Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File:                     Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier:          9GENE/COqZwauvOafHCLOfOH0TV8xVTSdCyhGvCTUs0=
Subject key identifier:   01:AB:50:11:13:88:FE:FF:81:2A:9A:B7:EF:F6:5B:E0:75:6E:75:B9
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer:       /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial:       01B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number:          01B1
Signing time:             Wed 02 Jul 2025 04:33:26 +0000
Manifest this update:     Wed 02 Jul 2025 04:33:25 +0000
Manifest next update:     Fri 04 Jul 2025 04:33:25 +0000
Files and hashes:         1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: V/US5ZB7IMJ9sj+FzECFhPQxJ87doiWI60RRTHx6sP0=)
                          2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 04:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
        Validity
            Not Before: Jul  2 04:33:25 2025 GMT
            Not After : Jul  4 04:33:25 2025 GMT
        Subject: CN=6864b696-14b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:41:85:c7:e4:a1:6b:b7:63:ed:28:04:70:06:
                    6d:56:ee:b0:e3:c0:26:13:eb:b2:ba:c5:60:13:9c:
                    08:60:66:46:44:70:41:4c:80:56:4c:78:ce:8a:81:
                    b2:c0:4c:62:34:5b:1f:9f:46:24:b4:a0:9a:a4:66:
                    1a:86:67:e3:cc:e8:e9:d8:3b:f1:58:79:4e:b9:bc:
                    a5:cd:5f:13:0a:c2:7b:9d:10:71:14:16:70:45:f4:
                    40:e3:1e:e5:27:bd:b8:88:c4:de:58:17:c5:25:63:
                    44:d4:1a:03:90:b2:b8:1b:4c:30:e2:c2:05:a0:c5:
                    4a:81:1f:c2:aa:60:56:c4:b2:88:7d:52:af:7a:0b:
                    b5:54:aa:33:f0:91:2b:1c:94:99:eb:68:6e:09:d6:
                    05:ee:95:57:e6:94:e9:b5:b1:90:f2:e8:97:5d:15:
                    d3:99:fd:0a:ca:58:52:20:24:a5:2e:cf:20:44:6c:
                    7e:bc:ce:e1:76:33:ba:f4:22:e3:ad:a3:96:9f:dd:
                    72:23:e1:0a:14:65:96:e4:c0:cc:7e:76:7a:30:7f:
                    61:ec:ad:d3:0b:0c:b5:03:ea:1b:20:e5:04:9b:2e:
                    95:e1:73:cb:f8:27:ab:07:31:8d:4a:96:f5:2b:a2:
                    10:d6:41:fe:13:74:55:cf:5c:ad:e7:27:85:a3:ab:
                    48:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AB:50:11:13:88:FE:FF:81:2A:9A:B7:EF:F6:5B:E0:75:6E:75:B9
            X509v3 Authority Key Identifier:
                keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b3:1f:8e:16:cc:6d:23:62:7d:0f:2f:79:6e:8d:72:e7:82:
         b7:a4:38:f7:68:3f:40:c4:9b:6c:87:54:82:5b:df:aa:e8:63:
         62:0a:db:fa:58:2e:14:78:12:71:98:98:cf:8d:f6:e0:5f:96:
         e2:2c:00:e0:e7:a2:08:57:6a:21:4c:7d:27:d6:cf:17:21:bd:
         0d:c0:31:bd:ba:a4:82:17:a6:e5:54:59:5e:7a:e7:1b:c7:41:
         ea:a9:bb:0e:91:48:b1:07:54:25:fe:77:ba:06:be:a1:95:cb:
         3e:e7:2f:5b:9e:5a:9b:b1:19:30:e1:26:c1:5a:16:eb:ad:5a:
         c5:5c:a3:df:37:70:e6:bd:10:e9:3d:76:ae:7f:c3:66:90:51:
         b0:45:6d:f2:e9:f2:f2:5e:51:4d:3f:f8:e6:e0:e0:64:af:73:
         93:2e:3e:39:a8:f0:e0:3e:8a:5e:c4:0f:e6:c1:b6:fe:24:c9:
         1f:a1:e1:50:25:75:19:2a:25:f8:9b:a7:bc:8d:e6:4b:a0:e7:
         7c:0a:40:90:66:7e:65:61:d8:18:15:21:a8:e6:3e:5f:4c:b0:
         b8:d3:81:7a:82:3e:e9:71:bf:f7:16:9a:bb:61:c8:ce:d6:97:
         90:a1:9c:9a:71:e9:8b:57:66:d7:c3:21:5b:df:48:ac:7a:c8:
         59:e7:b4:04
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgzMjFBRjExMC8GA1UEBRMoMzlCRTc2Qjg3NjU3QjA5N0RDRUVBM0I0MEQ0NDUy
QTI0RTU2MDM4MjAeFw0yNTA3MDIwNDMzMjVaFw0yNTA3MDQwNDMzMjVaMBgxFjAU
BgNVBAMTDTY4NjRiNjk2LTE0YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrQYXH5KFrt2PtKARwBm1W7rDjwCYT67K6xWATnAhgZkZEcEFMgFZMeM6K
gbLATGI0Wx+fRiS0oJqkZhqGZ+PM6OnYO/FYeU65vKXNXxMKwnudEHEUFnBF9EDj
HuUnvbiIxN5YF8UlY0TUGgOQsrgbTDDiwgWgxUqBH8KqYFbEsoh9Uq96C7VUqjPw
kSsclJnraG4J1gXulVfmlOm1sZDy6JddFdOZ/QrKWFIgJKUuzyBEbH68zuF2M7r0
IuOto5af3XIj4QoUZZbkwMx+dnowf2HsrdMLDLUD6hsg5QSbLpXhc8v4J6sHMY1K
lvUrohDWQf4TdFXPXK3nJ4Wjq0g3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAatQ
EROI/v+BKpq37/Zb4HVudbkwHwYDVR0jBBgwFoAUOb52uHZXsJfc7qO0DURSok5W
A4IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MzIxLzg5NEREOEEwMERGQzExRUY5NEFBMTg1QjAxNzAwMUIxL09iNTJ1
SFpYc0pmYzdxTzBEVVJTb2s1V0E0SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09iNTJ1SFpYc0pmYzdxTzBEVVJTb2s1V0E0SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODgzMjEvODk0REQ4QTAwREZDMTFFRjk0QUExODVCMDE3
MDAxQjEvT2I1MnVIWlhzSmZjN3FPMERVUlNvazVXQTRJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgsx+OFsxtI2J9Dy95bo1y54K3pDj3
aD9AxJtsh1SCW9+q6GNiCtv6WC4UeBJxmJjPjfbgX5biLADg56IIV2ohTH0n1s8X
Ib0NwDG9uqSCF6blVFleeucbx0HqqbsOkUixB1Ql/ne6Br6hlcs+5y9bnlqbsRkw
4SbBWhbrrVrFXKPfN3DmvRDpPXauf8NmkFGwRW3y6fLyXlFNP/jm4OBkr3OTLj45
qPDgPopexA/mwbb+JMkfoeFQJXUZKiX4m6e8jeZLoOd8CkCQZn5lYdgYFSGo5j5f
TLC404F6gj7pcb/3Fpq7YcjO1peQoZyacemLV2bXwyFb30iseshZ57QE
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:35:29 2025 by rpki-client