Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
File:                     OV0yW2nyp6M_rgog4SIm0pgbsF4.mft (raw, json)
Hash identifier:          Zkt8F6eB8Gze1SIKBYpZXse0/erY6+t6yLLQg14Rkfg=
Subject key identifier:   41:09:23:CA:71:92:40:62:5F:22:25:AA:53:D3:4E:52:92:A0:56:1D
Authority key identifier: 39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E
Certificate issuer:       /CN=F366AE59AF/serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
Certificate serial:       01CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
Manifest number:          01CF
Signing time:             Tue 01 Jul 2025 04:30:06 +0000
Manifest this update:     Tue 01 Jul 2025 04:30:06 +0000
Manifest next update:     Thu 03 Jul 2025 04:30:06 +0000
Files and hashes:         1: OV0yW2nyp6M_rgog4SIm0pgbsF4.crl (hash: tQHo37r/Ru7UP8dKi6fvGuBTvYh5S/kWj8BlpAvAfyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 04:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AF, serialNumber=395D325B69F2A7A33FAE0A20E12226D2981BB05E
        Validity
            Not Before: Jul  1 04:30:06 2025 GMT
            Not After : Jul  3 04:30:06 2025 GMT
        Subject: CN=6863644e-fee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:a6:33:2a:8c:f5:2b:a8:11:57:4b:5e:34:
                    ab:57:61:60:16:6f:6a:b3:78:11:6a:2e:0a:1a:e7:
                    38:ab:2a:29:e8:5a:9a:9a:01:b0:0a:fb:e2:92:07:
                    02:e6:c8:79:73:14:e3:8e:af:fc:15:e3:6f:cc:68:
                    e9:90:7f:fa:d1:8b:3f:5f:40:7f:4c:14:b6:f9:91:
                    6a:f3:db:40:4b:4a:5e:3e:a5:af:86:41:07:55:0b:
                    c3:3f:a1:7f:cc:e0:83:3b:7a:1a:e0:cf:74:cd:fd:
                    82:28:c5:48:06:de:dd:ea:78:a9:45:81:c2:72:5a:
                    0d:b2:54:59:c2:fd:9e:c1:43:9a:76:fb:3e:5a:e4:
                    59:9e:ef:b1:3d:e7:70:2b:33:01:1e:54:e4:68:00:
                    6c:74:5c:a6:37:fe:20:48:25:4d:4a:8e:7a:6d:5f:
                    fe:59:70:54:6e:c7:aa:da:31:af:03:a7:a9:57:8e:
                    18:a2:57:69:f1:88:88:eb:43:59:c9:76:dc:3c:6e:
                    12:4b:25:2c:2e:2e:7d:d1:aa:02:2e:95:57:af:7c:
                    e8:5a:ca:b7:62:58:52:45:c8:26:66:35:0f:9c:e7:
                    3a:2c:47:8b:4d:5e:79:2e:2b:c7:c4:6b:35:c9:7a:
                    c7:2a:39:6a:ec:7c:09:b4:b1:25:db:2a:78:4d:48:
                    f9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:09:23:CA:71:92:40:62:5F:22:25:AA:53:D3:4E:52:92:A0:56:1D
            X509v3 Authority Key Identifier:
                keyid:39:5D:32:5B:69:F2:A7:A3:3F:AE:0A:20:E1:22:26:D2:98:1B:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OV0yW2nyp6M_rgog4SIm0pgbsF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/E029D1E6F57511EEA87EEF4F775412E6/OV0yW2nyp6M_rgog4SIm0pgbsF4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8b:1c:34:75:1a:2b:8b:a9:72:4b:2d:4d:51:ee:a1:62:7a:
         f5:db:b2:d8:89:e9:9b:29:96:73:0c:23:ee:79:27:7e:06:45:
         4f:4b:76:d5:4b:e9:e8:45:9b:ab:ac:23:87:23:dc:9b:45:de:
         3e:10:72:7d:6f:8f:73:3e:8c:b3:58:22:95:b6:3c:d2:67:bb:
         aa:8d:1c:1a:a6:54:e7:3b:3b:ed:a7:e6:76:fb:d1:b7:49:c6:
         f7:f3:e6:c8:de:56:d6:4c:33:25:5f:e2:2d:38:83:a7:86:2b:
         96:6c:55:73:a6:c6:19:84:06:44:25:a3:15:7f:42:b3:c5:e6:
         da:63:8b:85:3a:6f:09:34:69:17:2d:11:bb:c7:48:f2:0f:15:
         a4:36:98:fd:88:dc:98:ee:a1:8f:ec:ab:d4:34:13:b8:82:ab:
         4a:8f:df:4d:bc:6a:c1:1f:02:a1:0c:e7:f9:e4:37:ae:da:eb:
         bc:0b:11:ef:12:c8:5d:8d:92:e9:c5:ac:bf:e6:d1:fa:1c:32:
         de:aa:e8:22:64:6e:89:c0:34:75:8d:7d:c8:dc:83:44:8f:09:
         58:fb:88:fe:6d:01:11:85:b3:d4:c6:a1:d7:7b:f5:57:91:6c:
         df:46:ef:65:0d:cc:eb:f9:b2:47:fc:c0:99:e6:a8:d4:46:9a:
         7f:30:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:08:22 2025 by rpki-client