Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
File:                     8fHKBYLoJWPuJfCZF2si382cw2Q.mft (raw, json)
Hash identifier:          LMUvyHNpq2bVBmGzTQa5rLcysnRjNc4RVrmbyZz0Oc8=
Subject key identifier:   C5:DB:87:DB:9F:D1:F2:6F:06:3E:C1:0F:D1:5F:C0:89:94:88:F4:3F
Authority key identifier: F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64
Certificate issuer:       /CN=F36C08D4AF/serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
Certificate serial:       0256
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
Manifest number:          0255
Signing time:             Sat 10 May 2025 04:02:46 +0000
Manifest this update:     Sat 10 May 2025 04:02:46 +0000
Manifest next update:     Mon 12 May 2025 04:02:46 +0000
Files and hashes:         1: 8fHKBYLoJWPuJfCZF2si382cw2Q.crl (hash: 2H/y6YG8166nqvMYczVJdsTg/QzKI3CvAngm0YiNtC0=)
                          2: 715EC0EE69A911EE84A41F174AD9E6FC.roa (hash: GA/yRfN+j7YpzqeDRBlxUIhR1rbQNxt7HY+jSgnz5l0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C08D4AF, serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
        Validity
            Not Before: May 10 04:02:46 2025 GMT
            Not After : May 12 04:02:46 2025 GMT
        Subject: CN=681ecfe6-cf9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:3c:96:d1:e2:81:1a:85:fc:ef:05:d3:3a:
                    fb:d9:70:7d:86:cf:e5:fa:b4:0c:22:1d:c7:ae:01:
                    0a:27:53:83:d0:3a:0e:af:70:b8:7c:56:96:cc:35:
                    f4:d1:38:03:24:b3:b6:23:f3:65:43:14:19:35:a6:
                    39:2e:e9:af:91:97:83:48:cb:e0:78:d5:9c:85:84:
                    6d:4c:6a:91:47:11:2a:6a:3a:7a:89:b2:56:67:19:
                    0d:d1:3c:aa:c8:bc:72:4f:05:e8:a8:6d:c6:d4:33:
                    7a:f4:01:87:9f:84:2d:06:35:21:f2:8a:c1:04:a2:
                    b8:5d:c4:71:b2:ed:88:c5:01:e9:1d:86:72:0e:0a:
                    d9:83:af:95:07:e1:2d:78:c1:96:02:fd:ca:ba:13:
                    d4:05:be:59:a6:6a:6e:48:f5:25:90:77:fc:44:11:
                    66:f7:f6:60:9e:1b:40:51:ff:6b:3e:ca:e8:07:62:
                    fa:19:50:83:80:11:2b:c9:59:9a:a8:7b:04:6b:d7:
                    e5:3a:5e:af:38:e7:f2:be:8d:7a:fe:28:06:df:f4:
                    77:12:21:d2:4e:69:b6:8d:56:cc:68:9f:09:bd:5f:
                    e5:cc:ac:43:68:9d:a8:2f:49:13:79:a0:41:2a:f7:
                    29:59:a0:f8:17:76:59:f7:7f:49:0c:3e:88:4a:b0:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DB:87:DB:9F:D1:F2:6F:06:3E:C1:0F:D1:5F:C0:89:94:88:F4:3F
            X509v3 Authority Key Identifier:
                keyid:F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6f:0d:84:58:b2:92:f5:27:11:95:97:35:83:45:72:11:16:
         6b:d1:ac:1e:f2:eb:41:e0:3a:ef:85:39:61:89:ee:60:93:45:
         c0:8e:86:7c:df:c5:b3:78:79:e5:59:87:f5:3d:b3:9e:f5:90:
         ee:35:6b:0c:7d:33:45:11:f2:3f:83:c9:c3:07:60:fc:e6:0b:
         85:0f:33:93:35:fb:88:ba:87:a8:3d:33:5a:5d:ce:7d:7e:29:
         9e:29:61:3a:3d:13:31:be:0e:53:d8:60:7b:c2:84:ba:69:e9:
         c8:6d:ea:73:c8:99:d6:04:90:a4:55:6b:84:14:50:45:c2:27:
         27:30:34:9e:2b:d2:cf:a9:10:6a:9a:0f:8a:be:bf:e2:64:82:
         64:72:e0:23:c0:09:a2:37:46:4f:ca:50:65:4e:7b:e5:c8:83:
         89:60:b6:9f:79:93:26:0d:5f:31:bc:08:e6:0c:87:6c:20:69:
         b5:7b:2c:92:9f:aa:ed:9c:39:8b:b1:91:35:53:84:5d:9e:70:
         c6:c7:27:63:66:ca:21:2b:2c:64:6f:ad:d4:fb:5a:ec:cd:67:
         5c:f7:59:12:91:38:3f:ec:c3:e0:e9:5b:9c:8b:73:c0:ce:51:
         6b:1b:33:75:8b:81:4a:70:f9:ca:24:cb:9c:90:70:a3:7a:06:
         c7:5e:91:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:01:25 2025 by rpki-client