Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
File:                     0uDwPq7oAqkBwlcRKP55pj80aSw.mft (raw, json)
Hash identifier:          sFP98pIMIjajkUXs1XTjbHvDbbVZZe8zvAYPR/dl6Tc=
Subject key identifier:   B3:D0:7B:ED:DB:D8:3A:19:2D:3C:6B:96:7D:C7:4F:41:C4:91:A1:0B
Authority key identifier: D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C
Certificate issuer:       /CN=F36858D5AF/serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
Certificate serial:       02D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
Manifest number:          02D8
Signing time:             Sun 27 Jul 2025 04:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:38 +0000
Manifest next update:     Tue 29 Jul 2025 04:00:38 +0000
Files and hashes:         1: 0uDwPq7oAqkBwlcRKP55pj80aSw.crl (hash: 0z0paEiK1BlFlssHuzJxw0wzMRR1XNJzxxMxJSX7vr0=)
                          2: 6C083968730911EEB676D5174AD9E6FC.roa (hash: GPazHsxOeA8iw549I//PnsuiDjidxxug1DVogvWrQ6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36858D5AF, serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
        Validity
            Not Before: Jul 27 04:00:38 2025 GMT
            Not After : Jul 29 04:00:38 2025 GMT
        Subject: CN=6885a467-3c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:48:21:6f:b2:76:bf:7d:ae:fb:9e:ab:37:6f:
                    4a:e0:18:2f:dd:12:8c:35:b8:0c:20:05:a6:29:03:
                    3e:08:22:85:de:f5:e1:f3:c6:34:a8:e0:a1:09:87:
                    9a:27:3b:16:be:dd:c6:14:05:8e:b0:b8:dd:01:ad:
                    d0:89:93:e5:c5:26:b1:c2:f6:87:e4:f5:c1:78:89:
                    12:fd:70:a1:7c:24:55:ea:c1:cb:e9:6b:47:c8:49:
                    cc:26:0d:5a:18:99:3b:07:2c:52:92:1f:2e:7b:d4:
                    7c:cb:9c:67:4d:65:ab:57:f5:74:cb:4e:a9:8b:1c:
                    5b:14:04:c8:03:a9:e5:d7:d0:c4:b1:02:76:41:39:
                    64:7e:22:67:4e:a8:ab:ea:7c:00:c1:03:1a:44:65:
                    35:84:87:b3:18:2f:57:70:20:47:51:b2:88:0d:f0:
                    0a:01:28:af:6d:ce:04:ff:bc:5b:a6:6e:73:7b:a8:
                    ba:77:1c:66:a6:7f:4c:bd:64:33:fc:84:a1:a5:87:
                    73:a5:99:52:c4:34:62:aa:29:5b:06:e8:64:d3:5b:
                    0d:2b:2b:c1:4b:0e:a9:95:16:35:df:b9:4b:76:2c:
                    e8:ef:fa:49:c1:0e:b4:19:30:79:06:f7:9a:12:fd:
                    f9:f5:71:46:e8:42:97:45:8e:06:e8:90:98:d4:2b:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D0:7B:ED:DB:D8:3A:19:2D:3C:6B:96:7D:C7:4F:41:C4:91:A1:0B
            X509v3 Authority Key Identifier:
                keyid:D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:67:1e:49:0a:f9:e1:e5:ad:e5:bf:32:31:e8:80:4e:89:
         89:30:10:1f:68:45:4f:79:42:bb:ac:b9:70:5b:a2:2f:f9:c1:
         1c:52:02:2f:e8:53:f1:0a:69:66:06:d0:94:8b:4c:4a:a3:f9:
         bb:eb:00:6f:2e:c1:77:b8:9d:99:6c:37:f2:29:62:35:d3:3c:
         bf:be:b5:45:a6:f6:3f:a9:2e:eb:fc:e1:ee:30:4b:75:e3:45:
         42:73:f4:ad:1b:ae:49:28:f1:d1:3f:e4:19:f3:c8:75:be:a3:
         50:dd:c2:8a:0f:96:9a:b3:90:25:4e:51:9f:e8:e7:ed:29:e0:
         b0:d3:16:47:be:d6:46:b0:a8:fb:20:93:62:77:94:54:72:7c:
         f2:f9:f5:2d:54:b6:2a:15:b5:89:8a:84:e1:89:a1:fe:47:79:
         a6:db:59:e5:da:9b:e4:29:fb:9f:28:3a:dd:0d:da:e3:62:dc:
         0a:bc:37:28:19:d6:57:b4:33:06:1a:a9:66:02:aa:a0:d6:8e:
         d4:c0:8d:9c:b8:73:e7:99:e2:e2:b8:40:21:f5:84:9e:40:6a:
         e1:7f:93:00:f2:5e:29:2f:f4:f7:16:1e:33:dc:96:56:ab:81:
         e5:b7:5a:9a:cc:02:6a:c3:e8:8a:c1:a9:1e:b6:c7:ad:6c:70:
         b2:9f:f1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:58 2025 by rpki-client