Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
File:                     avc50Bd3BoQ35SESTux6ZtiYCW8.mft (raw, json)
Hash identifier:          jV/37SF7gQJ/IkfzoU3vkfIJqz8C5yK5SRiPxu/wRj4=
Subject key identifier:   98:C1:0F:69:81:85:BA:F4:61:8C:66:B2:37:8D:7A:4C:38:B9:57:7A
Authority key identifier: 6A:F7:39:D0:17:77:06:84:37:E5:21:12:4E:EC:7A:66:D8:98:09:6F
Certificate issuer:       /CN=F36BA57FAF/serialNumber=6AF739D01777068437E521124EEC7A66D898096F
Certificate serial:       0118
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
Manifest number:          0117
Signing time:             Thu 03 Jul 2025 04:58:20 +0000
Manifest this update:     Thu 03 Jul 2025 04:58:19 +0000
Manifest next update:     Sat 05 Jul 2025 04:58:19 +0000
Files and hashes:         1: avc50Bd3BoQ35SESTux6ZtiYCW8.crl (hash: RJVXq/hxoqy7fBaBoPDl+m5yvKeW2YcA4vkQWMPE+oY=)
                          2: 9CBCEE06857C11EF9C88A445762E951A.roa (hash: LUsLFkZOS70t3FhGjAlxHf+8d7Gfxjit3yut3LdzsB0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA57FAF, serialNumber=6AF739D01777068437E521124EEC7A66D898096F
        Validity
            Not Before: Jul  3 04:58:19 2025 GMT
            Not After : Jul  5 04:58:19 2025 GMT
        Subject: CN=68660dec-1cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:8e:18:68:e0:a6:48:dd:8e:e2:8d:65:1c:
                    48:86:7f:4b:4e:fa:f4:f4:2d:07:7d:2c:d6:2c:95:
                    5b:7d:27:e3:4c:b0:b3:d0:59:cb:37:f4:24:0b:b0:
                    49:84:a0:0e:8d:a3:d7:74:6d:4c:ab:35:54:2f:b5:
                    c6:70:de:18:dc:9e:47:43:a1:30:fd:4e:a2:42:44:
                    e7:59:9e:0a:3d:d5:98:fe:b5:c4:41:8b:58:4d:90:
                    6b:c3:7a:3f:e0:b9:52:88:98:82:40:9f:31:36:04:
                    6e:66:a9:5f:eb:28:76:66:10:3d:62:2f:5f:f7:b8:
                    2b:3e:18:3d:f9:03:27:58:60:6a:61:84:81:50:2f:
                    d6:4f:12:16:21:18:fe:c4:f6:e2:38:7e:f9:d6:15:
                    2f:26:dc:87:d7:8e:94:a9:f3:25:23:f5:3c:a7:f6:
                    8e:50:cd:42:d3:03:ad:20:84:54:f1:bd:38:67:6d:
                    8e:f8:6c:55:54:60:8a:51:33:f4:e6:41:37:00:4a:
                    cd:2b:7d:43:96:a0:fc:0b:93:6d:b0:d8:3d:4f:5c:
                    41:50:23:de:16:70:5a:01:e0:ef:4d:f5:88:73:37:
                    71:f5:bf:a0:56:cd:a1:20:70:a9:4d:a5:30:8d:89:
                    22:87:27:b0:2e:bf:b8:35:af:a8:56:ac:ee:82:87:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C1:0F:69:81:85:BA:F4:61:8C:66:B2:37:8D:7A:4C:38:B9:57:7A
            X509v3 Authority Key Identifier:
                keyid:6A:F7:39:D0:17:77:06:84:37:E5:21:12:4E:EC:7A:66:D8:98:09:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9d:30:e3:bd:54:1e:10:68:05:7a:57:77:9f:d3:db:e5:b3:
         d1:6c:85:02:98:b7:73:0b:19:ae:8b:3d:2d:43:88:78:4a:c9:
         32:be:92:b5:7d:30:bb:07:6d:4f:db:59:7c:d5:1e:fe:b0:27:
         37:79:de:96:8e:56:d0:1c:22:83:56:a2:22:3e:c6:72:b4:3e:
         e0:61:d4:16:f9:cd:03:fe:d5:dd:45:0c:d2:5b:59:6a:65:9d:
         cd:d2:d5:6d:7d:50:6f:aa:80:a7:7f:ff:11:47:d8:69:17:e0:
         28:f4:df:77:f4:62:2e:e8:89:1d:e4:2f:bf:9c:09:9f:05:48:
         96:b8:f3:6b:0c:b5:83:df:6a:0d:ba:42:9a:2f:b6:7c:1d:ce:
         85:07:e0:a5:3c:39:85:a9:8e:07:4a:d8:cd:2b:9b:72:3e:83:
         60:43:7f:44:8f:38:f5:fe:10:cb:9f:9f:b5:ac:b9:45:7e:fe:
         31:67:69:46:1f:d6:b4:c7:04:83:78:2f:57:f5:2c:5f:a8:65:
         af:5d:ae:3f:7f:dc:1b:41:fc:d3:d9:e5:15:39:c1:e8:fb:ef:
         d9:aa:4f:9b:65:c9:7f:d8:2d:dc:80:4c:dd:8b:6d:94:ec:80:
         e4:c5:9f:e5:71:c3:49:0e:e0:29:97:ee:b8:7c:d2:66:f6:17:
         52:11:45:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:52:26 2025 by rpki-client