Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
File:                     j29vvKPGNM2_8Exy6bDsgG-YPKg.mft (raw, json)
Hash identifier:          laUzgcjn0EtFhvPch7L1ZekNkltwtKbSM52mwk9I/Ug=
Subject key identifier:   7A:55:A7:0A:60:3D:AE:98:D4:4A:CA:4C:C0:D2:9C:F9:19:FC:DC:B5
Authority key identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
Certificate issuer:       /CN=F36B57DFAF/serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Certificate serial:       0463
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
Manifest number:          045F
Signing time:             Sat 23 Aug 2025 03:08:53 +0000
Manifest this update:     Sat 23 Aug 2025 03:08:52 +0000
Manifest next update:     Mon 25 Aug 2025 03:08:52 +0000
Files and hashes:         1: j29vvKPGNM2_8Exy6bDsgG-YPKg.crl (hash: mJoJqaiXF3KZAdai//rZzUCeExCPIX1nDRwCS1sLWb0=)
                          2: FB14937C4F2711EF830F0C61762E951A.roa (hash: NKUhSMZnwRNOJiKnhnRiI1tGFsbNrt1VXb7ny/WxBiE=)
                          3: 44EF15B42F7511ED934148D1F1222468.roa (hash: SVbI5/mcJ+ND6giCV7RVPDPt1p34yK1IAdaZ9mYU07E=)
                          4: 2C1A7CD22F7411ED88A88DCEF1222468.roa (hash: Sh1RvoN24iiQuOige1NA+5ffJjIAW81e8ojWpZOFayY=)
                          5: 1B58135E2F7511ED979DE2D0F1222468.roa (hash: DSGqTaxjbT+K9lrWKUIwbu4/OZVecKFE50cHdO72jtI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1123 (0x463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B57DFAF, serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
        Validity
            Not Before: Aug 23 03:08:52 2025 GMT
            Not After : Aug 25 03:08:52 2025 GMT
        Subject: CN=68a930c5-b925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:21:86:c9:c7:de:f0:c8:b4:aa:40:63:98:cc:
                    d7:ad:e6:8e:79:34:84:5c:e6:43:80:8b:3b:cd:7d:
                    34:70:76:4b:a8:13:f9:74:e1:04:f9:00:2f:a1:10:
                    63:fa:86:72:ae:a2:bb:09:00:6e:36:8b:d5:b5:3d:
                    99:de:af:fd:a1:7b:c6:34:a6:b8:29:db:f1:30:af:
                    a9:dc:85:16:3a:56:ff:0e:6d:e3:11:f1:2e:f7:d8:
                    0c:4e:0a:d5:be:c2:24:41:68:55:34:4e:5b:8e:70:
                    50:be:2f:13:a6:a8:dd:58:79:9c:2b:fc:21:bb:4d:
                    73:ea:f4:3e:54:11:69:c8:e2:f5:9f:50:43:dd:f7:
                    84:41:c4:9d:f9:24:62:36:d2:5b:9e:80:41:d6:81:
                    71:13:6e:fe:7d:27:46:a6:cd:63:e8:ec:d5:1e:fc:
                    cf:30:e5:e6:5c:20:c9:30:51:a2:2d:30:d1:82:78:
                    3c:be:91:6b:df:a5:ed:9f:ef:1a:be:aa:9c:56:26:
                    92:73:f0:31:ea:05:f1:c9:6c:32:3a:4a:3d:35:2e:
                    34:5e:a9:03:f7:9d:9f:0b:df:fb:d0:d0:6b:21:ec:
                    af:70:64:da:8a:ee:62:54:f3:2a:2f:38:a8:0f:e2:
                    5c:bc:e3:36:00:48:04:71:66:1f:a3:54:85:fe:8d:
                    5e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:55:A7:0A:60:3D:AE:98:D4:4A:CA:4C:C0:D2:9C:F9:19:FC:DC:B5
            X509v3 Authority Key Identifier:
                keyid:8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a2:19:95:65:f8:f7:fe:0f:7e:07:6e:12:db:7a:ef:46:e8:
         e9:b6:06:65:c7:02:64:fd:f0:c1:a6:34:30:b4:90:53:c3:05:
         63:87:36:ba:9c:e6:26:20:ca:08:94:24:dc:34:17:5c:3d:de:
         ca:d2:fb:21:5c:26:76:43:d4:21:d0:5e:dd:08:4b:2a:fe:53:
         71:8e:a3:38:31:4e:af:be:4b:64:c1:7b:df:6a:8b:b7:dc:0f:
         8b:5f:be:d0:84:ef:e5:3e:3d:75:c2:09:68:ac:19:46:6f:b7:
         4a:fb:84:c3:19:78:c8:ae:24:bf:e1:77:eb:b2:4b:e5:83:d0:
         4a:4f:17:81:91:f7:f0:e6:19:70:90:06:eb:74:e5:53:9e:ce:
         2d:8a:38:7d:7d:c8:a4:b9:40:97:8e:7a:d0:b4:52:43:4e:9a:
         57:03:88:49:f6:37:7b:d9:83:1f:a0:62:9e:0e:07:33:c4:ed:
         04:11:08:96:b8:e1:54:24:91:ba:37:ee:05:e4:bd:05:68:c2:
         1a:4a:85:6d:ee:4d:49:a4:08:e8:28:b3:e0:71:68:f0:ee:88:
         5b:96:e6:d9:f8:aa:3c:f7:10:67:43:5f:68:c7:54:3d:7a:dc:
         4a:0f:75:6e:a4:c0:6f:16:dd:92:95:6d:42:e8:88:46:2f:e7:
         90:1e:6f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:50 2025 by rpki-client