Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
File:                     R_ufMc9PLRlxHITTLiO9AG4ALpY.mft (raw, json)
Hash identifier:          quCAc+iYdSgx4CVCIbLz6p6ZVEY8fipOPOKrAdaIzv4=
Subject key identifier:   2E:46:F5:A6:53:2F:2B:87:2A:FE:00:E6:1D:DB:B1:91:6F:20:FC:DC
Authority key identifier: 47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96
Certificate issuer:       /CN=F36A36C8AF/serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
Certificate serial:       05AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
Manifest number:          05A9
Signing time:             Thu 31 Jul 2025 02:40:28 +0000
Manifest this update:     Thu 31 Jul 2025 02:40:27 +0000
Manifest next update:     Sat 02 Aug 2025 02:40:27 +0000
Files and hashes:         1: R_ufMc9PLRlxHITTLiO9AG4ALpY.crl (hash: 3/7KjAe7wzerSmNfUYbLoHBR9vicM4JijJrOwiI4vrU=)
                          2: 3CBE5F76212011ECA2098832D8A014CE.roa (hash: 8d9G2F7SeXBUC0RrFhpkoC1cMwO502CPGYGL0obQDBM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1453 (0x5ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A36C8AF, serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
        Validity
            Not Before: Jul 31 02:40:27 2025 GMT
            Not After : Aug  2 02:40:27 2025 GMT
        Subject: CN=688ad79c-ccc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:05:5f:ec:e4:cd:e5:b9:80:84:5e:60:1c:42:
                    78:53:13:84:21:fd:36:1b:1c:5b:8a:82:b6:6c:d1:
                    d5:7c:76:63:14:f0:15:f4:43:24:24:d9:6b:e8:27:
                    51:d2:c1:6b:22:14:19:64:b8:6c:be:52:31:5d:9e:
                    17:3b:f4:8a:ae:01:d6:93:00:d0:4e:91:74:53:08:
                    d6:bd:24:75:71:48:6f:6a:22:4f:af:a4:a6:d3:41:
                    13:dd:90:01:38:f6:96:68:9d:1b:33:cd:0c:60:ac:
                    3d:bc:2d:00:9f:9c:73:f4:df:10:2d:70:e3:a8:3d:
                    31:48:d5:5c:85:52:d2:f9:d7:3c:b4:ca:c0:87:f7:
                    7f:00:d4:09:a6:c3:68:f5:c2:7d:60:75:1c:0a:50:
                    95:37:20:32:3e:16:fa:8d:b7:79:bc:59:cc:2e:03:
                    5a:a0:a3:f8:a0:de:36:c2:ee:13:86:d2:d2:c8:39:
                    74:1b:cf:44:3f:93:8e:88:a6:e4:c8:03:32:ff:51:
                    4f:2b:54:63:ed:13:58:55:7a:ad:07:ea:0e:ab:2d:
                    b7:e8:f8:e8:f6:82:32:9b:32:a0:cc:9b:36:c0:d1:
                    b9:b9:ff:a8:f3:fb:81:c5:7c:dd:ac:54:24:06:d2:
                    f1:8a:64:2b:f1:c7:48:99:1a:5e:92:e1:a0:fc:c0:
                    48:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:46:F5:A6:53:2F:2B:87:2A:FE:00:E6:1D:DB:B1:91:6F:20:FC:DC
            X509v3 Authority Key Identifier:
                keyid:47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6b:17:f7:31:1e:63:a5:3a:fb:7f:c3:95:ce:88:2a:1e:06:
         7a:83:bd:21:26:85:32:eb:42:ee:74:97:2f:ce:8e:c4:9e:30:
         b6:09:06:ca:8d:6d:5a:e3:76:ac:48:d2:14:b1:23:ea:28:17:
         79:a2:7c:98:21:ad:9a:89:7d:18:0e:f8:4d:40:a8:5f:0e:a0:
         72:0a:f5:51:3c:08:5e:51:9f:60:f9:48:e8:35:02:8c:fe:b7:
         d2:76:58:49:f9:ac:0e:9b:63:0f:89:f3:71:71:41:5c:d4:47:
         de:36:3a:5e:00:bc:9e:4d:0e:cb:37:3a:73:b5:c7:a0:35:7d:
         54:01:c1:f3:2b:f4:77:bc:bf:a5:0e:8a:29:25:e0:e1:a8:92:
         bf:3e:da:70:1a:0e:ca:c2:43:a3:a1:d7:fa:51:db:da:9b:1d:
         31:f6:83:ac:39:af:30:bc:39:49:a4:de:0d:3d:bf:2a:08:ed:
         a4:43:3b:6f:3a:01:c8:1c:c9:e9:26:d5:0b:7b:ae:14:f6:c2:
         35:8c:b0:95:dd:ea:f1:1b:85:ea:32:a3:57:89:26:30:2f:2a:
         3c:a1:dc:75:8f:cb:d6:f2:10:4a:8b:c1:34:a0:1c:3b:16:bd:
         e8:53:b4:d0:ca:0a:03:17:57:1d:e3:90:75:ba:6d:35:59:11:
         3c:85:5a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:54 2025 by rpki-client