Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
File:                     ih_PKB86N6VQ5kE32QhVCuiQIzo.mft (raw, json)
Hash identifier:          rX2++N1N8RRiXKHaTr8RTcUTQ/RCOKpt8ImU26LYOW4=
Subject key identifier:   F1:3C:DD:A7:87:DE:21:4A:1B:43:BB:12:CD:F7:A3:7D:41:B5:B2:76
Authority key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Certificate issuer:       /CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Certificate serial:       F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
Manifest number:          F6
Signing time:             Sun 29 Jun 2025 05:02:46 +0000
Manifest this update:     Sun 29 Jun 2025 05:02:46 +0000
Manifest next update:     Tue 01 Jul 2025 05:02:45 +0000
Files and hashes:         1: ih_PKB86N6VQ5kE32QhVCuiQIzo.crl (hash: PIcvRJzFWkF/+XnVna6MMXw9g15u5VpYNhY+0nFN2Pw=)
                          2: 06EE82A89B9E11EFA256DA5A762E951A.roa (hash: 2jh2P8eMrHu4GkQNFQFJgeOA87Bp3duiKWGcRIfCjWE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3983AF, serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
        Validity
            Not Before: Jun 29 05:02:46 2025 GMT
            Not After : Jul  1 05:02:45 2025 GMT
        Subject: CN=6860c8f6-a2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:fa:00:e8:9f:5b:01:20:5e:99:12:70:c2:
                    c1:e1:97:30:7e:a5:2b:24:bd:36:24:0a:9b:6c:3f:
                    89:ba:c8:a7:2c:99:c4:23:a8:c2:71:9f:fa:26:17:
                    cd:b0:66:2f:67:19:3c:93:43:79:10:7c:98:d9:f4:
                    2d:ce:57:16:fb:37:13:79:06:b8:c5:66:2c:50:20:
                    d0:49:81:7c:4e:e5:49:52:37:d7:14:01:82:23:a4:
                    de:27:c2:bc:b6:99:8d:d6:71:04:c8:a9:dc:0c:6e:
                    6b:b3:f4:22:59:28:5f:e5:e5:f8:a8:4a:60:15:c4:
                    a8:d2:7e:19:c7:d7:dc:c9:0b:e4:72:3a:94:3b:45:
                    d2:be:f7:9b:45:46:14:08:67:d2:6e:62:54:bb:2c:
                    99:68:4d:92:6c:ae:50:8b:fd:a7:bf:43:30:b9:25:
                    b0:a6:b2:ba:3c:76:c9:71:83:fe:d6:0d:8f:3d:c0:
                    57:5e:6d:b3:73:46:cc:80:fd:15:1c:58:f0:4d:c4:
                    82:61:ac:58:68:59:d7:8f:f0:80:df:b1:90:4d:b1:
                    bd:05:c9:48:73:61:57:c3:1a:68:a7:53:7e:f1:33:
                    20:d6:2b:bb:84:e5:cb:59:64:2c:20:9f:fb:e1:08:
                    31:fd:29:75:53:db:48:8e:37:33:12:9d:1c:1b:4f:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3C:DD:A7:87:DE:21:4A:1B:43:BB:12:CD:F7:A3:7D:41:B5:B2:76
            X509v3 Authority Key Identifier:
                keyid:8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1b:4b:88:5a:ec:15:d6:a5:20:cc:96:96:04:01:3f:b0:ee:
         cc:d8:c1:1e:8e:2a:c2:0d:01:eb:8f:8c:48:20:10:c8:51:d8:
         5e:cb:7f:27:55:b0:15:83:44:d4:42:a4:4b:fe:c4:05:87:33:
         89:47:db:13:08:d2:05:82:d0:3d:27:2d:21:f8:b6:dc:b4:99:
         e1:a8:4a:5f:3d:c1:d4:b0:7a:72:7f:12:81:27:c9:94:c1:70:
         57:54:6b:58:30:9a:29:03:55:56:99:26:a3:3d:37:24:8b:47:
         a7:29:07:6d:00:93:4a:c0:46:71:4a:1c:0e:6f:af:9c:e1:84:
         83:4e:3e:39:21:be:12:8f:f5:fb:01:c8:e6:7d:2a:a7:f1:8e:
         72:1b:54:51:0c:a5:f5:c8:9b:e5:64:78:48:84:96:34:1a:ea:
         07:83:32:b8:c3:47:ab:2f:5c:60:4c:f5:3d:1d:c3:cc:4c:ce:
         8d:ab:99:5b:f0:bf:a1:b5:9b:1c:a1:1a:6b:df:52:68:a6:4a:
         11:b1:a1:8d:ae:10:de:89:71:b2:10:d6:04:2d:34:ab:cc:37:
         ba:db:5b:90:34:8e:ad:7d:03:4a:bf:7b:ee:51:78:02:19:03:
         41:af:66:d6:ea:46:04:2b:0b:b8:a3:04:4f:38:7e:4f:bb:2d:
         72:d2:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:26:05 2025 by rpki-client