Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
File:                     0L5n0EWzPwWlhxUQOZ5wnJj2130.mft (raw, json)
Hash identifier:          VBuLO+IGP65ooNyM/ld2ni3m44yisyLqRpAF7JVB09w=
Subject key identifier:   89:89:3F:D8:CE:38:E8:45:7E:81:95:25:F2:F7:C5:48:33:65:DD:8B
Authority key identifier: D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D
Certificate issuer:       /CN=F36B70EFAF/serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D
Certificate serial:       07CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
Manifest number:          07C0
Signing time:             Wed 04 Jun 2025 01:48:47 +0000
Manifest this update:     Wed 04 Jun 2025 01:48:47 +0000
Manifest next update:     Fri 06 Jun 2025 01:48:47 +0000
Files and hashes:         1: 0L5n0EWzPwWlhxUQOZ5wnJj2130.crl (hash: H7kNH4n7+l3OSqQm1P62SgVPd2Zl/yiQRLSLkM5nUOw=)
                          2: 57D99C84A70B11EFAB610873762E951A.roa (hash: VESGhOcQ1eFdhjYgqNLQ5y+9WwlZ95aNn2gOWKom4PM=)
                          3: C67DA3FA616011EB8E25557BF8AEA228.roa (hash: lOtZThOqYZOrSs5z/Nz31HkfsJ0LpZIFin3wqJk1shU=)
                          4: 8D3DC440A70B11EF86ACE974762E951A.roa (hash: Py/R2WBbifPX4/K3F5F8kgPQCqbFBhwEISTO2st5s50=)
                          5: B217A2825A6611EAB1529D4BF8AEA228.roa (hash: vzveyzJlprOUydarhesuSRbAJ+Ui96qsAven0yoHfa4=)
                          6: 70076FD4A70B11EF8D62DB74762E951A.roa (hash: LcMYj3ITAdCe3LR23bnkb1n/C+36Ft00nt7b6GzWAhM=)
                          7: 3E87BB4E5A6711EA9C48384CF8AEA228.roa (hash: nvSN5JRFyEeP9hkBJ/sGlztv5rQhKrD7IbfV6O2PjxE=)
                          8: F7B6336C994411EBA68CD72BF8AEA228.roa (hash: tviT3PsrUHAG/3p3zGi9oQp3+ts3yl4rcv4DkfQceXI=)
                          9: DDE70E525A6611EAB8C0D34BF8AEA228.roa (hash: CTnWbvN7o+FlfyXlLcFUADgf4PWO/HvRao3/o/WHW3A=)
                          10: 1BBD15F05A6711EA9B33194CF8AEA228.roa (hash: 60FP7Xp6LdQXkJBiXGYYWOcK5OJjg1Z5omL1TTkOPXc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1994 (0x7ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B70EFAF, serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D
        Validity
            Not Before: Jun  4 01:48:47 2025 GMT
            Not After : Jun  6 01:48:47 2025 GMT
        Subject: CN=683fa5ff-d5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:c7:b1:7b:f1:1d:72:26:ea:e7:a8:3e:68:
                    44:e8:47:d2:4d:87:ca:54:2b:28:c2:e7:7b:9a:8c:
                    c8:88:71:a8:ff:30:09:65:b3:9e:2d:9c:14:a3:ff:
                    0e:13:aa:98:95:b4:24:33:c1:7d:22:f5:90:64:15:
                    54:e0:1d:ca:d8:bd:43:ee:cc:cd:1b:3f:21:9e:05:
                    bd:4d:9d:8e:36:9d:17:e5:7a:c4:26:b6:9b:f3:2d:
                    86:b9:90:9e:d6:71:ea:36:aa:d4:31:97:ce:32:82:
                    96:85:3c:5d:e4:9f:c6:b8:c6:05:54:be:96:c6:e6:
                    49:5f:58:99:2f:66:ba:53:fc:1d:3a:d6:38:22:a7:
                    96:68:f3:14:2f:ff:df:bd:2b:6b:9d:49:f6:97:da:
                    69:1f:81:75:3d:9b:ad:9f:87:89:b4:1a:95:c9:96:
                    3a:f0:30:45:a8:3c:ee:b6:c2:ba:8e:28:9e:9d:1d:
                    51:41:53:93:4e:96:3d:3a:4f:36:f1:93:e2:7b:03:
                    a7:be:8a:73:36:fe:c9:b4:03:f4:8a:ed:cd:b2:8a:
                    a2:61:46:5f:1e:e1:16:36:73:6f:7a:64:29:4c:12:
                    03:0a:21:93:bc:c8:65:ff:2c:23:0f:bd:a5:47:87:
                    17:3d:67:db:36:55:dc:5d:a7:7a:45:29:c1:05:a6:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:89:3F:D8:CE:38:E8:45:7E:81:95:25:F2:F7:C5:48:33:65:DD:8B
            X509v3 Authority Key Identifier:
                keyid:D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ca:82:a2:32:12:90:dc:fb:d9:4c:4c:d5:c2:1e:be:c7:b6:
         33:37:a2:dd:16:74:1d:3f:c9:94:aa:1e:cc:e0:42:04:13:ef:
         cd:db:4f:ff:4b:2f:aa:f5:e6:05:73:97:a3:b9:c7:26:5c:e0:
         5b:e0:dc:4a:b2:b9:1d:96:3b:61:1f:d4:63:ea:1e:fc:ff:1e:
         f0:94:93:5b:ea:31:a3:21:c2:38:30:7c:49:96:0c:49:8a:08:
         0c:5e:71:6e:63:9b:1c:c8:8f:cf:d5:0b:48:ed:24:84:fc:fa:
         e7:e2:ec:e9:c4:24:ac:28:50:a7:63:ab:cb:fa:19:ae:af:f5:
         62:89:48:58:df:11:77:78:2c:73:5d:b7:e2:6c:fb:c4:bc:7a:
         49:db:0d:94:83:62:f1:98:82:ac:61:8f:12:18:7c:14:b5:c7:
         5d:83:a8:f7:1f:93:01:c7:df:b7:cb:0d:f9:de:f0:8b:24:04:
         d0:15:8e:d8:b3:18:1d:cc:ac:3b:a6:5f:52:1e:aa:cf:9b:3e:
         01:d8:de:2b:d5:df:70:8b:e3:4e:8a:2b:e1:0f:34:39:9c:a0:
         ff:fc:38:f5:bf:61:5b:17:fc:77:1f:8c:61:b7:95:2a:4b:38:
         9c:75:19:37:ae:7f:1c:67:1e:a6:6d:81:55:ae:66:0e:5e:fd:
         da:d8:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:24:38 2025 by rpki-client