Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
File:                     R_ufMc9PLRlxHITTLiO9AG4ALpY.mft (raw, json)
Hash identifier:          g4Te5p0Vw2w2BEsDiqg9wZLkY8et4H8+beVDpce+6bw=
Subject key identifier:   02:2E:0A:CB:70:04:E0:D4:28:53:E4:1E:36:34:AB:24:15:83:AB:94
Authority key identifier: 47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96
Certificate issuer:       /CN=F36A36C8AF/serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
Certificate serial:       05C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
Manifest number:          05C0
Signing time:             Sat 23 Aug 2025 02:35:04 +0000
Manifest this update:     Sat 23 Aug 2025 02:35:04 +0000
Manifest next update:     Mon 25 Aug 2025 02:35:04 +0000
Files and hashes:         1: R_ufMc9PLRlxHITTLiO9AG4ALpY.crl (hash: Uui8bAmRHNm95KKbjVSCQ54dRkNroJ4JwAxdm4Z2f7c=)
                          2: 3CBE5F76212011ECA2098832D8A014CE.roa (hash: 8d9G2F7SeXBUC0RrFhpkoC1cMwO502CPGYGL0obQDBM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A36C8AF, serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
        Validity
            Not Before: Aug 23 02:35:04 2025 GMT
            Not After : Aug 25 02:35:04 2025 GMT
        Subject: CN=68a928d8-8917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:d2:39:a9:15:89:c6:fd:05:a8:1c:9f:47:
                    e7:79:c2:2a:18:27:b6:72:14:17:12:19:8b:cb:82:
                    7e:ef:ab:61:af:af:f0:75:89:99:27:9c:eb:f4:f9:
                    52:5e:21:52:93:4f:5b:25:ec:41:45:1f:37:b3:49:
                    cf:4a:e3:11:7a:e5:e1:80:1e:92:35:99:2f:bc:69:
                    da:53:28:e8:f3:c1:b1:4b:82:85:3e:df:42:6d:67:
                    46:c2:9f:b6:e4:7a:26:00:6a:3d:b0:27:5b:42:e7:
                    b1:37:0f:48:ed:03:a3:65:db:4a:8c:4c:dd:f1:5e:
                    17:4d:78:da:22:76:6d:33:cc:3a:85:99:f1:28:08:
                    ad:a2:e3:8b:62:9d:1d:f2:ac:3d:89:4c:8e:86:97:
                    ae:1a:09:cd:7a:4d:3b:48:0c:11:3f:10:63:4f:ff:
                    74:6a:fe:c7:cb:67:7b:29:e2:19:0a:f1:86:67:e9:
                    f9:d4:aa:69:98:28:09:c2:43:b9:1c:e9:03:e8:20:
                    45:e8:0e:72:a2:14:77:ae:1c:c2:3e:d1:bf:10:3e:
                    c2:8d:cd:47:43:63:0c:1a:d4:ca:64:df:97:86:2e:
                    49:e7:76:11:e6:b8:4a:20:4f:7d:b5:5f:d2:64:18:
                    64:88:59:74:f3:8b:f4:ac:a4:53:e6:74:43:ee:c5:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2E:0A:CB:70:04:E0:D4:28:53:E4:1E:36:34:AB:24:15:83:AB:94
            X509v3 Authority Key Identifier:
                keyid:47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:ac:3e:96:87:09:77:cd:a4:a0:cc:a6:5e:10:b7:4f:e4:cf:
         0c:ea:92:20:17:6d:9d:14:c5:92:14:a8:1a:8f:53:2e:de:01:
         2b:e1:02:27:9d:b6:40:9a:31:4d:2e:11:a4:60:04:e6:94:34:
         68:c6:44:69:40:43:c3:07:ec:10:bd:ab:03:94:50:b4:f4:4a:
         63:3e:c5:c2:f6:d1:9a:2e:34:0e:bf:0c:c2:20:ca:cd:0d:a5:
         d1:c0:0b:11:23:4c:5c:67:fe:b1:15:18:53:d7:0b:9a:47:95:
         5b:b8:18:c5:9b:5e:1b:6b:9c:ab:f5:60:db:a5:b9:d0:80:e8:
         69:89:6e:ce:75:0a:66:af:cb:be:ff:50:54:72:0b:b7:74:e8:
         bc:f9:74:e9:f3:b5:1f:98:fc:28:76:b1:4f:06:66:cf:81:ce:
         4b:2d:a6:fe:b7:60:ad:68:73:18:93:e4:46:5c:1c:df:80:10:
         a8:ec:ef:b3:02:08:dd:b5:8a:09:61:6f:1a:9b:47:a6:5d:c7:
         93:b4:54:64:62:9f:26:27:ec:ad:b5:55:4e:d7:fd:7a:b0:bd:
         ec:bc:81:b1:ed:39:1e:9a:6c:c3:58:1f:f8:1b:05:8e:ff:59:
         8c:6f:50:56:ec:72:01:4f:ab:9f:a6:a0:14:53:5d:c9:02:80:
         2f:f5:8b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:51 2025 by rpki-client