Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
File:                     M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft (raw, json)
Hash identifier:          TQ5krJ7Im2Xd2B2hzCVisBxj9pbxi9CiMTcOO+ABPZU=
Subject key identifier:   38:C0:F8:73:6F:58:79:A2:84:AC:F9:E1:F5:75:02:77:F6:7A:C7:62
Authority key identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
Certificate issuer:       /CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Certificate serial:       0186
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
Manifest number:          0185
Signing time:             Mon 05 May 2025 04:33:55 +0000
Manifest this update:     Mon 05 May 2025 04:33:54 +0000
Manifest next update:     Wed 07 May 2025 04:33:54 +0000
Files and hashes:         1: M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl (hash: 5TxqcYAOsVUPm3iiPawrCyNQXDvg0lgnpbmaLCao2R4=)
                          2: C0E88DD6025E11EFB5BAAD30017001B1.roa (hash: DJWXY1V0N/SZP8fVnsyyzg0SRQs5AOjIUrDn4upoYrc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 04:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4CC6AF, serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
        Validity
            Not Before: May  5 04:33:54 2025 GMT
            Not After : May  7 04:33:54 2025 GMT
        Subject: CN=68183fb3-a9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:29:c0:ed:87:f5:1d:53:8c:ea:5c:ba:0e:
                    ee:79:1c:01:bb:a2:f3:32:70:f5:7d:5d:11:25:12:
                    8d:6b:0f:7e:fa:45:10:c3:2f:b9:97:ec:52:64:4b:
                    b9:e1:0c:a7:bc:60:4a:2f:1e:61:b0:05:de:1a:4e:
                    e2:49:0e:95:c5:f8:ef:c6:90:86:3d:b4:55:24:31:
                    6e:b4:a6:6e:ad:86:12:1e:6b:f3:fc:78:8c:61:ea:
                    cc:a9:25:62:38:2a:ac:59:b5:81:40:98:a4:f0:07:
                    45:7a:9f:4f:ca:be:da:6a:93:b4:a3:2f:94:b6:68:
                    9f:d9:29:4a:29:8f:75:6b:9b:63:30:ab:9d:5d:13:
                    39:67:57:32:48:b2:38:d9:12:67:0e:37:65:e2:c1:
                    5c:a4:78:7c:3a:4b:c4:67:55:81:1e:fb:4b:80:df:
                    36:af:c6:30:db:ff:89:bc:c1:71:52:52:cf:7c:04:
                    8b:72:f2:d3:b8:11:9f:ec:a7:86:cd:0e:bf:c9:b8:
                    56:0a:76:07:3d:12:dd:e7:fe:2c:75:13:d4:66:c9:
                    c2:10:f9:83:3e:68:aa:28:b2:78:44:cb:74:ac:39:
                    6d:32:7f:c2:89:a6:0c:ab:49:ec:b0:50:fd:d6:c8:
                    e7:f1:28:a2:2e:cb:97:66:b3:7a:df:a7:33:e0:1c:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C0:F8:73:6F:58:79:A2:84:AC:F9:E1:F5:75:02:77:F6:7A:C7:62
            X509v3 Authority Key Identifier:
                keyid:33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0e:08:84:06:89:de:6a:f0:9f:57:ba:27:90:a2:ac:2c:88:
         1c:49:1c:1a:b0:df:1f:ea:6c:60:2f:61:02:40:82:7b:95:9f:
         52:71:4a:3e:6c:6e:b8:94:9d:f6:a6:59:60:9a:81:5a:57:51:
         f1:c6:26:3f:58:3d:df:3d:a5:54:03:3e:13:d9:d3:7d:a3:f7:
         5b:f7:4c:a6:6f:be:6d:f0:48:ad:38:1e:d8:b3:fe:df:70:ad:
         43:6a:79:2b:26:cc:d2:92:05:e7:26:a5:9e:e3:2c:3d:b1:d7:
         2c:6a:1b:1f:d2:f7:be:03:20:e6:68:a3:67:38:43:2d:4d:91:
         23:70:92:60:e7:8b:f4:f2:11:97:99:84:d0:f6:ca:ab:18:69:
         9d:01:ee:05:c7:21:27:20:0f:e2:ac:b6:29:92:af:93:0e:01:
         d8:d5:00:37:98:94:a5:be:46:8b:48:7c:13:b0:94:2c:a2:c0:
         f0:e9:4f:62:c4:9e:bc:94:fd:7a:63:72:5e:82:b1:71:32:b4:
         24:87:54:ec:49:24:82:f2:a7:10:27:74:e1:97:7b:dc:69:9a:
         fe:9b:49:e6:81:d3:c3:29:75:59:3e:72:71:39:06:5c:20:53:
         a5:c2:7f:3d:d0:d4:05:7b:4f:b6:e2:c5:e3:7f:b0:b1:0b:49:
         7e:38:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:34:59 2025 by rpki-client