Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
File:                     LmD5YTFKp9b93e6durMSN0cF5ss.mft (raw, json)
Hash identifier:          HKL773PEZ1pbbuOcorTeW4+9/n90AUFxuVJH9csB+tg=
Subject key identifier:   9F:7C:2D:AF:2F:24:0E:25:DB:E3:93:C6:E2:92:85:D6:0F:B2:8D:9E
Authority key identifier: 2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB
Certificate issuer:       /CN=F36FC8A0AF/serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
Certificate serial:       0289
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
Manifest number:          0288
Signing time:             Sat 07 Jun 2025 04:03:42 +0000
Manifest this update:     Sat 07 Jun 2025 04:03:41 +0000
Manifest next update:     Mon 09 Jun 2025 04:03:41 +0000
Files and hashes:         1: LmD5YTFKp9b93e6durMSN0cF5ss.crl (hash: NBjdzSpyah6QE+GxZpuqNniR7a/93PPQxnKZNb8zebI=)
                          2: 333100CC56E711EEB82D22544AD9E6FC.roa (hash: iWB0O9f+LLwbK/f70tuWF05AYGrsYH+zV7rCgvpguSc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 04:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC8A0AF, serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
        Validity
            Not Before: Jun  7 04:03:41 2025 GMT
            Not After : Jun  9 04:03:41 2025 GMT
        Subject: CN=6843ba1e-8d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d0:db:cd:13:a1:05:cc:49:0d:0f:18:a8:93:
                    a8:0c:67:85:f9:4e:de:ab:93:a2:58:81:d7:86:9d:
                    65:b5:f0:ba:39:f0:3b:ef:4b:8b:61:84:a1:f3:4a:
                    b1:a0:7c:90:ec:95:b5:17:c6:db:d1:b7:2a:67:9a:
                    97:e5:88:57:d5:b7:ef:14:2b:e9:62:c7:f0:5a:d6:
                    9f:fa:0a:4e:92:c5:73:29:2b:d4:c3:9f:1e:ae:82:
                    09:19:85:31:18:1b:6e:bc:ea:38:04:cc:1d:02:1d:
                    aa:21:54:e4:e8:08:aa:ec:cc:cf:f3:44:50:d4:24:
                    55:5d:d4:c5:9a:f0:00:c3:41:68:86:96:5a:c1:15:
                    27:7f:dc:3d:95:d6:9f:eb:28:08:67:ed:14:7f:fc:
                    bc:17:b3:42:64:68:ee:37:06:8f:e4:94:0f:c7:eb:
                    18:ad:c2:9c:5a:10:4c:e6:83:72:8d:cf:69:33:b0:
                    20:e8:5b:23:08:68:dc:f8:88:81:ff:a8:50:01:8c:
                    b1:45:bc:b2:20:18:7b:de:f6:dd:87:e6:4f:ea:29:
                    3b:d3:23:3a:2b:33:30:8d:ea:9a:da:ad:a7:59:65:
                    fe:28:e5:de:7f:ef:1a:a7:f1:94:8b:c9:3d:a7:1d:
                    7d:95:36:6a:bc:fd:4b:51:af:4f:c3:9a:c0:21:7c:
                    a5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7C:2D:AF:2F:24:0E:25:DB:E3:93:C6:E2:92:85:D6:0F:B2:8D:9E
            X509v3 Authority Key Identifier:
                keyid:2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5a:7d:ee:e4:85:c8:d0:79:94:54:7b:fd:95:c1:3e:ba:50:
         cf:bc:40:19:9b:dc:a0:20:f9:ca:e0:9a:6d:5b:91:e4:e8:ff:
         b0:80:17:c3:9f:0f:5e:5c:35:1e:db:8d:71:20:01:77:d1:e4:
         8f:e0:fb:f3:17:b9:e4:44:9a:23:bc:87:24:7e:30:7d:b9:49:
         82:fe:0d:25:b6:74:5d:0a:83:77:e1:80:f6:a1:cf:be:45:a2:
         cf:42:31:88:d9:df:51:7a:d3:a4:9a:35:2d:c8:5e:60:3c:10:
         db:35:b9:1c:ec:64:f3:72:9a:da:cf:fc:c5:a9:16:9e:ed:78:
         79:40:c2:93:0c:2f:eb:19:65:8d:f3:3f:d8:d5:23:d8:0d:65:
         33:b2:05:3f:a3:ce:1a:52:18:6f:6b:69:b6:89:9e:a9:ac:ca:
         35:38:f7:de:64:e7:f4:0b:c4:ef:e0:26:22:86:f0:a2:2a:92:
         a9:56:63:60:42:ad:b5:03:ce:2b:11:6e:e9:a4:b3:74:af:f2:
         f1:c6:b6:bd:8f:22:6a:e2:b2:24:0c:29:ed:71:50:09:f6:6d:
         9f:1f:b9:57:02:01:57:7c:50:45:1a:71:22:18:ee:48:9a:c0:
         54:92:25:3a:be:5c:f4:fa:40:11:f1:22:0e:5e:23:c2:3d:38:
         f0:18:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:27:33 2025 by rpki-client