Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
File:                     RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft (raw, json)
Hash identifier:          y5ns8qATKmRHWcNx9pQdCrkes2pjaoB2LZZJWvrNusI=
Subject key identifier:   80:FA:29:03:C5:0D:4D:74:35:81:2E:9F:F0:55:BF:BB:3E:B2:95:ED
Authority key identifier: 45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2
Certificate issuer:       /CN=F36E3941AF/serialNumber=456931501964CDB884B1475B56D68F3069C22AF2
Certificate serial:       02E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
Manifest number:          02DD
Signing time:             Sun 27 Jul 2025 04:02:56 +0000
Manifest this update:     Sun 27 Jul 2025 04:02:55 +0000
Manifest next update:     Tue 29 Jul 2025 04:02:55 +0000
Files and hashes:         1: RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl (hash: u8t8Hgd6SGaUEq2rka3kG7/+ZIXbirhm9i1RgXY/wKI=)
                          2: 0C2FE94C570611EEAC1023344AD9E6FC.roa (hash: 7/VCkuO1MJrUrePvzuQCDljF/ayH1j149oaeTB6AkuI=)
                          3: 90DFE62C13B311F0B457F24A762E951A.roa (hash: F0Iu3tARZ4V2QdTChm0buYcD4/1ZoSlFs0g6nMo5b0Y=)
                          4: 1B18370013B311F0AC6E944A762E951A.roa (hash: NVMBrbFJ6GO3CdHpjCKo/lPShcbNb+afYHl6HdgnJCI=)
                          5: EC716680DFF811EFADCBE781762E951A.roa (hash: oPKoX17XBcVWDruW8njPRytKKsu2yxLVq+E1bf3Vds0=)
                          6: 90BC8EA4FEA911EEA69C406E017001B1.roa (hash: UwU5AHQOAS7CU+i+ADd/wfQ4IXSkFtvjT7nzo/QGiMQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3941AF, serialNumber=456931501964CDB884B1475B56D68F3069C22AF2
        Validity
            Not Before: Jul 27 04:02:55 2025 GMT
            Not After : Jul 29 04:02:55 2025 GMT
        Subject: CN=6885a4f0-c69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:13:1a:92:45:51:b2:4e:0f:ad:03:f4:fa:
                    1b:f2:35:64:b5:83:28:0b:de:25:80:d7:21:f9:41:
                    e3:70:ae:82:58:97:9f:e6:e8:ab:ad:59:d7:36:49:
                    cd:37:72:03:56:3c:55:d4:de:a6:0a:da:ec:ac:f9:
                    48:4f:d1:e6:b7:fc:d3:41:08:47:33:61:0c:5b:2d:
                    fc:44:8e:34:d7:7a:c4:f3:6c:5e:33:bb:a2:ff:6c:
                    66:21:5d:31:2d:03:56:6f:ec:79:06:e3:e4:5e:eb:
                    60:11:cf:5c:d3:f8:43:e2:04:d9:7d:f9:bb:6c:23:
                    48:b0:c4:ce:a7:97:95:da:bc:7f:30:67:58:98:f6:
                    59:ed:7d:cb:44:de:1d:56:da:66:e9:36:dd:7e:3d:
                    63:8d:8d:09:62:a3:0e:61:06:f2:3f:d6:cd:83:31:
                    5a:85:d5:b6:10:4f:28:db:79:3b:ff:d0:06:29:cf:
                    79:52:88:49:e4:f4:eb:cc:39:de:d9:56:04:58:9c:
                    c5:be:eb:ec:76:eb:74:3c:4b:6e:c9:3c:54:a2:01:
                    52:94:b1:c3:e9:30:78:f7:a6:78:ce:9b:47:82:5c:
                    7a:c6:13:81:35:0c:ad:51:53:de:3a:49:2d:01:3b:
                    95:fa:6c:d4:3c:71:91:c7:a0:e8:79:d0:a3:76:38:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FA:29:03:C5:0D:4D:74:35:81:2E:9F:F0:55:BF:BB:3E:B2:95:ED
            X509v3 Authority Key Identifier:
                keyid:45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4d:ae:fe:2a:d8:96:8b:ef:81:d0:30:c2:d5:77:35:e1:06:
         c2:81:07:76:3f:e7:e4:d8:f4:61:39:46:f9:c4:d7:37:b3:12:
         00:e0:5c:99:26:e8:52:22:53:c1:69:27:b5:08:8b:32:a8:af:
         c7:e6:05:89:ae:78:5f:54:f2:d2:3e:7d:e7:5b:33:37:f9:c8:
         2a:a2:30:b9:b2:32:2b:0a:4f:5e:f1:08:96:4d:7a:6b:4d:67:
         a4:f4:03:2e:85:0b:91:3a:7e:6d:75:60:b7:59:bb:fd:73:8f:
         f4:6e:56:82:d9:d9:9a:44:e4:9c:11:f7:13:11:87:b6:2a:e8:
         94:27:6b:8c:a8:9d:6e:5c:31:f7:52:eb:02:6a:70:f7:ca:f5:
         69:42:69:4a:bf:93:fe:41:70:56:bd:b3:37:6e:d7:d9:d9:04:
         35:23:a3:31:a2:91:ec:ad:40:c9:d2:d0:b6:d1:84:e8:fa:12:
         64:10:ad:19:11:8f:b0:59:47:2c:4e:9e:e8:35:25:b8:e2:dd:
         11:28:c9:7b:fd:63:15:f6:a9:16:3a:19:2b:a8:7c:a4:76:8f:
         e6:8d:e1:34:85:e2:f1:1b:9b:f3:c3:de:9e:3e:a1:c2:f5:58:
         4f:8c:75:35:78:97:84:bd:cb:ea:99:64:09:62:2f:3a:f0:ed:
         c2:96:a8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:46:36 2025 by rpki-client