu 31 Jul 2025 02:45:18 +0000
Manifest next update:     Sat 02 Aug 2025 02:45:18 +0000
Files and hashes:         1: OwiJEFfOiidoEQQFlcyqxAjfUaY.crl (hash: GyiIBC+3FW9Vncf3YuL+V8mqXc4vbDBc/KHEhE/x7rc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391 (0x56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679CB8AF, serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
        Validity
            Not Before: Jul 31 02:45:18 2025 GMT
            Not After : Aug  2 02:45:18 2025 GMT
        Subject: CN=688ad8bf-a648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:04:43:1c:92:d2:06:e3:cf:d4:f5:dd:2c:
                    30:f5:57:53:e7:96:1c:93:d8:4b:b1:4a:8a:82:6c:
                    c2:79:9a:b2:6f:1d:db:af:83:30:e7:4e:c2:dd:32:
                    39:2f:5f:a0:ae:f7:ae:1d:5a:7b:fe:6c:33:ce:b8:
                    41:be:ad:8e:e8:40:25:53:26:83:64:6f:ca:79:69:
                    44:01:1a:8f:3c:30:bb:33:78:f8:bb:b3:df:c7:80:
                    8a:25:90:e8:39:4b:a2:ce:18:6a:e4:d3:bc:f9:b8:
                    d9:1b:f1:41:3c:74:8a:a2:89:ab:47:c2:86:10:d4:
                    c7:7e:2d:9e:2b:c6:c9:b0:c1:9a:b8:8e:66:e5:09:
                    ef:75:d4:fc:ae:6f:a2:59:08:c8:ef:e7:7d:5e:9f:
                    09:61:53:91:fd:81:c7:c6:c9:ee:59:70:23:73:5d:
                    84:85:07:69:15:0c:21:94:ef:a3:99:76:f6:21:79:
                    13:4d:48:2f:39:a0:70:f2:81:33:80:69:2f:bd:f3:
                    24:ba:0a:44:3a:c1:20:6d:ed:d5:97:f1:56:df:5c:
                    24:12:62:57:5d:30:66:43:bd:10:b2:cb:16:47:0d:
                    cc:0c:b8:06:17:fa:9a:01:3c:ac:a6:21:e8:a1:86:
                    29:9a:cf:81:9f:35:27:61:5b:ca:fc:7e:33:74:de:
                    54:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8A:15:0B:A9:6B:AE:31:E6:5E:A2:E5:41:1A:24:76:21:16:75:D8
            X509v3 Authority Key Identifier:
                keyid:3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:09:8c:2b:5a:3f:aa:b8:99:15:81:bc:e5:21:56:a4:1c:7f:
         00:0e:86:7b:15:3b:e0:a9:6a:53:15:2e:f2:a7:c5:91:dc:43:
         d1:b5:87:a2:92:d8:6b:f4:a5:f2:af:50:4d:bb:e0:51:a1:5d:
         f1:f7:4b:d0:7a:50:7c:e4:5d:ff:85:d8:c3:2b:ec:14:43:71:
         7d:52:c8:f3:36:29:5f:f4:3e:b0:50:9d:cb:62:e1:5f:c4:b4:
         fd:36:a6:0b:b8:de:99:e3:61:76:af:c5:98:d8:03:c0:89:df:
         d6:4d:8f:bc:4d:27:85:d1:73:64:19:7a:fc:4c:43:da:20:e3:
         e2:ce:1c:d5:42:f1:bb:a5:6a:e2:b0:16:51:79:ca:80:fd:d5:
         79:d3:5c:19:e4:79:b3:b6:14:c8:4b:16:39:d8:2d:d4:43:6c:
         58:39:45:74:ca:b5:cf:53:a7:38:4d:cd:5a:bb:cd:83:67:68:
         60:f9:14:2f:5a:de:fa:11:58:63:89:9c:7b:21:a6:e6:5b:4d:
         9a:40:2d:c6:a2:2d:ed:49:9d:f2:88:d0:2b:48:98:62:ce:73:
         43:9f:a1:40:c0:05:f4:2e:3d:60:8f:9a:51:72:c2:53:c6:f8:
         4c:a9:63:2e:1c:f8:2f:da:ac:22:08:46:2b:d7:18:a2:76:d0:
         44:90:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:22:21 2025 by rpki-client