Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
File:                     w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft (raw, json)
Hash identifier:          HA4GT+DJCuE04ad9a/rWIlOb31oZwo31ikKvMByYZ/c=
Subject key identifier:   2D:B3:C4:ED:1A:98:95:55:86:04:BC:43:81:E9:F7:0E:B0:19:66:81
Authority key identifier: C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C
Certificate issuer:       /CN=F36897F5AF/serialNumber=C39A32407B4BD96E283760C7155726E6D0D7199C
Certificate serial:       066E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
Manifest number:          066B
Signing time:             Sat 23 Aug 2025 02:11:59 +0000
Manifest this update:     Sat 23 Aug 2025 02:11:59 +0000
Manifest next update:     Mon 25 Aug 2025 02:11:58 +0000
Files and hashes:         1: w5oyQHtL2W4oN2DHFVcm5tDXGZw.crl (hash: lxYWcIunjbtrflMKldlKK1ppAKXGDEv7jh+jLCxTBHg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646 (0x66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36897F5AF, serialNumber=C39A32407B4BD96E283760C7155726E6D0D7199C
        Validity
            Not Before: Aug 23 02:11:59 2025 GMT
            Not After : Aug 25 02:11:58 2025 GMT
        Subject: CN=68a9236f-066a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:55:8a:df:46:86:97:79:ca:ef:1d:4e:51:
                    78:6b:3e:ad:22:2f:cd:d9:1a:cb:2e:9a:48:b0:64:
                    ba:a7:c5:25:63:49:3c:2c:9f:d6:71:0a:8f:84:f5:
                    af:03:ae:e2:fd:88:46:1a:ae:b1:31:75:89:95:1a:
                    8c:92:88:ab:cb:0d:2f:35:45:e2:a4:ba:f1:fa:de:
                    45:f9:29:a2:61:22:8a:e5:72:ea:8f:4d:a3:b0:ca:
                    59:21:ea:83:98:4e:92:46:5a:78:05:bf:9c:bd:a6:
                    60:ca:37:2f:00:63:c1:20:56:4e:91:35:c3:68:07:
                    0b:4d:95:18:95:e2:af:98:ad:8e:a5:5e:cf:b2:0d:
                    ac:01:63:24:69:8a:8c:6f:3e:eb:df:76:f4:4d:81:
                    ed:c3:04:82:bf:bb:77:18:8e:ad:af:43:e9:fd:f6:
                    90:3c:f3:28:d6:5f:d6:0d:1a:ea:95:63:93:d6:05:
                    53:45:54:8a:50:f9:4c:a0:b9:65:ca:b1:76:b6:6b:
                    ce:5e:8a:f6:07:cc:25:6c:8a:1c:37:25:b2:14:29:
                    5b:f7:59:16:d8:9f:8b:94:04:80:c9:99:6d:72:40:
                    8d:7b:c5:a0:ac:c6:8e:50:75:95:2f:05:8c:93:5e:
                    02:2b:3b:8f:07:74:95:6a:b6:43:5b:0b:77:34:e0:
                    25:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B3:C4:ED:1A:98:95:55:86:04:BC:43:81:E9:F7:0E:B0:19:66:81
            X509v3 Authority Key Identifier:
                keyid:C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:75:f1:db:00:4d:78:7b:89:c5:48:a6:d3:c3:32:5a:b5:
         25:2d:8b:9e:aa:99:65:0d:ac:88:68:ad:30:c9:b6:c8:5e:27:
         2a:36:4d:4f:99:d4:35:19:8e:f3:c9:7e:bc:15:00:80:af:f4:
         95:78:69:34:f4:7b:00:c5:da:74:0c:7d:f3:84:d8:62:2e:ac:
         cf:30:8c:8a:c1:06:34:5e:01:f4:e8:54:b8:e9:72:6e:53:22:
         5b:7d:d4:ba:d0:c1:1a:b8:7b:7a:48:dc:61:9a:49:5c:ec:28:
         f5:de:df:ac:d3:c4:92:d4:4d:3d:da:da:4f:a3:03:86:79:a1:
         0a:0e:54:ef:5e:a8:21:ac:ac:bd:08:b4:1d:44:8e:94:83:2c:
         b9:0c:21:aa:fa:80:45:ca:71:ca:44:60:82:b0:66:1f:15:90:
         ff:1c:0f:a2:56:60:6d:93:ea:5b:4e:64:fd:a9:b6:e6:75:c8:
         53:97:fd:b8:e8:15:cb:64:e5:e8:5d:9b:44:f4:c8:a3:b2:a7:
         a9:82:6f:b6:14:f5:bb:5c:c1:bf:f4:aa:49:c2:30:30:27:41:
         08:d6:af:44:7a:17:0d:00:1b:86:d1:dd:fe:f4:a4:18:01:ec:
         d0:0f:37:9a:46:ed:95:1b:68:6f:71:50:83:c4:6d:ff:dc:d8:
         80:57:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:30 2025 by rpki-client