Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
File:                     4a66tLHvdNsvpuf2sMhhKwzhv9s.mft (raw, json)
Hash identifier:          uCW4adE998Et36+2YjjMyssyim4lxW85J9fINh4kJbc=
Subject key identifier:   73:A2:47:C1:B7:5B:9B:42:D8:B9:00:37:3C:1C:76:70:05:57:EB:9E
Authority key identifier: E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB
Certificate issuer:       /CN=F36BDB53AF/serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
Certificate serial:       0CBC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
Manifest number:          0CBA
Signing time:             Wed 04 Jun 2025 01:05:44 +0000
Manifest this update:     Wed 04 Jun 2025 01:05:43 +0000
Manifest next update:     Fri 06 Jun 2025 01:05:43 +0000
Files and hashes:         1: 4a66tLHvdNsvpuf2sMhhKwzhv9s.crl (hash: QMXBY3jY1d9UExjK7hEcFpQ8Aw508dCGQDMAVzzdpdU=)
                          2: A9CE075A727B11EBB196600DF8AEA228.roa (hash: 2lOEEWfkem+GQmI+FhB9pSh9A8qYyCMy8BSlQP5EokY=)
                          3: BEBDF2D279B111E6830FCB69F8AEA228.roa (hash: EouzcL5tOeyVAza9Ny4WgUhhP+v0Y2hxWM5v0/DIPwk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3260 (0xcbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BDB53AF, serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
        Validity
            Not Before: Jun  4 01:05:43 2025 GMT
            Not After : Jun  6 01:05:43 2025 GMT
        Subject: CN=683f9be8-9bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:fc:63:9a:06:1e:8f:be:64:76:57:d7:34:
                    ff:89:a5:00:fe:61:13:c1:4b:6f:16:d2:06:6c:13:
                    63:b9:9e:a0:19:f2:ae:a6:d0:31:53:dd:0d:88:ff:
                    c3:07:70:43:57:25:1e:7f:79:28:df:ca:b9:3f:20:
                    51:71:79:10:8b:14:a0:7d:85:a7:85:a0:fa:e7:eb:
                    09:30:5b:6a:d0:99:d4:c2:a7:5c:84:72:0a:b5:c6:
                    bc:1a:80:2b:66:35:0c:7b:f2:4f:6a:1c:16:64:9d:
                    90:79:4a:e0:14:59:e6:f2:4f:42:55:68:57:a1:51:
                    3a:18:33:55:31:cf:a7:18:4d:90:d8:49:11:47:03:
                    c9:09:56:bb:8a:e2:e6:a4:7e:68:dd:cd:26:39:73:
                    df:60:63:1a:b5:1e:16:aa:3e:16:be:4c:b1:b9:d0:
                    ee:bb:00:9c:7a:f0:d9:c8:94:19:92:5c:61:8e:86:
                    b2:63:f6:1b:5b:97:a2:32:0e:4a:6c:e0:dd:40:70:
                    dc:6a:b4:52:87:f3:56:00:4b:30:dd:38:8e:3a:69:
                    d7:42:06:a0:08:81:46:a5:f3:66:69:98:ad:1a:08:
                    50:d7:ad:2c:3f:58:b9:6a:a1:cc:ef:82:d2:f3:70:
                    f4:96:80:6f:37:23:c5:67:18:49:71:70:1b:e3:73:
                    c6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A2:47:C1:B7:5B:9B:42:D8:B9:00:37:3C:1C:76:70:05:57:EB:9E
            X509v3 Authority Key Identifier:
                keyid:E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:bc:82:7e:38:27:ae:22:8c:46:d4:ac:b1:17:68:d3:3d:
         5a:eb:93:33:43:e3:5d:6d:67:23:53:39:ad:59:41:7e:bc:07:
         a2:de:d4:ec:5d:5f:2f:55:d6:02:11:7c:b3:ce:e2:a5:03:89:
         e8:14:98:c6:6d:19:01:68:3e:cb:34:17:c6:e7:e2:30:87:c6:
         69:72:64:da:4d:d4:d6:fe:66:c1:ca:81:b6:80:e1:13:2f:2a:
         cb:b2:6d:c4:bd:4b:db:42:83:dd:a3:80:0b:82:5d:e3:4f:c1:
         d4:31:75:ef:dc:ce:15:2e:80:85:d5:48:62:ad:df:01:e6:0c:
         24:cd:7b:d1:9b:08:b1:cc:c9:05:1e:4d:5e:3e:7a:20:e0:db:
         bb:cf:1a:a8:13:74:3a:0b:c3:d6:61:d1:6f:ef:80:35:0b:c5:
         6f:91:20:71:fc:75:fd:39:e0:e2:5e:62:1a:67:37:10:cc:a0:
         f4:f0:05:dd:ce:b7:98:a0:c5:79:c4:65:8f:26:36:16:4b:ca:
         0f:f1:16:6e:43:f3:28:ec:91:87:b5:ae:35:10:d5:e5:b2:84:
         11:72:9e:c9:9e:dd:de:52:60:cf:2d:9a:3f:c9:94:81:f0:69:
         ba:3a:ec:b4:ed:e9:21:cd:53:c0:d6:a6:95:96:5b:f6:e4:dc:
         ae:fc:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:22:25 2025 by rpki-client