Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
File:                     nZEfOSNannHK5JlXppouUkKg3TU.mft (raw, json)
Hash identifier:          tVl+7Ukn85QGGfpj+dzb2E+Jo4PeC0OuywPoJF704M8=
Subject key identifier:   B0:5C:B2:8E:55:0D:C0:4B:F4:F6:2F:9F:67:40:14:D9:37:54:B0:15
Authority key identifier: 9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
Certificate issuer:       /CN=F36B4CC8AF/serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
Certificate serial:       022B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
Manifest number:          0229
Signing time:             Wed 04 Jun 2025 04:13:56 +0000
Manifest this update:     Wed 04 Jun 2025 04:13:55 +0000
Manifest next update:     Fri 06 Jun 2025 04:13:55 +0000
Files and hashes:         1: nZEfOSNannHK5JlXppouUkKg3TU.crl (hash: Bsw8xz3bomwTmJCHjYWpMHwW5XIjsKBRFbENVQl/bGg=)
                          2: 6B19BD749DA711EE8B40AC5ED25BE465.roa (hash: NgzSPsDLZHTS8GcIuQL4M+RUtb2W4HialOJ/KKr08S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4CC8AF, serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
        Validity
            Not Before: Jun  4 04:13:55 2025 GMT
            Not After : Jun  6 04:13:55 2025 GMT
        Subject: CN=683fc804-aad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:e1:91:18:a6:8d:87:9d:51:88:8c:e5:64:
                    e4:8c:5b:68:9b:65:5e:34:1c:ce:1a:70:20:fc:6c:
                    be:a8:43:2c:1d:c1:4b:6e:cf:b8:f3:60:9e:35:a2:
                    0c:ff:73:e1:cd:63:b7:b6:d6:94:4c:9f:3d:87:76:
                    3a:86:2e:d7:bb:42:8f:bd:b8:6e:e2:77:4d:80:7e:
                    f2:c4:b4:91:03:91:64:a4:10:fd:c4:e5:c2:2f:6b:
                    35:71:05:4c:a0:68:15:37:2c:a4:b2:ad:cf:e0:d5:
                    f7:06:94:13:62:4b:3d:0d:fe:8c:14:76:19:dd:b3:
                    0f:e4:94:4b:5c:22:c1:09:18:08:8e:76:91:79:a4:
                    e4:cd:76:cf:90:57:94:74:d4:a1:7d:56:67:93:08:
                    8b:62:52:84:a4:b0:cd:86:59:a7:13:4e:d9:9d:a6:
                    67:8a:d4:a2:ca:71:33:47:2f:5d:90:90:ad:d5:7a:
                    83:9a:2e:87:42:52:a8:06:a9:b9:c4:42:eb:7d:61:
                    a3:44:f6:11:2d:a8:6c:27:8a:ce:8f:a5:5d:e1:35:
                    d5:c9:33:ab:7a:48:32:ed:66:57:e3:55:68:3c:39:
                    71:62:4f:b1:cb:7e:39:57:dd:18:f2:33:94:34:bf:
                    e6:61:ec:39:cc:2a:4e:cc:a7:e4:84:75:ff:c3:65:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5C:B2:8E:55:0D:C0:4B:F4:F6:2F:9F:67:40:14:D9:37:54:B0:15
            X509v3 Authority Key Identifier:
                keyid:9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:7e:ea:1a:46:b4:ba:c0:c2:11:ab:fb:66:cd:7c:fd:83:
         78:24:d2:8e:d0:09:f4:7b:b4:21:38:b1:ff:13:70:da:d6:00:
         85:39:3d:18:aa:e5:dc:99:fd:d0:c3:41:9c:ab:5e:28:b3:db:
         7d:09:bc:e2:ce:b3:eb:df:83:07:a4:09:fc:61:71:76:6f:c2:
         df:14:49:4d:e7:eb:c7:9f:3d:c3:96:06:08:6c:cc:b2:1d:66:
         f6:05:80:ff:5a:d5:91:3b:85:70:8b:c4:55:b0:98:c2:38:49:
         ea:1e:63:3a:bd:b8:5b:d4:79:58:b6:d4:b2:9a:3d:75:ea:08:
         87:e0:53:ff:05:a7:6f:9d:12:13:8a:cf:c2:c4:ff:86:18:c8:
         9a:e4:4b:e8:da:63:02:b2:90:2b:e8:71:6e:68:2d:13:45:32:
         eb:c9:55:7b:e1:f6:2b:10:3a:37:35:cd:11:62:63:73:b8:47:
         5a:0b:f2:f3:00:e8:e9:46:61:c6:d3:f5:69:75:3c:e6:34:d7:
         ee:98:e6:1d:2c:ef:02:ba:45:1b:ff:ae:24:64:12:e1:aa:b4:
         dd:9f:98:97:9a:b4:1c:fa:92:ba:e3:22:ec:73:9e:32:05:a6:
         8d:57:b2:21:bf:18:1a:fc:1c:93:93:5b:d4:15:9b:fc:73:d1:
         41:d2:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:15:28 2025 by rpki-client