Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
File:                     WNo74zGmEqquT2owY3cEBjrD3UI.mft (raw, json)
Hash identifier:          yD9WvHDRtOvP3woypZUS7gYMou30yLOw8aqOP6Wrqy8=
Subject key identifier:   D1:EE:AC:94:17:89:CA:04:D2:E7:F8:9C:F4:6D:24:D0:63:78:09:2C
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Certificate issuer:       /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial:       027D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
Manifest number:          025A
Signing time:             Wed 02 Jul 2025 04:20:19 +0000
Manifest this update:     Wed 02 Jul 2025 04:20:18 +0000
Manifest next update:     Fri 04 Jul 2025 04:20:18 +0000
Files and hashes:         1: WNo74zGmEqquT2owY3cEBjrD3UI.crl (hash: r+aqFZZwzTOx/6fXf5+dshsrKd71blMN+6M18rSJ/l0=)
                          2: A9A8EF80067211F08D1A5B9B762E951A.roa (hash: HELpA4r6g8kZx2JMmYGabU/lqfkTf9mY8LkkC8nHg8I=)
                          3: 50FDE6E2067211F0AC6ABF97762E951A.roa (hash: y7Nv+bH3FidSubQa8fRdolbEXF7mYdZZhVh8i0wIYHw=)
                          4: F85AF57E067211F09411CC9B762E951A.roa (hash: M7iTLJiKvNwSTd9F5Yj4i6rXdd1RJ7bKnAkeW0q5GC8=)
                          5: 754E26D8065E11F09A2716A2762E951A.roa (hash: zh+pcogH6F4sf0J81SxS9FfDqpi+s0Y7FFeEVA5a1Vs=)
                          6: 6A831B68067311F0A5B3819F762E951A.roa (hash: dHewD/xYlqQhiWTpdXFrkxy+Gj1C9QIhRZsurBV3l/c=)
                          7: 2F1A0898067311F091A5799F762E951A.roa (hash: CNCaOGq5e+fSVQ4wKVSRok1jWDlNhofbmJTl2fwntNQ=)
                          8: D0BDEA5AFBB711EF9F66FA8E762E951A.roa (hash: enMw35WYPPq+4i07Lg/h4bfes66PnQ1o07jpZ2J1Hjw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 04:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637 (0x27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CA351AF, serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
        Validity
            Not Before: Jul  2 04:20:18 2025 GMT
            Not After : Jul  4 04:20:18 2025 GMT
        Subject: CN=6864b383-6f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:7c:95:d1:15:26:13:91:b6:45:a3:ec:7b:
                    c9:8e:31:8a:49:bf:71:69:61:6e:96:7b:60:31:1c:
                    79:9e:ba:5f:63:c4:83:4f:dd:34:80:76:aa:6d:6f:
                    63:b6:5a:06:ed:79:51:c2:0c:35:e8:93:e0:c7:54:
                    5a:dd:ef:bd:8a:ea:93:ad:20:7d:52:c3:cf:38:cd:
                    73:6e:37:e2:d5:c3:b7:5a:53:d9:92:62:78:ba:34:
                    e8:2b:8a:7a:9a:77:13:70:3f:94:93:91:3f:c5:04:
                    db:31:ee:37:23:c1:0f:9e:96:14:70:ad:2c:6c:3b:
                    1a:f3:b0:f9:22:2e:97:1c:7f:57:95:c1:fb:c8:90:
                    f4:aa:58:91:2e:9a:10:b9:94:38:c6:cd:ff:30:bc:
                    d5:13:89:16:8a:80:9a:d4:c1:db:27:0b:29:78:ef:
                    9c:36:67:bf:27:06:b5:ce:79:bb:f1:f7:e0:0a:a9:
                    87:a8:5c:5c:db:b0:a8:c6:af:2e:b1:7e:85:3e:12:
                    ee:bc:8d:98:6a:cc:c5:27:ce:b7:c4:85:ed:b2:53:
                    8d:b2:41:ad:7a:30:00:97:ca:55:f3:a0:92:df:3a:
                    a6:b9:ed:b3:f4:c8:2f:c1:b7:67:11:86:e4:a0:3c:
                    16:be:73:d5:13:0f:c7:0a:8a:9e:14:9c:53:c4:64:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EE:AC:94:17:89:CA:04:D2:E7:F8:9C:F4:6D:24:D0:63:78:09:2C
            X509v3 Authority Key Identifier:
                keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7e:c8:c2:e0:ba:0d:7e:3e:a3:e0:5a:19:e9:f5:8a:16:72:
         fd:95:16:63:11:65:d4:04:4c:ad:aa:de:41:29:ee:15:bd:d3:
         80:de:9a:51:a6:aa:d5:03:eb:97:23:89:06:88:3a:c8:06:88:
         ab:f1:f8:af:1c:33:5f:e7:3c:75:0b:37:e8:9a:4c:6d:99:19:
         7a:43:dc:8a:21:f4:d7:99:e6:15:37:16:84:2d:f8:8e:ae:64:
         20:86:48:86:12:8d:ce:b3:2b:df:4d:43:0f:ad:80:d5:f1:8f:
         af:20:78:e6:05:55:de:df:0b:8d:d3:2d:9c:4a:94:d4:71:f8:
         76:b4:c9:97:49:ab:35:16:1a:b0:e8:07:49:c8:ef:ef:dc:f8:
         4e:6a:23:d8:bd:90:25:fb:3d:22:8a:61:e6:49:55:c7:8a:4d:
         fe:e9:fb:45:26:bf:05:f4:f6:89:e4:94:10:f4:38:c9:0a:9d:
         a8:b9:ee:cf:17:7a:17:d6:90:09:d0:77:f9:4d:af:ef:b7:4b:
         53:8b:c9:96:20:aa:c9:3f:6d:a3:9a:90:6e:0e:a0:2e:e4:93:
         54:d7:8c:84:1c:c5:2d:5f:3b:2c:44:99:ec:28:31:7d:87:77:
         15:56:d6:22:c0:c8:02:9e:7d:4c:00:4b:70:47:cf:96:66:53:
         c9:44:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:49:12 2025 by rpki-client