Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
File:                     o5s35g1cIOlutaIPRdIs7vh_5bw.mft (raw, json)
Hash identifier:          8F9lo4wU+dGSjX4ltXYCm9eGO0NynRRdOGIShD83SuY=
Subject key identifier:   9D:8D:D3:5F:A1:A5:9E:AF:C9:72:9F:E1:5F:51:58:0E:0E:00:A6:04
Authority key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Certificate issuer:       /CN=F36BD167AF/serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Certificate serial:       A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
Manifest number:          A1
Signing time:             Wed 02 Jul 2025 05:13:05 +0000
Manifest this update:     Wed 02 Jul 2025 05:13:04 +0000
Manifest next update:     Fri 04 Jul 2025 05:13:04 +0000
Files and hashes:         1: o5s35g1cIOlutaIPRdIs7vh_5bw.crl (hash: 3PGMIzMfwIOsrs3UmbYa/L421MgzATkNqkKMTSN75Qo=)
                          2: D3D6067449F411F0B90F0DC7DAE4EC9C.roa (hash: Q+BFKYSnO6fuQCFkfzwVQZk6vXnihXirdAglo9VE170=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 05:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD167AF, serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
        Validity
            Not Before: Jul  2 05:13:04 2025 GMT
            Not After : Jul  4 05:13:04 2025 GMT
        Subject: CN=6864bfe0-f519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:90:99:65:30:6f:04:bf:d5:47:fa:7b:15:
                    9e:88:83:58:3c:57:c2:9e:87:3c:19:67:d0:16:2f:
                    3f:bc:c6:51:54:14:93:15:0a:a6:40:32:58:01:8b:
                    a9:76:79:84:3f:68:e2:98:ee:9b:04:b1:cf:c1:6c:
                    b7:3f:5d:b7:17:07:fc:3e:ba:b1:62:0e:ba:87:32:
                    ce:05:5c:fe:a8:16:5e:89:3e:6f:d0:85:d8:f8:07:
                    86:0a:1d:8c:f5:2d:2e:cd:94:e4:df:31:f8:9e:54:
                    f7:6c:e4:c9:ed:00:22:10:3b:59:88:c0:66:b4:97:
                    43:06:f8:b5:7a:bc:90:cb:e5:85:e4:99:57:09:56:
                    cf:29:ff:9f:f4:ec:82:80:ff:77:11:0d:8a:ec:b9:
                    ef:97:03:6a:2b:d4:02:8e:23:5b:af:f3:82:2d:51:
                    73:a5:85:d9:0c:32:83:e2:f5:8f:b1:fc:ec:24:0f:
                    f9:db:30:7c:c8:08:ed:f3:bf:6e:16:1e:58:86:d6:
                    6b:0e:32:3e:41:c6:50:65:d2:8c:02:69:82:d0:44:
                    2f:24:f3:00:fb:7c:4d:cb:16:39:d0:e3:7d:11:a1:
                    be:9a:96:37:b3:71:6a:c6:99:11:4a:1e:50:e3:eb:
                    c0:5a:69:91:99:e2:05:11:6e:ee:3e:97:b8:7f:25:
                    66:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8D:D3:5F:A1:A5:9E:AF:C9:72:9F:E1:5F:51:58:0E:0E:00:A6:04
            X509v3 Authority Key Identifier:
                keyid:A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2e:56:6e:41:b5:8a:e0:9a:99:b9:e2:a8:09:08:8c:a6:e9:
         cc:8a:1a:d8:35:04:6c:cf:c7:3b:e3:52:0b:e6:a9:9e:3d:2d:
         30:aa:fd:2e:58:98:02:14:da:ad:8a:c0:70:3c:08:e3:cf:ee:
         61:98:84:1a:bc:60:6f:d2:95:0a:d3:0a:b6:c6:b7:85:4d:23:
         11:38:01:0a:07:be:e1:05:49:5a:04:f4:f0:b8:c4:b1:fd:cc:
         4a:83:55:6b:cc:4a:e3:be:3e:cc:08:77:83:07:12:b6:93:64:
         d7:07:22:a5:91:a0:f5:fb:ef:64:91:6b:6b:28:b2:53:3c:20:
         e1:e1:ea:8f:63:66:e7:12:17:d0:87:20:22:d5:b2:0d:4a:93:
         54:dc:63:7b:aa:cf:bc:e7:c5:5d:17:9d:b3:29:f4:9c:6a:d7:
         0e:86:fb:ff:02:a3:98:21:54:3d:b9:6e:78:d2:bc:53:43:8c:
         56:6f:b4:c2:2e:9c:8c:a3:89:3f:2d:a4:a2:b9:5f:03:de:08:
         27:bb:c4:45:3c:1f:5e:eb:21:6d:c2:37:69:d8:c4:bd:a3:d0:
         0d:a2:ae:17:09:bc:93:9f:6a:de:5a:1a:ee:31:54:07:53:27:
         c4:05:61:e9:92:b0:96:03:14:f8:6a:ef:5f:8d:9a:e4:3e:af:
         4e:a2:d4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:00:15 2025 by rpki-client