Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.mft
File:                     WWnc-xFUwU4N031UCr45kHDAWaE.mft (raw, json)
Hash identifier:          oMXyzKQRDSj99ddW075xX6TNgkbUleIym1eFzyDhJwI=
Subject key identifier:   9B:19:1C:5B:31:21:00:27:DA:A9:3D:94:ED:8B:3C:66:E3:0A:A0:D6
Authority key identifier: 59:69:DC:FB:11:54:C1:4E:0D:D3:7D:54:0A:BE:39:90:70:C0:59:A1
Certificate issuer:       /CN=F36C588DAF/serialNumber=5969DCFB1154C14E0DD37D540ABE399070C059A1
Certificate serial:       0197
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WWnc-xFUwU4N031UCr45kHDAWaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.mft
Manifest number:          0191
Signing time:             Sat 10 May 2025 04:30:57 +0000
Manifest this update:     Sat 10 May 2025 04:30:57 +0000
Manifest next update:     Mon 12 May 2025 04:30:57 +0000
Files and hashes:         1: WWnc-xFUwU4N031UCr45kHDAWaE.crl (hash: kQvlB2/ruMzFxjy8OCN8zt7ZEee2CGLt7qSzgcIQMuk=)
                          2: F6F6560C060E11EFB4E35F4C017001B1.roa (hash: GSvLQkr/waoSrA3GVFmHcevF4Ot+nEJtFB+O9JL751k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WWnc-xFUwU4N031UCr45kHDAWaE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C588DAF, serialNumber=5969DCFB1154C14E0DD37D540ABE399070C059A1
        Validity
            Not Before: May 10 04:30:57 2025 GMT
            Not After : May 12 04:30:57 2025 GMT
        Subject: CN=681ed681-bc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8a:ce:67:03:cb:72:ce:35:8c:6e:09:10:ea:
                    fa:48:43:26:4d:90:f6:a4:bc:e2:5b:b0:c4:bd:58:
                    b7:15:26:48:c7:ae:fd:6d:bb:91:d0:55:50:e9:3e:
                    3d:ee:eb:a0:78:f4:99:6f:d1:24:82:04:3f:5e:67:
                    56:57:2b:89:ba:e0:8a:29:d8:ba:a8:ed:8c:57:a7:
                    65:1b:e0:2e:1c:79:da:7c:cd:0c:5b:e1:b0:d9:c6:
                    70:8e:bf:2d:89:4e:e0:a0:7d:7c:1b:72:ea:0c:21:
                    0c:01:82:b6:18:a8:14:b1:d2:ee:63:99:85:ce:55:
                    fa:9a:1b:3e:0f:48:f7:c5:24:eb:4c:c9:eb:cd:de:
                    2e:71:6d:50:af:e0:e0:7c:6a:8f:e1:b2:92:ff:8a:
                    be:30:e2:c6:5b:90:6b:dd:56:de:e4:fe:46:63:f0:
                    92:d2:e4:f8:be:cc:cd:e4:94:08:37:b2:e8:5a:1a:
                    9f:c9:7a:46:2d:33:5e:18:67:99:22:89:44:b4:dc:
                    cc:ee:3f:33:7b:ee:c8:a0:7c:86:34:ac:83:00:ed:
                    5a:36:90:9e:87:78:79:8f:be:7d:19:43:32:2a:56:
                    a7:db:da:7e:42:67:33:ce:ed:2e:95:da:5f:57:23:
                    df:3d:07:79:39:39:eb:d9:42:81:1a:66:87:3b:3f:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:19:1C:5B:31:21:00:27:DA:A9:3D:94:ED:8B:3C:66:E3:0A:A0:D6
            X509v3 Authority Key Identifier:
                keyid:59:69:DC:FB:11:54:C1:4E:0D:D3:7D:54:0A:BE:39:90:70:C0:59:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WWnc-xFUwU4N031UCr45kHDAWaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:bb:b4:91:18:f5:a0:ea:1f:0d:e8:84:1a:7e:1c:23:dc:d6:
         4b:d1:69:67:98:06:ef:98:15:e8:38:3b:e1:30:2e:24:4e:d3:
         0d:7d:32:b5:54:2e:e1:83:cf:43:a0:f0:e1:49:3d:76:5c:06:
         a5:78:c5:c8:73:7a:d9:fa:25:76:1d:8c:e4:a6:28:6e:5a:a6:
         4c:50:f9:ae:70:ef:54:4e:dc:4c:80:96:5e:af:f8:87:c3:a4:
         75:ae:98:81:24:63:bc:1f:5a:66:e4:11:b5:71:db:9f:54:07:
         5e:0a:b4:c5:dd:1d:61:55:76:19:14:0f:b7:03:b5:5a:67:2c:
         96:02:fe:59:ad:31:91:71:04:46:e1:d6:96:6a:47:97:83:89:
         15:6a:28:9c:e9:60:17:e2:96:42:9e:4e:58:a6:af:8f:6f:91:
         88:56:35:07:03:c8:b2:94:35:c0:8b:44:96:91:95:f7:f3:bc:
         5e:ad:41:b5:0b:cd:fa:0e:b0:f5:0d:56:9b:2c:42:b1:10:56:
         1a:92:d4:ae:60:87:61:95:76:f3:e9:6e:cc:f4:e3:24:ca:e6:
         3a:9d:29:8f:e1:5b:d6:08:04:3e:fd:a1:83:04:00:96:71:24:
         72:48:2c:fc:8d:97:72:12:f6:5d:3c:40:d7:aa:59:44:6f:5c:
         ec:72:36:2a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4OERBRjExMC8GA1UEBRMoNTk2OURDRkIxMTU0QzE0RTBERDM3RDU0MEFCRTM5
OTA3MEMwNTlBMTAeFw0yNTA1MTAwNDMwNTdaFw0yNTA1MTIwNDMwNTdaMBgxFjAU
BgNVBAMTDTY4MWVkNjgxLWJjM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUis5nA8tyzjWMbgkQ6vpIQyZNkPakvOJbsMS9WLcVJkjHrv1tu5HQVVDp
Pj3u66B49Jlv0SSCBD9eZ1ZXK4m64Iop2Lqo7YxXp2Ub4C4cedp8zQxb4bDZxnCO
vy2JTuCgfXwbcuoMIQwBgrYYqBSx0u5jmYXOVfqaGz4PSPfFJOtMyevN3i5xbVCv
4OB8ao/hspL/ir4w4sZbkGvdVt7k/kZj8JLS5Pi+zM3klAg3suhaGp/JekYtM14Y
Z5kiiUS03MzuPzN77sigfIY0rIMA7Vo2kJ6HeHmPvn0ZQzIqVqfb2n5CZzPO7S6V
2l9XI989B3k5OevZQoEaZoc7P0krAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmxkc
WzEhACfaqT2U7Ys8ZuMKoNYwHwYDVR0jBBgwFoAUWWnc+xFUwU4N031UCr45kHDA
WaEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1ODhEL0YyNjg0QUNBMDYwQzExRUZBQzQ1RDUzQjAxNzAwMUIxL1dXbmMt
eEZVd1U0TjAzMVVDcjQ1a0hEQVdhRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dXbmMteEZVd1U0TjAzMVVDcjQ1a0hEQVdhRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzU4OEQvRjI2ODRBQ0EwNjBDMTFFRkFDNDVENTNCMDE3
MDAxQjEvV1duYy14RlV3VTROMDMxVUNyNDVrSERBV2FFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzu7SRGPWg6h8N6IQafhwj3NZL0Wln
mAbvmBXoODvhMC4kTtMNfTK1VC7hg89DoPDhST12XAaleMXIc3rZ+iV2HYzkpihu
WqZMUPmucO9UTtxMgJZer/iHw6R1rpiBJGO8H1pm5BG1cdufVAdeCrTF3R1hVXYZ
FA+3A7VaZyyWAv5ZrTGRcQRG4daWakeXg4kVaiic6WAX4pZCnk5Ypq+Pb5GIVjUH
A8iylDXAi0SWkZX387xerUG1C836DrD1DVabLEKxEFYaktSuYIdhlXbz6W7M9OMk
yuY6nSmP4VvWCAQ+/aGDBACWcSRySCz8jZdyEvZdPEDXqllEb1zscjYq
-----END CERTIFICATE-----
Generated at Sat May 10 10:38:44 2025 by rpki-client