Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
File:                     eSy8N9dE2IS2DsRH6irH5M2yLX0.mft (raw, json)
Hash identifier:          AbG0O9SUMH5q8JbwNvLiK5uquHK1FX2GjUwwGMZoliQ=
Subject key identifier:   C4:D0:40:0B:FE:F7:6F:4A:8D:10:81:F3:0D:1D:01:4B:7E:91:E3:1C
Authority key identifier: 79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D
Certificate issuer:       /CN=F36BBC36AF/serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
Certificate serial:       0496
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
Manifest number:          0493
Signing time:             Thu 03 Apr 2025 01:58:55 +0000
Manifest this update:     Thu 03 Apr 2025 01:58:54 +0000
Manifest next update:     Sat 05 Apr 2025 01:58:54 +0000
Files and hashes:         1: eSy8N9dE2IS2DsRH6irH5M2yLX0.crl (hash: 0pZ3RmY/OnjVUWC+gQyW8U7mik6InnWXg6d90lCl0dM=)
                          2: 5EB5E646D39211ED825065A9F1222468.roa (hash: ZAIRQP9yJ1tOCU5JQaOiSQZlgWyUtcOGOqQGSm6r4Qc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBC36AF
        Validity
            Not Before: Apr  3 01:58:54 2025 GMT
            Not After : Apr  5 01:58:54 2025 GMT
        Subject: CN=67edeb5f-edee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:56:bb:43:d8:78:bd:e3:81:9d:d8:e8:64:02:
                    79:54:a2:0a:5b:a6:04:42:b5:67:56:1f:84:b4:b1:
                    d6:b7:17:17:e0:34:30:88:12:ee:55:67:30:bf:1f:
                    93:3c:4c:76:67:af:1a:b0:e1:9b:96:2a:01:ef:57:
                    df:1a:02:ab:6b:09:5b:1b:86:d1:4c:e8:c7:e1:21:
                    d5:6f:83:4d:2f:43:6c:d0:37:87:0b:76:a7:19:63:
                    cc:e6:0c:c7:82:ba:b4:7b:66:75:00:46:4e:0b:6d:
                    fc:dc:0e:7b:be:26:bf:14:18:af:0a:6c:79:9d:f2:
                    71:5a:28:9b:ba:1c:26:c4:b3:df:72:13:8f:2b:c0:
                    1b:cf:2e:7a:69:63:26:51:8e:3d:4b:96:ab:96:1c:
                    f5:19:d8:63:2e:ab:2c:a6:8b:31:a1:e1:ed:22:a0:
                    58:01:ea:79:78:01:41:cd:c6:ee:72:80:a2:e7:e9:
                    10:3a:dc:3e:47:bf:60:1e:1c:c9:c1:07:f7:db:16:
                    ef:0d:2f:e7:ed:fa:b8:33:24:94:e0:a1:7c:19:b5:
                    2f:7d:2d:19:07:f3:db:16:50:38:2b:8a:14:89:5b:
                    5a:75:59:55:35:7a:28:25:90:2e:36:0e:4c:7d:98:
                    61:ff:48:36:7d:67:99:a4:f3:10:6d:21:8d:86:d8:
                    06:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D0:40:0B:FE:F7:6F:4A:8D:10:81:F3:0D:1D:01:4B:7E:91:E3:1C
            X509v3 Authority Key Identifier:
                keyid:79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:fc:6c:07:be:ca:20:90:cb:9d:d7:c9:57:c6:6c:17:eb:8b:
         f5:16:92:b0:3a:c7:a9:96:83:82:74:cb:cc:9b:9f:e9:72:a0:
         83:09:98:ad:40:f4:bf:87:ca:23:b7:45:01:cf:6f:7d:a3:1c:
         35:07:38:e4:19:2e:40:f1:f8:df:f0:3b:f6:d9:ba:f8:f8:86:
         f5:40:6b:41:29:8e:c7:40:20:5b:eb:30:ea:f6:9f:22:95:ea:
         07:71:40:60:3b:78:90:29:e1:ba:67:57:54:6f:bf:91:9c:32:
         92:cd:c3:89:6f:79:9b:87:e7:5a:be:ae:db:d3:b1:06:31:63:
         c4:ac:b3:f9:78:36:f4:9d:e4:67:1b:97:6a:8b:e2:87:b8:15:
         4a:f9:d8:c1:ba:f8:aa:50:e0:32:d3:c1:4a:4e:87:ca:e3:0c:
         1b:4c:e5:31:86:7a:67:6e:36:fc:ce:27:ce:62:c1:95:72:b0:
         ca:10:ae:e6:fb:51:c7:ef:fd:08:9c:64:14:4a:ae:d0:4a:f4:
         53:52:14:e3:ac:aa:2f:4b:f6:92:b8:4a:41:bc:e3:3b:48:4d:
         ab:f2:5b:49:e3:76:01:df:61:78:12:ba:64:c7:64:ba:ca:64:
         29:ca:a4:78:8e:86:dc:e5:77:fd:76:c4:8f:1b:c3:24:d6:13:
         42:bc:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:00:03 2025 by rpki-client