Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
File:                     41870XBX5RmmOBSWl-AwgOrYdys.mft (raw, json)
Hash identifier:          x5UsF42tvV8/meND+XOW8gkxBihGLo7I5bABp993BIo=
Subject key identifier:   35:B0:60:B4:50:83:E8:27:7C:68:5C:58:60:4F:58:A8:DD:A0:67:29
Authority key identifier: E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Certificate issuer:       /CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
Certificate serial:       0EA5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
Manifest number:          0EA3
Signing time:             Fri 04 Jul 2025 00:51:42 +0000
Manifest this update:     Fri 04 Jul 2025 00:51:41 +0000
Manifest next update:     Sun 06 Jul 2025 00:51:41 +0000
Files and hashes:         1: 41870XBX5RmmOBSWl-AwgOrYdys.crl (hash: 7synS4WiucPp0RSaDlH2ozE7Clf4wDSR7z/mSPU1U3g=)
                          2: 752DB50C461511E99A25B144F8AEA228.roa (hash: k0Rhsuh/b99q9kDn1FoP+OO8bsw50UMZoPySxuOGhI8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3749 (0xea5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ABB63AF, serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
        Validity
            Not Before: Jul  4 00:51:41 2025 GMT
            Not After : Jul  6 00:51:41 2025 GMT
        Subject: CN=6867259e-dd10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:69:1b:cf:63:94:1c:ba:4a:5c:63:d0:99:
                    32:db:c6:fd:04:9c:09:71:df:41:6c:ac:0b:c1:1f:
                    7b:8f:30:92:51:8a:a2:9b:1d:fb:0d:cb:fc:23:20:
                    c4:87:33:d1:57:25:c1:a3:c2:4b:e1:c7:60:60:f2:
                    61:ba:14:56:8a:58:7c:84:a5:17:7e:1e:9c:59:ee:
                    53:9f:39:cf:71:ff:d2:c1:f7:c8:56:40:37:b9:71:
                    03:c7:a7:5d:f4:6c:95:d7:f8:13:8a:bd:ab:bc:8e:
                    0d:ff:4e:38:25:58:21:63:4c:1d:df:e2:17:23:c3:
                    17:66:31:98:65:c0:df:d7:98:9e:66:4b:31:e1:95:
                    64:a2:32:fb:8a:a1:05:36:0d:08:36:32:30:fd:b7:
                    32:86:e4:92:df:0f:8e:64:78:ff:f9:ff:79:37:32:
                    6e:1f:05:69:89:35:02:81:87:34:3b:2a:1e:a0:30:
                    7b:94:87:88:1c:ab:a8:8e:12:08:59:97:bc:d8:d4:
                    dd:16:39:82:31:2e:a2:a9:9c:2d:6f:61:18:2b:48:
                    74:2c:76:f8:d7:83:92:fa:d1:3c:2c:93:bd:67:5d:
                    49:64:03:e2:1d:61:68:f0:11:24:ad:09:07:0f:79:
                    e2:66:c8:15:b8:ec:93:75:c4:94:40:26:c9:fd:af:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B0:60:B4:50:83:E8:27:7C:68:5C:58:60:4F:58:A8:DD:A0:67:29
            X509v3 Authority Key Identifier:
                keyid:E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:27:c2:21:87:34:4b:c6:c4:dc:14:8c:ba:60:cb:46:83:dc:
         bb:cb:ac:6f:b9:5b:6a:48:e7:2b:8d:6b:a2:4a:da:9e:85:5a:
         86:27:1d:10:be:f3:08:69:82:8c:e4:5e:61:92:51:3d:0b:67:
         86:52:fb:b4:54:e8:dd:fe:af:dc:2a:ca:ac:20:88:c9:c6:56:
         5d:a8:a3:4d:3f:70:de:27:cf:d7:0b:58:ab:d3:04:1d:0e:36:
         51:09:cc:86:fc:0d:db:d8:7b:bc:fb:8f:bc:2c:9a:7a:94:48:
         35:74:30:3b:4f:f9:a2:2f:e0:9b:41:c3:fe:75:09:fc:df:2b:
         9f:98:7a:62:90:2e:a2:d3:96:38:7e:fa:d8:ec:0c:09:d3:30:
         6e:d7:b4:16:b3:e4:1a:16:94:77:c6:db:47:54:8d:64:26:f9:
         37:11:6c:2d:a3:89:32:ff:51:c2:90:c9:8c:99:5e:1e:ff:ff:
         dd:c6:ea:30:e8:a0:be:5d:1a:00:6f:c4:6c:12:d2:3b:11:e1:
         a3:86:42:33:8f:dd:3b:73:be:40:7a:c4:58:2b:59:bc:fd:4f:
         4d:5b:35:da:29:5a:66:75:b9:92:46:5e:8d:bd:91:93:5f:97:
         e2:36:15:29:b3:c2:d2:cd:52:74:e4:0a:16:f1:ec:0a:dc:25:
         57:09:95:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:22:13 2025 by rpki-client