Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
File:                     GowOsmMfWAdEOXlYTg1NL6iFp2A.mft (raw, json)
Hash identifier:          7Jk96TFc5Te/4tfjLrJEB/37EIZufo4tREnxLRLS7jo=
Subject key identifier:   B2:E4:81:3B:8B:AE:C9:BD:FB:67:61:4C:BE:75:EE:D0:D6:9D:C6:28
Authority key identifier: 1A:8C:0E:B2:63:1F:58:07:44:39:79:58:4E:0D:4D:2F:A8:85:A7:60
Certificate issuer:       /CN=F36D3DBFAF/serialNumber=1A8C0EB2631F5807443979584E0D4D2FA885A760
Certificate serial:       11
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
Manifest number:          10
Signing time:             Wed 04 Jun 2025 05:19:50 +0000
Manifest this update:     Wed 04 Jun 2025 05:19:50 +0000
Manifest next update:     Fri 06 Jun 2025 05:19:50 +0000
Files and hashes:         1: GowOsmMfWAdEOXlYTg1NL6iFp2A.crl (hash: sKFm0cct1A8ATJM/rImk275RX2MEe+Ds4OzIT465x98=)
                          2: B9050D40361C11F093254187DAE4EC9C.roa (hash: ykB61aa7osAic1a6NuVWCNXOxA9WGDqvh0GJYCwmQc8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3DBFAF, serialNumber=1A8C0EB2631F5807443979584E0D4D2FA885A760
        Validity
            Not Before: Jun  4 05:19:50 2025 GMT
            Not After : Jun  6 05:19:50 2025 GMT
        Subject: CN=683fd776-c4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:d8:f7:f1:f4:a1:af:5e:a0:e0:71:a6:c2:
                    2b:04:0e:5a:88:30:f9:a9:ae:68:53:82:53:01:e9:
                    30:7e:ba:50:54:76:95:ae:7c:e7:c0:c5:2c:e9:5c:
                    2f:e2:c7:16:23:ab:d2:04:9f:62:be:47:18:23:59:
                    e8:52:a7:da:c2:27:22:f3:ae:43:97:af:31:c3:7b:
                    3b:3a:9e:76:8d:e1:87:41:5a:bf:78:e4:20:a0:2e:
                    e4:19:6d:b2:35:ea:1c:47:fb:83:7a:b6:b5:7c:72:
                    ae:d8:f6:13:45:39:a6:1e:a5:55:45:25:90:f5:84:
                    01:56:dd:98:00:94:f0:e4:60:b2:d1:1b:16:65:34:
                    4c:cb:f9:4c:0b:f6:75:24:05:15:3f:c6:50:65:19:
                    34:f1:a5:ad:d2:fe:e3:0a:6e:84:f8:4a:79:02:a6:
                    2f:9e:29:41:27:45:db:2e:76:f6:77:79:aa:d5:ec:
                    6a:b5:d3:7d:5b:e3:a6:f5:45:12:3d:60:d1:0f:c5:
                    a7:b2:80:fd:65:ce:0d:52:3f:92:28:91:30:a5:05:
                    02:f2:45:ae:5e:fd:1a:1b:59:ab:82:95:2e:74:0f:
                    d4:dc:1b:04:61:80:60:ba:6e:da:f0:01:e9:1a:4a:
                    90:c8:95:22:d2:5d:e6:64:62:7e:2a:c8:7c:c9:98:
                    fe:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E4:81:3B:8B:AE:C9:BD:FB:67:61:4C:BE:75:EE:D0:D6:9D:C6:28
            X509v3 Authority Key Identifier:
                keyid:1A:8C:0E:B2:63:1F:58:07:44:39:79:58:4E:0D:4D:2F:A8:85:A7:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:74:59:0c:e9:55:d8:21:2f:ee:6f:f5:37:74:88:05:59:59:
         c5:9d:61:da:ab:5e:eb:65:7e:b5:1b:76:7e:5b:96:cf:7c:95:
         db:4a:af:c7:63:bd:8b:94:57:8c:68:3d:b5:09:fe:3d:3d:d7:
         93:6f:1f:9d:35:93:5d:4d:78:4b:b9:4d:4e:bb:01:b6:80:2c:
         06:f2:9c:35:b1:9c:1e:c8:17:c2:fc:7e:50:73:81:64:a1:c7:
         b7:23:c8:02:f6:71:3c:f1:05:56:3e:13:36:f9:66:59:59:9f:
         2b:bd:fe:c3:87:9d:30:c3:82:3a:36:8f:41:6a:a5:d3:2c:6a:
         fc:71:25:26:ff:a7:56:d1:b3:a1:9e:15:61:5e:cd:32:99:c9:
         da:9c:e2:39:8d:f7:50:a4:2c:c6:42:f2:7e:d6:17:76:cb:d9:
         e5:10:b6:a4:66:12:40:8e:c4:25:1e:b1:df:9b:dc:1e:2b:d4:
         d0:84:4c:05:6c:a3:a3:89:e0:6d:67:91:e9:e8:c2:90:f8:17:
         27:a9:46:45:3b:21:c7:b2:a9:ec:1b:03:77:67:b4:f0:ff:ca:
         43:7f:21:e1:e9:1c:ba:6e:6a:83:6c:ce:af:1f:01:cd:92:77:
         92:b2:f0:ff:b0:74:75:45:98:5b:56:e3:bc:13:d6:dd:f5:de:
         8b:24:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:02:22 2025 by rpki-client