Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File:                     ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier:          n6mT7DxtuCZrxwkZ7wSq3adRhdodzlEegaq5pjf6cMM=
Subject key identifier:   B1:64:0E:2F:93:52:C1:77:B2:41:82:A2:22:19:10:38:15:59:04:08
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer:       /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial:       CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number:          CD
Signing time:             Wed 14 May 2025 04:59:56 +0000
Manifest this update:     Wed 14 May 2025 04:59:55 +0000
Manifest next update:     Fri 16 May 2025 04:59:55 +0000
Files and hashes:         1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: ILylGUiJeJ7OoPd0bplNUgsg9hW9x88nriu7qHctDvo=)
                          2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 May 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCCC8AF, serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
        Validity
            Not Before: May 14 04:59:55 2025 GMT
            Not After : May 16 04:59:55 2025 GMT
        Subject: CN=6824234c-e819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:a3:df:b6:8a:f8:b7:50:51:bf:e7:af:e1:
                    fa:df:bb:5d:a2:91:fc:7b:6c:6a:3d:6e:ca:29:69:
                    97:3e:2d:fc:c8:c9:e1:e9:10:eb:7b:70:62:e5:49:
                    9e:f1:68:af:8c:e7:3a:76:aa:5b:33:b4:22:a4:d1:
                    f4:54:ce:ed:b6:c8:33:73:d3:bc:62:ca:30:86:e2:
                    ff:47:26:83:43:85:cb:73:fe:02:89:8f:c2:ec:f7:
                    74:0b:9b:ca:ab:46:09:d4:fd:2f:e5:af:a8:7a:46:
                    8a:df:99:4a:c3:e4:dc:d5:b1:f8:78:39:c0:4b:eb:
                    8d:a8:39:00:7a:b4:aa:2c:a0:3a:e7:ed:c1:61:4c:
                    98:a3:e7:fa:75:c6:fa:65:65:da:b1:b2:6c:f4:69:
                    c1:c1:2e:8d:39:d6:60:27:60:dc:6f:2e:71:5e:df:
                    42:d2:a3:bb:2e:69:d9:d3:cc:4b:3b:25:57:bd:76:
                    0a:28:d0:45:2e:6e:49:67:dc:a9:a0:bc:c9:fd:eb:
                    5b:bc:d7:e3:ef:7b:e3:0d:40:7b:b3:73:b6:7d:98:
                    37:c7:bf:7a:de:4b:bc:dc:92:86:33:5a:6f:79:e1:
                    14:e6:b6:24:aa:f7:a5:4c:ce:d3:b4:3e:7e:0b:73:
                    c9:a8:ed:46:99:cd:a5:15:ca:02:13:20:bb:e0:37:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:64:0E:2F:93:52:C1:77:B2:41:82:A2:22:19:10:38:15:59:04:08
            X509v3 Authority Key Identifier:
                keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:95:7d:8d:a6:8c:fc:bb:ef:52:78:ec:dd:87:fd:7b:3f:ed:
         47:3f:f8:1e:de:8e:f1:2e:76:13:93:c9:58:bc:76:ec:7b:bf:
         41:3d:b4:29:68:bc:88:6d:c3:be:ba:94:2a:6b:5b:f4:2b:c5:
         75:3c:0c:64:1b:69:2b:e9:97:f2:f0:dc:01:4c:8a:4c:ab:79:
         32:9b:e7:bf:cb:4b:03:9b:65:77:b2:86:9d:88:ee:35:e3:97:
         2f:8f:bc:32:e7:6a:fb:40:9a:91:d5:1a:53:3d:4a:4b:3c:56:
         0e:87:ac:8e:f5:a5:91:18:aa:87:bd:67:a4:5d:27:07:57:35:
         60:9c:a0:e4:da:91:21:ac:02:26:94:f2:ee:d9:9c:5b:2c:e1:
         7f:27:6c:3b:d9:05:2e:e4:d4:ec:7a:68:eb:37:1f:43:ef:88:
         fe:d1:3b:b4:86:a9:34:fe:b2:77:ec:9c:d0:1a:3c:a5:9c:f0:
         7c:6f:0d:c1:1e:0a:1c:08:de:98:cb:b8:cd:ea:50:03:f4:8d:
         37:e7:97:3e:b2:32:88:70:f6:d6:c3:c5:51:4b:ce:dc:ac:3d:
         2d:a6:f8:6a:cd:ad:9f:f3:d4:3e:bd:31:58:d0:0a:bd:1e:3c:
         96:04:cd:66:dc:57:f6:34:a4:02:0b:c7:0d:34:da:51:83:4a:
         05:42:31:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:31:14 2025 by rpki-client