Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
File:                     u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft (raw, json)
Hash identifier:          /vvchheuZjM0DuUyR3k+4kADCgnjA+bD/oIKX8oZOSM=
Subject key identifier:   68:C8:D1:20:7C:D7:7A:D1:7C:C4:87:F7:E7:9A:24:16:BD:D1:FF:8E
Authority key identifier: BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
Certificate issuer:       /CN=F36E084CAF/serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
Certificate serial:       0811
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
Manifest number:          080B
Signing time:             Wed 14 May 2025 01:44:25 +0000
Manifest this update:     Wed 14 May 2025 01:44:24 +0000
Manifest next update:     Fri 16 May 2025 01:44:24 +0000
Files and hashes:         1: u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl (hash: NLMZ5ZVGa2z2QxIKfypoSwLFIKS/fl8AYDWJs+h+RZA=)
                          2: 86921EA0A38311EBBE2DD613F8AEA228.roa (hash: Qdm1jwSuwMkCRXEjG6ft+SApHF6cYD5AROgyucfXjCM=)
                          3: C2A79C94A38311EB9FD81C14F8AEA228.roa (hash: wCi/saeIICAwOHNLZFRK/7Rxl1hUxRkLtU6ihyqYm9U=)
                          4: 09404144A38211EB9403A411F8AEA228.roa (hash: XszKqqcugifGQ7P7cFMGaXWJ1rKb7154oh90pRoXSnM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 May 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065 (0x811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E084CAF, serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
        Validity
            Not Before: May 14 01:44:24 2025 GMT
            Not After : May 16 01:44:24 2025 GMT
        Subject: CN=6823f579-aa35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:87:36:dd:84:4e:bd:f7:80:2d:b8:f5:fc:
                    22:d8:47:0a:60:a1:e6:70:87:ac:df:6e:d5:6f:5b:
                    9f:fe:af:e2:be:91:9e:ab:f1:8b:35:df:a5:e4:dc:
                    5b:7c:f4:57:25:7d:b8:fc:19:b9:3e:c6:e5:2c:df:
                    04:17:b1:db:18:ae:4d:96:09:a3:3b:ef:5a:83:14:
                    78:90:81:ad:b0:34:24:13:f8:22:5f:9c:e4:6d:cd:
                    d8:49:7f:22:58:d7:c7:d2:b2:21:6f:36:32:79:ba:
                    1b:c6:98:ca:a7:29:39:07:96:51:8b:0d:9e:7b:90:
                    9c:68:6c:21:44:84:fc:a3:eb:05:bc:ee:a5:8b:18:
                    a8:d2:88:e4:41:ad:3b:c2:3a:ce:02:de:a8:28:6e:
                    85:55:a2:83:a2:86:41:c2:bd:7c:1f:67:87:d6:5f:
                    e0:15:1b:cc:4a:42:c9:04:ac:84:a7:16:3f:97:89:
                    c0:91:e0:7c:c7:c0:03:7a:a6:59:d9:26:52:5f:86:
                    c3:74:44:37:19:8f:57:36:9a:1b:be:80:34:c2:0d:
                    bd:18:27:f1:2e:b1:0a:f8:1e:32:f5:2c:8f:52:94:
                    14:ef:af:b8:07:20:06:f1:6e:19:87:1d:a1:cb:17:
                    fb:a1:56:56:e7:ab:a6:ce:2e:62:4a:af:a7:45:8a:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C8:D1:20:7C:D7:7A:D1:7C:C4:87:F7:E7:9A:24:16:BD:D1:FF:8E
            X509v3 Authority Key Identifier:
                keyid:BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f4:3c:2d:a3:de:14:30:0b:32:24:3f:ee:33:38:6b:fd:3a:
         6b:53:dd:e3:da:d9:6e:75:69:0a:32:fa:0f:52:8e:7b:15:84:
         ca:10:78:a6:cc:ea:71:0a:91:1c:36:5d:87:15:03:eb:f2:53:
         01:eb:1b:b0:dc:42:f2:37:58:3f:32:cc:d1:25:ae:11:37:1d:
         7d:5a:8a:9c:ee:8d:8e:c9:ec:92:0a:d3:66:f5:3d:80:82:5d:
         4b:90:d2:79:9e:c1:a2:90:91:ba:be:0a:53:87:61:46:79:66:
         74:84:a8:ca:b5:5b:39:78:73:c0:16:aa:f8:39:55:e7:11:b7:
         f5:38:80:b4:3d:7b:d7:9d:5d:fa:a4:0c:81:79:a6:8a:f5:c8:
         3e:82:53:ca:a2:69:5e:0a:9f:ce:9f:97:97:3a:d4:48:e5:b4:
         65:03:55:31:3d:fd:22:78:8c:0a:24:8c:50:21:65:cc:54:65:
         6e:3d:b2:42:ff:35:da:15:02:a4:3d:c5:a4:ec:40:43:70:5b:
         2b:87:54:44:a7:88:53:5c:9b:b7:38:b0:54:d9:89:8b:f2:bb:
         71:97:66:fb:08:86:e0:ab:44:1b:f4:78:d0:e8:09:13:6d:3d:
         02:12:22:7f:19:5e:b2:c1:17:5f:0d:7d:e8:e6:51:29:bc:4c:
         c1:a7:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:04:53 2025 by rpki-client