Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
File:                     OwiJEFfOiidoEQQFlcyqxAjfUaY.mft (raw, json)
Hash identifier:          rQ0vYgz4cVeXP3eGmdg7Lf8DLN0pp8TMfyE4CJt8ZxY=
Subject key identifier:   5B:9A:47:28:76:67:42:7E:11:5E:FA:80:B8:44:63:25:BE:87:E5:01
Authority key identifier: 3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Certificate issuer:       /CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Certificate serial:       0586
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
Manifest number:          0585
Signing time:             Sat 23 Aug 2025 02:39:42 +0000
Manifest this update:     Sat 23 Aug 2025 02:39:41 +0000
Manifest next update:     Mon 25 Aug 2025 02:39:41 +0000
Files and hashes:         1: OwiJEFfOiidoEQQFlcyqxAjfUaY.crl (hash: k6OoG1EeTSMHbgnP/vsIx0kK1TXCExNrPbMjqXVvJvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679CB8AF, serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
        Validity
            Not Before: Aug 23 02:39:41 2025 GMT
            Not After : Aug 25 02:39:41 2025 GMT
        Subject: CN=68a929ee-92e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:57:2f:17:0b:f0:23:1a:f3:37:bf:5c:95:
                    2d:29:bc:86:6f:f3:a4:48:ea:29:4a:63:7e:e3:20:
                    11:f7:66:5b:cb:42:de:47:5f:05:66:6c:c5:5e:47:
                    b6:86:ea:27:83:8a:ab:04:fd:d4:1d:aa:80:ad:09:
                    a2:a3:d6:99:cf:c7:af:63:92:a3:d2:e4:4f:3c:c3:
                    0f:85:6f:7b:5f:95:86:6d:a1:ac:00:b0:9c:3b:35:
                    cb:21:fc:ca:7b:7e:2f:2f:08:d2:4b:61:20:34:fc:
                    c1:ab:5e:d7:5a:ec:bd:e6:e8:e4:ec:cc:34:a8:e7:
                    84:02:0d:e5:82:d1:8c:71:94:1c:41:b0:c0:0b:36:
                    c7:95:e0:1a:0b:bc:a6:a4:55:96:3e:08:25:12:a3:
                    65:dc:4d:a0:d4:e6:d9:a6:eb:f9:0d:a0:33:2f:20:
                    7c:67:dc:00:6c:c2:dc:a9:37:0f:ce:d4:f3:d6:95:
                    91:a1:27:6a:fb:22:41:e1:81:dc:9d:c2:a8:f2:16:
                    5e:65:b9:bf:95:83:3f:9e:b0:83:cc:1b:97:d3:fe:
                    c3:ac:ea:33:d1:62:ab:fd:38:bd:4f:ea:3c:13:a7:
                    68:42:83:e0:76:02:02:d4:0b:a7:58:84:5c:3e:35:
                    aa:e2:e2:25:dd:51:b5:60:12:f4:d5:08:6d:3b:e9:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:47:28:76:67:42:7E:11:5E:FA:80:B8:44:63:25:BE:87:E5:01
            X509v3 Authority Key Identifier:
                keyid:3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d9:cc:1b:17:5e:d2:21:88:e9:11:bb:b6:68:9d:e7:a6:67:
         68:b8:73:4b:a8:ea:72:c7:2e:7c:d1:c8:08:e7:eb:12:06:6c:
         fc:2b:ea:6d:2f:20:44:31:35:42:c0:4b:57:17:49:c3:79:af:
         68:be:b1:a6:b4:f8:6b:5f:db:82:4e:69:ab:6d:e8:63:a1:3f:
         b8:2d:1c:a5:65:bd:10:ea:b3:34:3c:ef:6a:c5:aa:a4:09:05:
         1a:d6:b7:3d:69:cf:86:50:a2:68:c9:c4:68:6f:3e:dc:41:cc:
         a6:3b:fc:64:ac:fc:cd:ad:ff:60:c2:99:09:d2:57:33:ba:d6:
         0c:97:35:2a:f8:50:48:38:45:16:f5:d2:f6:a3:cd:d0:13:7b:
         49:d7:2e:5f:8e:fd:6a:7c:d1:6d:d2:ea:ac:2a:e4:60:52:a3:
         e1:ac:94:50:0f:80:a4:36:24:89:32:ff:cb:53:c6:e2:f6:67:
         0a:ba:b4:7c:e1:ba:ca:f8:f3:58:73:43:8d:4d:21:c8:62:4e:
         06:9a:9d:67:73:bc:0c:c5:0b:c2:f9:7e:10:6e:54:5f:01:9d:
         c8:5b:58:ca:92:79:ba:f9:98:85:f4:c2:42:76:ca:db:ec:44:
         aa:5d:b2:0b:2b:b8:58:59:54:5a:7d:53:1e:03:d8:da:57:88:
         6f:02:16:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:16:02 2025 by rpki-client