Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier:          NVwH+BhxQkPxjuvGr0TuErrKTwwNi5PRVcKm/ixYufc=
Subject key identifier:   82:A8:13:B0:1E:AF:34:2C:84:F0:4D:F9:22:CB:1E:F4:3F:60:D1:E5
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer:       /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial:       043D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number:          0436
Signing time:             Thu 03 Jul 2025 03:09:39 +0000
Manifest this update:     Thu 03 Jul 2025 03:09:38 +0000
Manifest next update:     Sat 05 Jul 2025 03:09:38 +0000
Files and hashes:         1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: HxHQAtlhIde3KyFyu/6FwiR505hDQ819WVU2DcwHOt4=)
                          2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
                          3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
                          4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
                          5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
                          6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
                          7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
                          8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
        Validity
            Not Before: Jul  3 03:09:38 2025 GMT
            Not After : Jul  5 03:09:38 2025 GMT
        Subject: CN=6865f473-36ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:56:a5:cb:99:04:a4:bd:b5:ee:7f:86:15:
                    3c:f6:bb:dd:0c:4f:9e:d0:da:a0:3b:fd:71:4e:4e:
                    62:44:c9:d7:ca:0d:6c:2d:90:30:eb:21:7e:58:86:
                    6d:34:1e:3f:dd:5d:78:6c:c7:0f:b5:ca:ba:28:8b:
                    24:b7:71:16:d7:48:1b:cc:1a:de:e2:6c:2c:ab:2c:
                    46:7e:75:7a:76:e7:a2:50:b8:31:92:42:9d:c2:30:
                    f1:a1:50:39:06:c8:cc:47:b0:a9:b7:7a:06:12:bf:
                    60:34:16:d3:17:28:7e:22:44:0a:89:57:1b:db:80:
                    d9:47:a9:85:0a:5a:ed:6d:f0:06:6a:00:f5:80:00:
                    4e:a9:bb:29:9e:17:b3:6a:d5:b6:dc:90:fb:f9:f8:
                    04:39:86:1f:6c:0c:67:ba:0f:92:9e:16:a7:fb:35:
                    29:da:9b:2b:0a:0b:85:8f:ee:5d:df:26:6c:d0:f4:
                    d3:e7:1e:aa:88:b6:a7:07:b1:9d:cf:6b:8d:c9:76:
                    54:ce:04:84:2a:dc:f6:3f:cf:b1:0c:d1:d9:98:27:
                    0d:4e:46:bc:c2:ce:65:0e:28:37:3a:90:b6:42:ae:
                    4d:59:5e:5b:f3:cd:2c:a2:54:58:29:e5:6d:a5:04:
                    df:37:54:3a:6f:e0:59:81:23:f2:c4:c0:21:ca:5f:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A8:13:B0:1E:AF:34:2C:84:F0:4D:F9:22:CB:1E:F4:3F:60:D1:E5
            X509v3 Authority Key Identifier:
                keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:37:39:f3:76:87:55:e9:15:ec:de:ca:83:c8:ff:57:49:c1:
         91:dd:02:a4:80:9b:cf:c8:c5:8c:3b:c4:b1:35:d8:ed:fb:9b:
         0d:e9:ef:8c:17:b5:46:78:8f:12:c0:60:f5:34:06:fe:8f:53:
         92:cf:3b:d2:c0:a3:b1:a2:24:73:4f:33:73:83:60:5f:b8:5f:
         f6:c0:e7:46:ca:18:34:c0:78:6d:79:fc:07:2a:05:ff:54:82:
         51:32:78:a4:42:72:34:3d:5c:45:86:44:17:bd:ec:3c:71:3b:
         0b:b6:82:8c:88:56:be:1b:a2:a9:82:59:c2:cb:0c:83:ba:d1:
         cd:69:10:32:3f:3a:e2:26:cd:82:a8:aa:38:f2:e2:ee:f9:07:
         43:2c:0a:64:c8:6e:fa:8c:65:4a:5a:cb:88:48:12:c4:bb:40:
         6f:06:b2:1a:1a:89:f5:73:ad:dd:d6:e7:fa:6d:48:2a:af:73:
         97:9f:d0:cb:5d:fe:6a:d1:f7:8d:d6:4f:8a:81:e7:4b:ef:eb:
         70:bd:1e:a2:94:49:79:69:72:9f:3c:bd:a9:fb:a4:08:27:7a:
         75:c7:68:f2:4c:5e:b6:a0:ff:21:1b:f5:ef:d9:e3:2c:5c:55:
         64:00:a6:72:10:bb:25:b8:7b:7b:d5:17:24:2a:2b:94:19:8e:
         79:b9:1d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:15:51 2025 by rpki-client