Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
File:                     bynJvMAklSDlBwZp-vZmUm98jzA.mft (raw, json)
Hash identifier:          5ne9jhkOdL0sN7+ptJQbJ8Jq7tf+yKJsLRHw9SzeCYk=
Subject key identifier:   28:D7:6B:0A:9E:83:A7:15:55:91:DB:3A:19:98:20:C8:F8:96:36:C3
Authority key identifier: 6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
Certificate issuer:       /CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
Certificate serial:       086C
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
Manifest number:          086A
Signing time:             Sat 05 Apr 2025 01:16:54 +0000
Manifest this update:     Sat 05 Apr 2025 01:16:53 +0000
Manifest next update:     Mon 07 Apr 2025 01:16:53 +0000
Files and hashes:         1: bynJvMAklSDlBwZp-vZmUm98jzA.crl (hash: oSVYdfPL+iJOlT/ysX05fx60/XMAiKMnlnTO5VZmiDs=)
                          2: 931E9D64F1E611EF9602D94F762E951A.roa (hash: pu2PP2qQRpHTl0P12WcevM+SHqavoog2ZfvG3UTYFMs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                          rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156 (0x86c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CRI
        Validity
            Not Before: Apr  5 01:16:53 2025 GMT
            Not After : Apr  7 01:16:53 2025 GMT
        Subject: CN=67f08486-5684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:60:53:63:82:88:58:70:c6:c1:9d:25:a8:
                    81:58:42:38:66:78:57:15:26:7b:10:4f:10:7e:de:
                    72:7b:44:cc:0d:a1:14:ac:18:b7:16:8d:9f:e5:4e:
                    01:a4:d9:85:9e:aa:b5:f3:90:40:75:68:ca:cd:7a:
                    1a:e0:a5:3e:e4:61:82:68:2e:97:e6:e2:1d:72:ce:
                    f6:72:92:4a:cf:41:a0:e9:c0:d4:d9:22:67:56:07:
                    3d:45:ed:64:09:8c:92:bc:67:74:c3:a8:41:2b:9a:
                    94:ce:c4:67:94:f1:89:5b:2a:6a:3c:f2:d8:8e:6f:
                    ac:2c:12:76:c0:bf:92:e5:d9:32:e4:e0:32:49:6f:
                    c1:bc:30:53:3a:c0:fa:a1:e2:39:8f:ba:06:46:25:
                    f9:b2:6c:fc:99:8a:a1:7a:47:f0:30:4f:7f:e4:13:
                    a2:f6:79:01:5d:12:55:0f:b7:13:c2:d5:91:6a:c5:
                    e6:2b:d1:8e:7a:70:67:7e:70:b8:ff:11:ea:12:b3:
                    8b:47:85:9f:33:56:b7:e1:fa:a5:72:da:62:3d:09:
                    12:69:5e:b8:c8:6a:52:0e:0b:72:b5:81:92:7e:4c:
                    e9:2d:1e:31:41:db:c7:2e:05:7f:21:e5:da:4f:38:
                    89:b6:22:bb:66:e6:fb:53:4a:c3:f9:f1:29:e1:c9:
                    4c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D7:6B:0A:9E:83:A7:15:55:91:DB:3A:19:98:20:C8:F8:96:36:C3
            X509v3 Authority Key Identifier:
                keyid:6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5f:86:3e:7b:69:41:88:b8:cc:7e:16:00:18:ef:57:c3:a6:
         45:04:7f:c4:4e:21:27:66:cf:e8:cb:2c:28:c2:34:18:97:c2:
         31:a1:87:75:5f:cd:e1:75:8e:42:5c:99:fd:72:24:89:f4:c5:
         48:68:52:d9:d6:9a:e1:83:a6:47:d5:60:62:4c:cc:4e:1a:e4:
         e7:12:8f:63:bb:fb:94:c6:5a:0f:00:d2:5e:03:4b:1d:72:73:
         e0:69:a9:7f:0f:3d:84:38:bf:61:14:f0:99:8a:da:4a:cc:34:
         67:bd:1a:81:69:d5:2a:8f:1f:b4:11:72:aa:a6:d1:db:8f:31:
         eb:01:32:1b:93:b1:e5:02:7e:77:e8:6c:b7:f1:14:37:75:e9:
         af:3a:75:4e:57:6d:6a:04:3e:6e:23:c3:84:fa:f7:99:16:f9:
         09:07:80:01:54:71:a4:60:6f:ef:18:39:59:e4:47:e6:00:a5:
         e6:fa:3e:18:46:9a:5f:ed:ce:14:3d:eb:e2:37:1c:cf:db:21:
         13:a8:13:d7:90:db:d7:d0:e1:2a:ac:ca:e5:9c:fe:2d:9d:cb:
         3e:9c:3f:31:16:e6:75:aa:95:19:07:f6:6b:c2:c2:16:b4:63:
         14:52:8e:48:8e:e1:e4:4e:fd:8d:b0:d5:c8:18:17:0d:f0:14:
         b3:71:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:14 2025 by rpki-client