Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
File:                     On6mEjuyi5myrc0qWftjiY7momU.mft (raw, json)
Hash identifier:          425DQ/Gxwj8gr3h8hOEm5oistZyZAAFEnn5NhaejXvQ=
Subject key identifier:   66:A4:F8:30:D3:B9:CC:FC:8D:AB:FD:5D:61:54:FB:57:5F:43:6B:F9
Authority key identifier: 3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65
Certificate issuer:       /CN=F36A0B3BAF/serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
Certificate serial:       88
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
Manifest number:          87
Signing time:             Thu 12 Jun 2025 05:13:40 +0000
Manifest this update:     Thu 12 Jun 2025 05:13:39 +0000
Manifest next update:     Sat 14 Jun 2025 05:13:39 +0000
Files and hashes:         1: On6mEjuyi5myrc0qWftjiY7momU.crl (hash: PELN8uLRDsZN4KhxRAOpI8tSIYG9Gg03Tq4sWEnh8ZY=)
                          2: 8500AAA4DFA511EFA4A0995A762E951A.roa (hash: vzRjRuX2GZhGU/X4T8gnBdvjxS1YirPqGZKLuKJg1+Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 14 Jun 2025 00:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A0B3BAF, serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
        Validity
            Not Before: Jun 12 05:13:39 2025 GMT
            Not After : Jun 14 05:13:39 2025 GMT
        Subject: CN=684a6204-d433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cc:70:6b:95:c7:57:52:4f:bb:c5:51:a6:22:
                    bf:93:6e:8e:13:dd:69:8b:8e:50:b2:4e:02:eb:df:
                    7c:31:1c:72:66:5f:a6:25:92:4a:6f:06:01:8d:2b:
                    aa:ee:4a:d2:24:d5:ec:1c:cc:88:d5:63:17:88:e0:
                    40:e5:93:62:b6:90:7c:6b:fe:8c:27:97:71:29:46:
                    7e:01:2f:4e:b3:28:a3:ee:b5:b1:c0:4b:f1:af:3b:
                    ec:f2:c3:ff:f8:d0:31:37:78:2d:de:4c:cc:3c:6a:
                    6b:12:4d:17:9d:dd:bb:c7:ab:d6:36:3e:a0:ca:62:
                    b3:1c:73:bc:c5:b2:99:6c:65:b5:6c:1f:18:14:5a:
                    ab:1a:91:4b:22:7d:67:ea:ef:d5:02:0d:74:08:5d:
                    d4:69:33:fa:66:91:49:cf:e3:75:da:b9:ad:52:ee:
                    14:fe:93:72:51:57:9f:ef:b4:3a:ae:ad:f2:ef:70:
                    ed:84:e6:85:31:48:54:65:5a:92:06:07:66:c4:7c:
                    a2:4b:d1:e0:9b:f2:86:e4:d8:a2:8e:da:19:03:35:
                    ca:67:d8:4c:7e:0c:cf:97:d4:87:70:13:95:ab:de:
                    f1:03:6f:b7:cb:c1:2c:7d:31:9a:47:2b:8e:62:b6:
                    11:b8:ad:c0:b0:81:50:e8:f1:02:5f:e6:1e:c3:69:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A4:F8:30:D3:B9:CC:FC:8D:AB:FD:5D:61:54:FB:57:5F:43:6B:F9
            X509v3 Authority Key Identifier:
                keyid:3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7c:7a:de:99:8e:fb:11:5b:70:b7:10:dd:87:37:59:c8:7f:
         f3:d7:3e:dc:67:1b:78:d3:f2:bd:ac:ee:12:2a:b8:5c:7d:a3:
         4c:0c:fb:32:a9:e5:62:4c:77:6c:88:5d:ec:2c:17:9e:39:5c:
         35:c6:7b:c8:f1:ca:07:bf:08:fc:08:c6:17:bb:c9:71:8e:66:
         f9:06:c1:72:67:5c:07:6a:b7:bd:72:f2:c9:8d:5d:08:9d:6e:
         37:81:0d:dc:12:92:96:80:da:c0:d8:57:ef:ba:3a:64:0f:d8:
         6b:81:19:fd:87:72:41:28:ac:1e:94:d5:70:86:1c:ce:23:75:
         e7:74:51:7a:1d:82:76:d3:a3:e5:ba:57:dd:2a:52:bb:61:13:
         21:75:a0:19:06:4e:0a:62:55:d1:b8:0a:bf:f8:92:3e:80:73:
         ac:da:11:bb:a4:cd:28:4b:70:44:5e:5c:b0:12:76:06:22:bc:
         c8:48:4e:0c:0b:8f:c1:67:8e:fa:98:1c:4c:3b:44:a5:99:2e:
         9c:30:bf:71:97:4d:bf:e7:c4:9d:6e:e1:40:db:6e:5d:29:ba:
         e1:dc:0d:65:ca:47:09:a0:a6:15:79:24:a0:9c:af:8b:06:a5:
         8e:da:34:83:d6:d8:10:3a:37:eb:a1:4d:b3:37:ab:38:b0:0b:
         66:d1:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:30:29 2025 by rpki-client