Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
File:                     TibbH7y8v-dYX84SgHnV75Hfj14.mft (raw, json)
Hash identifier:          knz/Ejk0M+KjWX51MngtsWM8G0zDzei9m6isyQUB67k=
Subject key identifier:   88:F8:C9:A0:63:3E:1E:66:8B:69:F1:3C:CA:19:E5:6B:24:97:CC:9D
Authority key identifier: 4E:26:DB:1F:BC:BC:BF:E7:58:5F:CE:12:80:79:D5:EF:91:DF:8F:5E
Certificate issuer:       /CN=F36E33CDAF/serialNumber=4E26DB1FBCBCBFE7585FCE128079D5EF91DF8F5E
Certificate serial:       0425
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TibbH7y8v-dYX84SgHnV75Hfj14.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
Manifest number:          0422
Signing time:             Sun 11 May 2025 03:05:22 +0000
Manifest this update:     Sun 11 May 2025 03:05:21 +0000
Manifest next update:     Tue 13 May 2025 03:05:21 +0000
Files and hashes:         1: TibbH7y8v-dYX84SgHnV75Hfj14.crl (hash: KW8dd4MeYmyfVp3G50eKj6ipsgq+XpSJMyjFOhM4oWI=)
                          2: E6CDC9AA237E11EDB6A2EDF9F1222468.roa (hash: n+PuUD7Nff8t9oN2JZTn6zKXJJ6q9obodlo2ezFFRl0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TibbH7y8v-dYX84SgHnV75Hfj14.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E33CDAF, serialNumber=4E26DB1FBCBCBFE7585FCE128079D5EF91DF8F5E
        Validity
            Not Before: May 11 03:05:21 2025 GMT
            Not After : May 13 03:05:21 2025 GMT
        Subject: CN=682013f2-1a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:3e:6f:3b:f6:ea:0c:c5:3d:ab:c2:3b:24:
                    a2:5a:53:34:bb:35:da:62:07:19:3a:70:95:75:76:
                    cb:7e:b8:8c:a5:f4:a3:78:c7:7b:35:03:5f:73:7c:
                    e0:99:0c:5c:ae:e6:c5:f3:5a:78:e8:b5:d5:09:74:
                    ef:3c:5d:30:49:1c:18:cb:b6:32:c9:64:a2:d9:3c:
                    4f:c5:af:6c:80:c4:7b:4e:a3:ad:50:c4:c4:08:26:
                    0b:1a:be:e3:96:bb:44:0c:7c:5e:e2:db:27:8f:8d:
                    6f:8b:ef:3e:d4:a4:18:5c:1e:00:28:ee:18:7b:05:
                    3d:4b:f1:b7:56:a4:32:c2:be:09:1f:80:03:76:3e:
                    d0:45:b7:28:88:46:48:8a:e1:6f:8b:ff:53:e9:3c:
                    95:42:d1:b3:8c:65:e3:21:b7:01:b3:67:bd:02:e5:
                    dc:f0:70:7d:e5:ae:df:02:93:b6:7b:78:8c:e5:08:
                    e8:1c:a1:14:40:84:84:c7:ae:ad:f2:62:8a:39:71:
                    d3:d4:32:a0:7a:a1:f4:e1:fc:7e:29:d5:f5:d6:b7:
                    bd:16:f1:c4:9b:95:dd:e9:bb:5b:ae:98:33:85:3b:
                    a0:b7:68:23:a5:ac:b9:fb:f5:cd:0e:fb:0b:33:7a:
                    49:ce:b6:2a:ea:68:0f:ae:09:b0:76:60:76:4a:08:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F8:C9:A0:63:3E:1E:66:8B:69:F1:3C:CA:19:E5:6B:24:97:CC:9D
            X509v3 Authority Key Identifier:
                keyid:4E:26:DB:1F:BC:BC:BF:E7:58:5F:CE:12:80:79:D5:EF:91:DF:8F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TibbH7y8v-dYX84SgHnV75Hfj14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d7:45:e0:8f:ae:95:0d:1b:09:a4:8f:c2:33:25:e8:dc:58:
         63:f9:60:bf:c5:22:a9:8a:bb:6a:11:6e:ae:69:99:05:23:57:
         30:74:9c:79:ce:53:21:3c:4c:f3:7b:98:56:c2:99:4b:48:b6:
         11:5b:f5:f5:2e:d6:2c:bb:d5:3d:fa:b8:8e:07:e6:4e:fc:31:
         2a:5a:ad:bc:d3:50:df:e6:f2:42:b5:4b:31:d8:c6:8d:d7:d5:
         e0:fe:9c:2f:84:d6:fe:66:8b:2c:33:d1:b4:10:0d:d1:1f:41:
         dd:4b:a1:62:ec:36:03:8e:ce:44:95:be:aa:dd:b6:25:07:8a:
         b9:95:40:57:56:77:79:b2:3f:15:86:be:77:1d:53:76:d0:fa:
         3e:4f:af:25:4f:0d:76:cf:ac:d2:a8:53:8e:e6:c9:8f:5b:f7:
         56:2d:6b:b8:05:42:12:ba:8c:0c:06:0f:c8:47:77:7f:57:72:
         44:64:ee:e9:8e:3d:41:24:61:92:47:1a:d9:8f:6c:25:0a:ef:
         e6:fc:9c:7e:54:d6:65:c3:5e:15:63:d6:97:99:c0:e5:d9:b8:
         58:0b:38:7f:91:54:c1:6b:a0:d8:c9:25:b8:6a:90:c0:7a:49:
         07:cb:2f:e8:14:79:0a:96:a4:3b:09:f3:b3:d5:66:d7:18:44:
         cb:5a:19:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:41:34 2025 by rpki-client