Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
File:                     iO95xkHBXokYHnKdSKj-bnPOJac.mft (raw, json)
Hash identifier:          ZZl0+rEnWKyg9xD//RLx4uVo6F0LD8UBadOWcQ//Fzc=
Subject key identifier:   84:6E:2A:E6:B2:2E:C7:EB:B0:35:83:69:33:4C:FA:C9:B2:86:19:46
Authority key identifier: 88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
Certificate issuer:       /CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Certificate serial:       019F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
Manifest number:          019E
Signing time:             Sat 05 Jul 2025 04:36:36 +0000
Manifest this update:     Sat 05 Jul 2025 04:36:35 +0000
Manifest next update:     Mon 07 Jul 2025 04:36:35 +0000
Files and hashes:         1: iO95xkHBXokYHnKdSKj-bnPOJac.crl (hash: GOOErhXixyuTSkzCtiePQr4Qea5Q8UuythUnVbHi7cY=)
                          2: AB00E3321E9D11EFAD20E30A7DDC24C2.roa (hash: jczqBl4rLfWV3D8zqP6XHofdCAQZu3xZe0wHy+hc42o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Jul 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C396AF, serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
        Validity
            Not Before: Jul  5 04:36:35 2025 GMT
            Not After : Jul  7 04:36:35 2025 GMT
        Subject: CN=6868abd4-a0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:2d:e6:ff:ff:5c:3b:cf:87:8c:3a:6d:ef:
                    14:ed:6a:aa:a5:5d:8f:ae:c9:67:eb:21:9c:98:2a:
                    7c:1f:56:45:ae:3e:7f:fb:ff:75:b3:67:16:07:3c:
                    c9:d1:57:0d:83:c5:f6:08:8d:4c:89:52:ad:ca:c6:
                    4e:9a:61:a4:a0:ac:9e:8e:d3:15:df:13:12:e4:f6:
                    46:22:c0:2c:3c:63:4d:4b:0e:ce:e1:de:8a:ea:e1:
                    9e:cd:7d:8d:ad:06:af:08:d2:c9:b0:dc:17:f8:2a:
                    57:e0:0c:b2:f7:9a:e8:96:15:3f:91:da:c1:2a:e0:
                    9f:81:01:b2:34:b3:dd:f5:4f:fd:08:31:5e:e9:15:
                    45:34:3f:a0:b1:52:c6:99:47:e1:c3:1e:27:cf:12:
                    2e:c5:e6:e1:55:64:cd:3c:b4:f3:0e:9f:b5:62:61:
                    92:13:c1:34:ce:46:65:6a:fa:c9:70:b6:75:08:f5:
                    34:8b:ba:80:39:fd:7b:51:04:50:71:c3:44:0a:06:
                    d8:85:59:7f:80:bd:6e:ea:52:e8:20:29:a3:18:f7:
                    87:91:ce:f9:f7:7a:3b:8d:da:52:6d:33:a4:9a:98:
                    96:3e:a0:93:1b:80:21:8b:5d:ee:e5:6e:53:29:b8:
                    cb:b6:25:92:2f:8e:15:df:a6:f7:7b:cc:e2:de:9e:
                    d0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6E:2A:E6:B2:2E:C7:EB:B0:35:83:69:33:4C:FA:C9:B2:86:19:46
            X509v3 Authority Key Identifier:
                keyid:88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:fa:15:53:d1:5e:94:eb:d6:f4:0d:98:00:0f:88:0b:cf:0f:
         f0:01:27:8f:5a:a2:60:7d:ec:d3:f2:09:39:bf:68:05:fb:42:
         02:03:37:e4:ba:ef:44:9c:e9:ec:74:f6:7a:2f:58:87:56:b6:
         70:68:92:e5:29:0f:8a:71:3b:bc:43:41:08:f5:09:df:97:a1:
         b9:f7:e2:9e:34:ce:12:87:0d:67:ed:02:c2:44:9b:ac:93:df:
         4b:44:a8:7b:20:09:b9:80:81:99:89:10:3c:4b:a4:b2:2d:e6:
         72:b8:cc:59:45:f1:59:3f:c3:c5:bb:2c:e8:c2:7b:2c:76:15:
         87:28:f1:e3:1c:c9:8a:9d:f6:17:75:db:5e:6d:af:f2:8f:38:
         dc:ad:6c:31:8e:9c:29:21:f6:fd:79:5b:15:39:99:db:b0:f6:
         9a:d6:d8:e5:70:d8:18:23:6d:81:c3:a5:65:ea:88:2c:a8:8c:
         43:3b:f0:f3:89:88:88:bc:5f:07:5e:10:85:dc:14:7d:10:5f:
         09:e3:45:99:2c:79:04:6b:dc:dd:be:4a:ad:de:aa:e6:ca:95:
         23:d8:e4:d1:1c:2b:1c:58:bd:f9:4c:85:df:06:2e:95:a0:5d:
         ed:6d:79:07:fe:5c:27:ee:49:02:c7:ee:21:ec:87:48:1f:22:
         af:96:b7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:56:36 2025 by rpki-client