Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
File:                     41870XBX5RmmOBSWl-AwgOrYdys.mft (raw, json)
Hash identifier:          u6SRH/oCXqlTL50PaZ0k0ynW53wUmbSvnpvwr/EU1dM=
Subject key identifier:   1A:F0:40:F7:2E:57:FF:FC:5C:AD:49:48:D2:A6:90:36:A0:62:68:81
Authority key identifier: E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Certificate issuer:       /CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
Certificate serial:       0EBC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
Manifest number:          0EBA
Signing time:             Sun 27 Jul 2025 00:51:41 +0000
Manifest this update:     Sun 27 Jul 2025 00:51:40 +0000
Manifest next update:     Tue 29 Jul 2025 00:51:40 +0000
Files and hashes:         1: 41870XBX5RmmOBSWl-AwgOrYdys.crl (hash: 3WpTVpYVk3ErWC4SFK9CCNb95QyVGxscDbTq9xoVVJo=)
                          2: 752DB50C461511E99A25B144F8AEA228.roa (hash: k0Rhsuh/b99q9kDn1FoP+OO8bsw50UMZoPySxuOGhI8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3772 (0xebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ABB63AF, serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
        Validity
            Not Before: Jul 27 00:51:40 2025 GMT
            Not After : Jul 29 00:51:40 2025 GMT
        Subject: CN=6885781d-7f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:42:82:51:0a:14:a2:a7:8e:e2:2b:ff:30:
                    5d:3a:f8:4a:e2:c6:53:be:be:08:70:ff:f4:0c:9b:
                    9c:5e:fd:89:c8:47:8d:73:6f:35:44:15:ab:09:24:
                    db:5b:78:1d:28:51:3c:18:ec:7c:bd:6b:77:74:4d:
                    5a:ff:df:82:a8:23:75:1f:ec:92:a5:c4:fc:c5:19:
                    60:c1:7c:3d:1d:e7:d7:5a:04:f8:cf:c4:47:23:b9:
                    2f:cf:49:4d:ac:ac:89:c1:ec:13:4d:a6:af:3a:f6:
                    ae:1d:9e:86:ab:47:49:8c:17:84:6e:59:db:9a:12:
                    f0:02:af:8a:37:bf:a8:14:9c:c1:76:6e:83:fb:49:
                    4b:54:79:68:52:e1:74:9f:fa:71:ba:2a:a9:c6:83:
                    46:79:90:32:25:e7:e2:4e:6c:9d:bf:61:16:f6:5c:
                    05:20:c5:be:26:76:1d:72:e3:ce:e2:be:20:b9:0e:
                    e1:26:0b:af:d3:4d:73:56:55:63:f3:6c:3b:92:ab:
                    4e:e8:53:e0:69:78:64:6d:3c:fe:62:d0:91:10:5a:
                    f7:ab:2a:39:96:59:46:ca:b1:ce:98:0d:0a:e1:16:
                    bd:dd:32:b4:52:0d:d4:18:d0:b2:85:e6:ee:4f:66:
                    c9:f2:3d:ee:2b:6a:4d:84:5b:da:76:9f:29:62:58:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F0:40:F7:2E:57:FF:FC:5C:AD:49:48:D2:A6:90:36:A0:62:68:81
            X509v3 Authority Key Identifier:
                keyid:E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9e:9c:91:f4:9a:94:8e:98:b3:cd:91:c4:2c:42:a8:b2:78:
         42:06:5c:b5:17:9a:95:be:d8:16:c5:bc:1c:5b:51:03:7e:9d:
         bc:74:b4:05:f3:c6:f0:32:23:3b:d4:86:a0:4b:96:5f:d9:ed:
         a8:b0:ab:b0:e2:6a:28:cb:cd:86:22:1d:6b:f3:ac:c0:3c:ea:
         9a:d8:25:cd:c2:ff:6f:0d:4a:ab:73:4f:42:1b:71:de:58:dc:
         64:92:1e:65:82:cc:8c:27:bb:bc:ee:6f:92:32:42:8a:cd:d2:
         54:13:eb:0e:e6:e0:d5:cd:1a:ba:03:fb:b7:2d:f4:c0:a9:8b:
         bb:88:fe:b0:48:d9:a1:b8:31:80:49:41:96:64:64:bc:4d:5d:
         4f:ab:17:70:d3:96:17:08:1e:1d:fa:f8:e0:9a:23:ba:e6:0f:
         8b:d8:6a:27:da:b6:d6:34:57:7e:e4:1a:d4:3f:b5:fa:62:33:
         3e:d3:7b:5e:b3:a8:aa:04:68:44:6b:c5:84:c5:a5:f6:3e:30:
         f8:81:c7:c5:a8:d3:d4:7d:da:24:ff:17:3b:38:1e:2b:b4:37:
         cb:18:13:44:f6:22:99:21:08:6a:03:68:77:32:1a:0d:e7:cc:
         6c:4f:1d:8e:a1:87:4f:0f:db:7f:17:af:07:ae:5d:51:c3:13:
         fb:36:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:57:03 2025 by rpki-client