Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
File:                     FVNwAi5GD0z62wu7AyLauREShM4.mft (raw, json)
Hash identifier:          NFD6FW4pcuvfrjH0+BOM9McUs9/kmFKyTWjps6UlaFc=
Subject key identifier:   F1:F5:5E:7E:A0:E3:56:2B:BF:71:57:87:E7:EC:E8:C3:F5:5B:A7:08
Authority key identifier: 15:53:70:02:2E:46:0F:4C:FA:DB:0B:BB:03:22:DA:B9:11:12:84:CE
Certificate issuer:       /CN=F361E5BDAF/serialNumber=155370022E460F4CFADB0BBB0322DAB9111284CE
Certificate serial:       0EB5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
Manifest number:          0EB4
Signing time:             Thu 03 Jul 2025 00:50:32 +0000
Manifest this update:     Thu 03 Jul 2025 00:50:31 +0000
Manifest next update:     Sat 05 Jul 2025 00:50:31 +0000
Files and hashes:         1: FVNwAi5GD0z62wu7AyLauREShM4.crl (hash: kpp9rTiCMJ2JOt6Bkl2EqvdNp1fwDBbJ9ZhVcfg/bXg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3765 (0xeb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E5BDAF, serialNumber=155370022E460F4CFADB0BBB0322DAB9111284CE
        Validity
            Not Before: Jul  3 00:50:31 2025 GMT
            Not After : Jul  5 00:50:31 2025 GMT
        Subject: CN=6865d3d7-2511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:70:ab:17:1d:63:ce:ae:9b:5f:5c:0b:25:
                    d8:0d:76:97:87:e8:4d:1b:e2:e3:e6:0e:57:e5:91:
                    f5:52:d8:91:84:53:b0:e8:8d:ed:0a:d2:50:b5:d1:
                    6f:1e:dd:b2:ca:7f:af:16:ce:40:16:5f:13:25:ac:
                    51:30:98:08:cd:32:56:38:77:56:ba:d4:4c:73:6f:
                    84:5c:53:d3:07:dc:29:54:86:be:7e:f3:0f:7c:fe:
                    f3:32:61:a0:25:74:db:e8:aa:3e:dd:a0:ce:55:b3:
                    b7:80:0e:ca:f7:7a:7c:ae:63:18:96:37:f6:ba:b1:
                    eb:5c:43:2e:34:cc:4b:c3:f5:79:19:e4:5f:28:23:
                    b6:fa:8d:cd:3d:cf:89:78:1e:5c:3d:60:14:b7:4b:
                    8c:61:ea:cb:ac:fe:59:75:88:fe:36:cf:69:d5:c1:
                    00:31:cc:65:31:85:a6:45:49:39:35:29:90:a9:02:
                    1e:9d:cf:a4:f5:aa:0f:e5:6c:9f:96:ee:a6:23:be:
                    52:a7:15:f7:69:a5:0d:77:a3:e8:f6:f9:24:ce:c5:
                    b4:fe:e3:e8:e4:4e:d5:51:23:49:cd:81:e1:48:f0:
                    b1:51:3e:b7:ab:a8:b0:bf:e7:72:12:73:b7:e5:0c:
                    3e:0b:a8:00:5d:6c:84:44:44:83:4a:97:ab:4d:a2:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F5:5E:7E:A0:E3:56:2B:BF:71:57:87:E7:EC:E8:C3:F5:5B:A7:08
            X509v3 Authority Key Identifier:
                keyid:15:53:70:02:2E:46:0F:4C:FA:DB:0B:BB:03:22:DA:B9:11:12:84:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:23:fe:93:e4:b8:ff:f9:c3:33:47:26:d8:ec:f7:9d:31:14:
         7c:15:67:ea:30:c7:f7:46:1c:fe:0f:32:7d:f9:a7:c3:de:55:
         59:56:12:14:41:eb:5e:8c:d2:37:de:0b:2f:3e:cf:00:26:0a:
         25:45:dd:81:ad:b8:aa:b1:79:3b:7d:08:a1:54:3c:4e:b9:46:
         10:0b:af:65:c5:f1:83:f5:28:53:17:40:2f:dc:ed:11:f4:06:
         99:fe:d5:27:9f:cc:30:5d:c5:c8:fc:a3:19:1b:38:69:1e:53:
         25:af:3a:68:e7:fe:8f:a3:6c:20:20:38:90:c2:10:19:d9:44:
         96:72:51:89:80:fc:db:b8:27:d4:3c:39:59:fd:7e:f0:25:4c:
         1d:4f:aa:8c:51:f3:ad:56:8d:39:26:9f:cd:37:65:5e:5b:eb:
         88:3d:dd:f4:bb:ec:45:29:6e:08:c1:8a:c1:39:b2:e9:c3:fb:
         d5:44:30:1d:56:4c:2a:a0:65:c7:8d:63:06:4c:f0:bb:0b:c4:
         fb:10:74:9c:35:bb:ee:c1:a8:12:35:5f:59:4b:b1:29:3c:f2:
         18:bc:ad:50:cd:9a:17:cb:2d:7f:00:cd:25:53:76:8d:25:a8:
         7e:92:d5:89:1a:c4:1a:ca:f0:32:0b:d5:dd:7a:a2:8c:e3:4d:
         ed:dd:a6:60
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDrUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUU1QkRBRjExMC8GA1UEBRMoMTU1MzcwMDIyRTQ2MEY0Q0ZBREIwQkJCMDMyMkRB
QjkxMTEyODRDRTAeFw0yNTA3MDMwMDUwMzFaFw0yNTA3MDUwMDUwMzFaMBgxFjAU
BgNVBAMTDTY4NjVkM2Q3LTI1MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1JnCrFx1jzq6bX1wLJdgNdpeH6E0b4uPmDlflkfVS2JGEU7Doje0K0lC1
0W8e3bLKf68WzkAWXxMlrFEwmAjNMlY4d1a61Exzb4RcU9MH3ClUhr5+8w98/vMy
YaAldNvoqj7doM5Vs7eADsr3enyuYxiWN/a6setcQy40zEvD9XkZ5F8oI7b6jc09
z4l4Hlw9YBS3S4xh6sus/ll1iP42z2nVwQAxzGUxhaZFSTk1KZCpAh6dz6T1qg/l
bJ+W7qYjvlKnFfdppQ13o+j2+STOxbT+4+jkTtVRI0nNgeFI8LFRPrerqLC/53IS
c7flDD4LqABdbIRERINKl6tNoh77AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8fVe
fqDjViu/cVeH5+zow/VbpwgwHwYDVR0jBBgwFoAUFVNwAi5GD0z62wu7AyLauRES
hM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFFNUJELzlCQUFCNDY0MDYxRDExRTU4QTVGMzg0RUY4QUVBMjI4L0ZWTndB
aTVHRDB6NjJ3dTdBeUxhdVJFU2hNNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZWTndBaTVHRDB6NjJ3dTdBeUxhdVJFU2hNNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUU1QkQvOUJBQUI0NjQwNjFEMTFFNThBNUYzODRFRjhB
RUEyMjgvRlZOd0FpNUdEMHo2Mnd1N0F5TGF1UkVTaE00Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXI/6T5Lj/+cMzRybY7PedMRR8FWfq
MMf3Rhz+DzJ9+afD3lVZVhIUQetejNI33gsvPs8AJgolRd2BrbiqsXk7fQihVDxO
uUYQC69lxfGD9ShTF0Av3O0R9AaZ/tUnn8wwXcXI/KMZGzhpHlMlrzpo5/6Po2wg
IDiQwhAZ2USWclGJgPzbuCfUPDlZ/X7wJUwdT6qMUfOtVo05Jp/NN2VeW+uIPd30
u+xFKW4IwYrBObLpw/vVRDAdVkwqoGXHjWMGTPC7C8T7EHScNbvuwagSNV9ZS7Ep
PPIYvK1QzZoXyy1/AM0lU3aNJah+ktWJGsQayvAyC9XdeqKM403t3aZg
-----END CERTIFICATE-----
Generated at Thu Jul 3 17:31:33 2025 by rpki-client