Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
File:                     bynJvMAklSDlBwZp-vZmUm98jzA.mft (raw, json)
Hash identifier:          njg/EwbDdpJHkDcD8Ow3UFbBLBzH7J9u0nyO+QGSCBY=
Subject key identifier:   33:27:5F:C5:EE:31:42:71:AC:78:36:CF:1F:1B:34:70:6D:9C:74:56
Authority key identifier: 6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
Certificate issuer:       /CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
Certificate serial:       08AC
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
Manifest number:          08AA
Signing time:             Sat 07 Jun 2025 01:37:15 +0000
Manifest this update:     Sat 07 Jun 2025 01:37:14 +0000
Manifest next update:     Mon 09 Jun 2025 01:37:14 +0000
Files and hashes:         1: bynJvMAklSDlBwZp-vZmUm98jzA.crl (hash: kd/kvPmT6hTPvPrH5KvXmVyTIILVIr7kfuzZFvRy9CM=)
                          2: 931E9D64F1E611EF9602D94F762E951A.roa (hash: pu2PP2qQRpHTl0P12WcevM+SHqavoog2ZfvG3UTYFMs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                          rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CRI, serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
        Validity
            Not Before: Jun  7 01:37:14 2025 GMT
            Not After : Jun  9 01:37:14 2025 GMT
        Subject: CN=684397cb-9aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:84:53:f9:51:69:1d:f1:a4:cd:cf:d0:b2:
                    17:fa:ac:ff:d5:32:88:d5:1b:5a:75:31:87:ea:db:
                    2d:45:be:ea:0f:42:d4:d3:9d:e6:71:96:b7:06:84:
                    f5:a1:79:55:ab:df:ab:d8:ed:34:5d:59:eb:f4:3c:
                    52:6a:a3:4a:c7:c8:9d:1d:17:9c:3f:f1:62:a1:b0:
                    ff:91:44:12:b2:8e:e1:89:e3:f7:7c:d5:48:02:e2:
                    53:ba:5d:e8:a0:a1:f2:d1:25:00:e0:18:6d:f4:85:
                    86:5a:c4:3a:b9:c3:f7:b1:82:70:a1:be:13:30:d8:
                    82:b6:8d:0b:41:ec:06:aa:e9:31:af:ac:b7:a6:97:
                    44:3d:ce:c4:89:65:4e:bc:78:42:49:4f:46:04:f9:
                    c1:88:94:b0:70:e6:00:1e:c6:56:38:0c:15:72:73:
                    37:cc:24:46:ee:12:43:14:b7:12:a4:3a:ee:ae:48:
                    09:fd:b5:8a:78:cc:ac:ac:2a:3e:96:79:eb:7a:51:
                    55:00:98:0e:eb:a1:88:58:67:23:df:62:b6:c0:a2:
                    c4:d0:56:c3:79:d8:85:88:01:d7:34:3c:43:17:ba:
                    83:09:8a:2a:98:8c:5f:4b:81:b9:da:b1:95:16:46:
                    06:e4:4b:a3:11:ca:20:48:22:b7:e6:10:3b:36:b6:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:27:5F:C5:EE:31:42:71:AC:78:36:CF:1F:1B:34:70:6D:9C:74:56
            X509v3 Authority Key Identifier:
                keyid:6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b0:8a:99:0e:96:4c:5c:76:b5:5b:f8:16:b8:d5:48:10:64:
         97:9e:0e:15:5a:ef:41:61:ed:79:62:3f:a9:81:6f:e5:11:1d:
         56:0c:99:f3:81:86:51:e7:e4:4d:6b:47:e3:28:a3:84:82:95:
         1e:87:18:6d:dd:e4:f0:cc:d3:99:ac:7b:5c:86:2b:d5:11:b5:
         50:d9:dc:9a:e2:40:6f:0a:75:6d:11:72:38:72:f4:2a:f7:83:
         f0:1f:e9:f0:c8:9c:42:f3:37:44:2a:f2:af:d5:dc:ee:32:25:
         a8:29:27:61:50:a9:e3:a4:04:9d:e5:14:a7:20:54:4f:25:6d:
         f7:ae:86:4c:0f:8c:4b:39:f7:79:62:39:58:8c:a4:08:6b:1e:
         28:46:fa:e1:9d:6b:91:cc:22:71:1a:7a:ab:23:c8:bb:4a:fb:
         42:bb:2f:b6:2d:ce:78:75:6c:01:ee:7f:32:8c:58:17:e0:b3:
         3a:45:aa:b2:e8:94:40:96:94:e8:81:64:1a:94:00:0d:75:1c:
         8e:7c:e8:91:5b:8f:1c:6e:ab:1e:56:d7:d2:f5:35:45:46:c6:
         12:42:c2:df:ee:27:f0:f9:bc:da:cf:f4:ab:96:8b:e0:20:54:
         d3:46:f6:2d:9a:62:08:bb:a5:14:c3:e4:09:78:af:0d:dc:de:
         f6:76:8f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:04:00 2025 by rpki-client