Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File:                     Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier:          mJ4bH0QgxGkMJFj+wZLRwzaRi0mM7uPLK3prQclNosc=
Subject key identifier:   70:B7:09:19:4F:1A:C5:5B:CE:88:B9:53:B4:80:5C:82:D6:FB:14:B4
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer:       /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial:       01CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number:          01CA
Signing time:             Sun 27 Jul 2025 04:35:34 +0000
Manifest this update:     Sun 27 Jul 2025 04:35:33 +0000
Manifest next update:     Tue 29 Jul 2025 04:35:33 +0000
Files and hashes:         1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: R2SajNigO+Vn96/pS2kt8FcxUUW2fvvFiCPLsSlR2lE=)
                          2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
        Validity
            Not Before: Jul 27 04:35:33 2025 GMT
            Not After : Jul 29 04:35:33 2025 GMT
        Subject: CN=6885ac96-aa62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:69:89:96:dd:29:42:20:11:87:a1:44:21:
                    be:61:f1:cd:14:28:7c:b5:f0:2a:eb:0d:f7:9e:9e:
                    e0:63:b6:c1:d5:84:0a:fc:e9:90:78:21:d2:cb:ce:
                    d2:c7:6b:58:75:8f:c0:5a:ff:ff:5c:de:81:8f:60:
                    6f:94:e9:ca:d2:b6:bb:b7:3f:7a:c0:f0:5a:5d:04:
                    51:ca:e1:39:2b:30:af:d3:75:90:e3:42:ea:a2:50:
                    21:e1:a8:2d:00:82:f8:cd:04:d4:64:34:56:e4:eb:
                    e0:09:8a:64:c7:68:7b:11:d9:d4:80:02:06:47:7c:
                    99:1f:df:f2:f3:d0:e3:ca:b6:6b:a0:22:9e:76:e1:
                    9a:91:9d:48:cd:44:cd:9d:c3:b1:5d:33:04:41:11:
                    4f:e1:e3:e2:93:11:d3:10:e0:11:27:10:1e:e3:57:
                    11:e7:c8:35:a3:a9:32:fb:9e:12:31:1d:7c:d3:35:
                    2c:ee:59:78:90:c9:93:74:e4:bb:bf:3e:1e:b4:10:
                    5b:3a:e9:f0:18:30:91:cc:b9:0e:2a:f8:9c:15:3b:
                    8d:f4:95:ab:3e:f0:b9:75:88:99:13:ee:ec:50:5a:
                    fb:ef:d9:54:a8:52:a1:11:ca:2e:ee:55:01:a1:b5:
                    78:9b:cf:c6:da:7a:62:e8:76:ef:5e:43:5a:f0:5a:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B7:09:19:4F:1A:C5:5B:CE:88:B9:53:B4:80:5C:82:D6:FB:14:B4
            X509v3 Authority Key Identifier:
                keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e8:d6:ae:cf:28:8e:22:13:42:f7:a2:cc:98:61:6e:aa:03:
         44:25:14:3e:26:49:50:34:b4:66:51:75:1a:20:b6:96:ef:37:
         1b:51:a5:12:15:3a:ff:9d:76:f0:21:85:fa:b3:6c:6f:d7:13:
         4b:33:a4:c5:e4:c9:12:94:d4:78:e0:3f:a8:63:c8:c0:8e:48:
         b3:df:ba:e1:28:c1:57:96:65:35:cb:d6:14:59:3e:42:59:03:
         a2:f1:d3:50:fc:20:aa:6b:78:8b:70:d1:29:b7:94:ed:e9:70:
         47:bb:44:3b:8f:37:1a:01:51:73:98:b6:6e:6f:9a:44:c1:6f:
         6f:2b:fa:bd:bc:2c:2c:9a:d1:dd:18:4c:72:8c:a9:8d:8e:eb:
         a1:5f:4d:37:58:1f:a3:62:b1:30:a3:58:6c:83:cb:c4:48:49:
         4e:ff:f6:89:3b:0f:34:1f:6b:aa:d8:0e:75:fc:f6:03:fd:16:
         c1:41:57:22:35:60:24:0e:99:c2:fc:53:76:41:7d:50:33:75:
         f5:0a:6d:07:d3:8b:cd:40:38:f2:9e:c5:bb:91:44:1e:cf:67:
         cd:e7:66:56:18:49:54:42:f4:05:db:fe:66:24:7c:e2:f3:9c:
         40:fd:d6:41:27:ce:60:5b:c1:4d:ef:7a:56:6c:03:6e:46:bb:
         65:9f:3f:fa
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgzMjFBRjExMC8GA1UEBRMoMzlCRTc2Qjg3NjU3QjA5N0RDRUVBM0I0MEQ0NDUy
QTI0RTU2MDM4MjAeFw0yNTA3MjcwNDM1MzNaFw0yNTA3MjkwNDM1MzNaMBgxFjAU
BgNVBAMTDTY4ODVhYzk2LWFhNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRZmmJlt0pQiARh6FEIb5h8c0UKHy18CrrDfeenuBjtsHVhAr86ZB4IdLL
ztLHa1h1j8Ba//9c3oGPYG+U6crStru3P3rA8FpdBFHK4TkrMK/TdZDjQuqiUCHh
qC0AgvjNBNRkNFbk6+AJimTHaHsR2dSAAgZHfJkf3/Lz0OPKtmugIp524ZqRnUjN
RM2dw7FdMwRBEU/h4+KTEdMQ4BEnEB7jVxHnyDWjqTL7nhIxHXzTNSzuWXiQyZN0
5Lu/Ph60EFs66fAYMJHMuQ4q+JwVO430las+8Ll1iJkT7uxQWvvv2VSoUqERyi7u
VQGhtXibz8baemLodu9eQ1rwWu7nAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcLcJ
GU8axVvOiLlTtIBcgtb7FLQwHwYDVR0jBBgwFoAUOb52uHZXsJfc7qO0DURSok5W
A4IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MzIxLzg5NEREOEEwMERGQzExRUY5NEFBMTg1QjAxNzAwMUIxL09iNTJ1
SFpYc0pmYzdxTzBEVVJTb2s1V0E0SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09iNTJ1SFpYc0pmYzdxTzBEVVJTb2s1V0E0SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODgzMjEvODk0REQ4QTAwREZDMTFFRjk0QUExODVCMDE3
MDAxQjEvT2I1MnVIWlhzSmZjN3FPMERVUlNvazVXQTRJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC26NauzyiOIhNC96LMmGFuqgNEJRQ+
JklQNLRmUXUaILaW7zcbUaUSFTr/nXbwIYX6s2xv1xNLM6TF5MkSlNR44D+oY8jA
jkiz37rhKMFXlmU1y9YUWT5CWQOi8dNQ/CCqa3iLcNEpt5Tt6XBHu0Q7jzcaAVFz
mLZub5pEwW9vK/q9vCwsmtHdGExyjKmNjuuhX003WB+jYrEwo1hsg8vESElO//aJ
Ow80H2uq2A51/PYD/RbBQVciNWAkDpnC/FN2QX1QM3X1Cm0H04vNQDjynsW7kUQe
z2fN52ZWGElUQvQF2/5mJHzi85xA/dZBJ85gW8FN73pWbANuRrtlnz/6
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:17:43 2025 by rpki-client