Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.mft
File:                     EHQgJlqGxb5IELWX5NT_zS4PF5A.mft (raw, json)
Hash identifier:          rQqrYGdnRa37MSUcTK1QTZb63jNtn16I6YKN1cKBhm4=
Subject key identifier:   09:94:FF:55:10:BE:EC:A5:0C:04:98:0D:4A:6D:09:F0:2C:80:75:D7
Authority key identifier: 10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90
Certificate issuer:       /CN=F36FDD86AF/serialNumber=107420265A86C5BE4810B597E4D4FFCD2E0F1790
Certificate serial:       5F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.mft
Manifest number:          5A
Signing time:             Wed 04 Jun 2025 05:15:44 +0000
Manifest this update:     Wed 04 Jun 2025 05:15:43 +0000
Manifest next update:     Fri 06 Jun 2025 05:15:43 +0000
Files and hashes:         1: EHQgJlqGxb5IELWX5NT_zS4PF5A.crl (hash: MS445/myeH5/jb+H03Nv2eM9cJYuUvdqXnu3RqZeybM=)
                          2: 10A0595805BF11F08B582351762E951A.roa (hash: LQJrOYXWlKMFH/S9MJpDgdbBKn/U/CutzSAB+yVYU8I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDD86AF, serialNumber=107420265A86C5BE4810B597E4D4FFCD2E0F1790
        Validity
            Not Before: Jun  4 05:15:43 2025 GMT
            Not After : Jun  6 05:15:43 2025 GMT
        Subject: CN=683fd680-f797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:a0:3b:35:41:41:44:02:53:af:75:34:d3:
                    eb:34:2f:4e:93:c5:01:46:ad:0b:ac:56:0b:7b:01:
                    cf:12:d2:1b:2d:af:9e:da:e6:5b:5f:58:cb:3b:86:
                    f4:c5:dd:17:9a:45:a9:70:07:79:f7:25:f4:77:fa:
                    c0:ed:2f:ab:f7:67:c2:9e:0a:fe:5c:ed:87:5e:8c:
                    28:e4:55:17:e4:81:25:3c:dc:4d:11:7c:9a:30:ed:
                    ee:50:c5:e8:51:8c:7c:ee:b9:41:c0:fd:39:34:d0:
                    46:39:bf:71:0c:2b:15:a3:f6:23:62:f5:dc:53:33:
                    c2:64:33:49:05:b7:08:2d:06:c1:29:6d:53:9b:d4:
                    92:18:bd:bf:54:14:f0:17:1e:00:f3:be:a8:5e:4d:
                    90:3b:16:1a:9e:3a:74:29:23:c0:f1:0e:7d:60:2c:
                    58:7a:18:ad:dd:c1:d0:08:97:60:db:cd:ed:2c:8b:
                    ce:d7:2e:a8:18:2e:70:6c:8a:8b:69:f2:88:1e:e3:
                    22:77:45:25:27:e3:17:38:bf:77:26:1e:82:19:dd:
                    4e:3b:9b:d9:f6:b4:d9:be:10:f8:4c:67:d2:ee:53:
                    fe:86:5c:1d:b1:1e:d6:fd:c2:8d:b2:34:27:37:e7:
                    f9:e1:1d:dd:a2:87:3e:1c:3e:86:4c:f5:af:94:a1:
                    b0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:94:FF:55:10:BE:EC:A5:0C:04:98:0D:4A:6D:09:F0:2C:80:75:D7
            X509v3 Authority Key Identifier:
                keyid:10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0c:d8:4c:06:ce:d9:71:95:9f:6d:4a:73:8d:c4:cd:b6:d1:
         42:99:48:cb:13:92:41:ca:16:20:e9:a1:8e:f9:bd:30:ca:e9:
         85:2f:6f:94:88:2f:4c:32:12:f3:2a:a8:f8:ae:0d:84:45:a1:
         c8:fa:40:57:8c:8d:47:f4:e8:06:a7:07:13:b6:2a:49:0d:0b:
         11:be:16:c7:3d:a9:43:78:37:dd:69:4c:fe:db:28:f9:bb:29:
         40:91:ea:93:b6:88:b2:ab:c0:7c:ea:7d:21:75:f2:15:f5:55:
         27:62:7b:0d:a4:40:21:6d:a7:26:aa:4f:54:87:db:e9:b0:51:
         c1:e1:18:00:d8:4f:62:a8:32:7f:9f:65:8c:5f:e0:ac:3e:9d:
         c1:a5:8b:08:90:99:d7:f8:54:8b:96:3f:56:d5:93:90:f5:b7:
         b0:9e:2e:bc:a5:d0:0e:14:ea:08:90:51:80:6e:38:02:ff:80:
         86:9b:cd:84:d7:90:df:bc:c8:d4:03:d0:31:23:a2:f4:0b:f0:
         57:53:d7:03:98:52:7a:65:e2:3d:d3:73:dd:05:c2:d5:b8:79:
         52:ba:b0:f0:af:bd:2f:9f:bd:70:4e:8a:bd:35:0a:f9:c1:fd:
         9e:67:04:5a:e1:b9:22:44:37:9d:cc:53:c4:f5:14:3b:97:1f:
         e3:e0:25:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:28:01 2025 by rpki-client