Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
File:                     e5q4nC36bjo-yHXuV_4sDZpxQcA.mft (raw, json)
Hash identifier:          UXD3hzQSvZqzNGQiSF3ipbVOQgR6tFMfHYqssSNyjKQ=
Subject key identifier:   F5:F3:BB:49:FE:EC:07:DC:9B:C8:08:89:E6:1F:7D:1E:32:ED:0C:CB
Authority key identifier: 7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0
Certificate issuer:       /CN=F36E6854AF/serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
Certificate serial:       015A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
Manifest number:          0159
Signing time:             Sun 04 May 2025 04:35:24 +0000
Manifest this update:     Sun 04 May 2025 04:35:24 +0000
Manifest next update:     Tue 06 May 2025 04:35:23 +0000
Files and hashes:         1: e5q4nC36bjo-yHXuV_4sDZpxQcA.crl (hash: o5GSp9TM5xZ5Qf3afkRmCt2nXTCVhEdvnp8AWz1WFWs=)
                          2: 41B9BD06230F11EF89072D357DDC24C2.roa (hash: Vju6CP63vk7sWntfujwYKbfkTEsNT3KYrBm9nMWtFv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 May 2025 04:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6854AF, serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
        Validity
            Not Before: May  4 04:35:24 2025 GMT
            Not After : May  6 04:35:23 2025 GMT
        Subject: CN=6816ee8c-bcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:32:c9:a1:83:00:b4:3f:0c:b9:5e:ba:26:
                    86:58:3e:13:98:84:68:f4:95:ba:da:9e:62:c3:17:
                    d1:f0:f4:8d:0b:97:7d:b8:d6:03:49:c8:3a:83:dc:
                    26:dd:7e:59:d2:bd:4a:73:e3:f6:07:b4:6e:54:44:
                    80:e9:60:07:c3:31:68:96:55:f8:ef:c7:e4:12:13:
                    ca:54:ef:fc:c5:7a:51:d0:87:93:bf:d2:46:8e:43:
                    86:88:a1:e7:56:6d:0b:88:bc:6b:e5:26:04:99:c0:
                    94:11:2d:ca:3b:7e:a1:dd:27:fe:a0:c9:ea:46:db:
                    c0:f4:df:cc:a8:6d:f0:bc:d4:e8:c1:4a:5a:23:2d:
                    45:13:d7:0b:67:9b:7c:e9:d7:db:ea:ac:5e:13:92:
                    f5:ba:52:8e:39:89:bd:56:ad:15:f5:1d:8c:67:8a:
                    6c:bf:7e:2e:2c:b4:34:fd:3a:5f:c8:86:0d:7c:6e:
                    37:64:fc:e3:6d:7d:23:70:5c:ca:45:37:b9:56:ed:
                    26:f8:c5:e3:9f:63:8c:06:15:e7:b9:e3:66:ae:88:
                    d8:06:26:a2:ce:63:cd:fa:12:52:37:99:50:42:71:
                    85:c7:2a:7b:40:c9:10:2e:01:6d:93:6a:38:61:a2:
                    1f:80:4f:ba:e7:3b:c5:7a:c0:aa:97:14:fd:6a:7d:
                    25:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F3:BB:49:FE:EC:07:DC:9B:C8:08:89:E6:1F:7D:1E:32:ED:0C:CB
            X509v3 Authority Key Identifier:
                keyid:7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c9:06:4f:2a:76:13:a7:55:39:e6:dc:80:d1:1c:34:ab:52:
         eb:98:47:de:05:9a:22:3b:52:cd:d8:e2:f4:5b:ea:40:68:13:
         94:25:15:4b:db:42:6d:90:4d:af:23:c0:da:26:cc:14:42:34:
         77:e3:b1:8b:2a:cb:aa:a3:88:57:c3:f2:9d:39:4f:07:54:0e:
         2f:91:8e:ed:e1:ed:70:95:8b:4b:fa:6d:c6:91:01:f1:22:d7:
         40:2f:e1:8f:dc:60:4c:e0:2d:bf:5e:d0:58:7b:52:39:25:74:
         95:b3:c8:37:ac:59:d6:c9:eb:05:79:9b:27:13:cf:be:e6:6c:
         11:3e:75:f4:f8:04:31:3f:3b:ca:f9:b3:d7:93:c5:95:06:c6:
         71:c7:91:1b:76:4f:37:69:19:f8:8d:7f:1f:ac:72:f8:c0:0c:
         d4:21:f0:83:34:59:92:67:7b:49:13:5f:e8:3c:04:f8:05:2f:
         9f:04:d1:5a:c7:7e:f6:1f:ad:f9:af:75:26:76:b7:4b:92:6a:
         6b:35:01:59:26:82:ac:21:7a:3e:35:4a:d5:d3:26:52:b0:84:
         f5:27:a8:28:5c:c0:66:29:f6:f4:56:a3:82:b5:5f:33:ff:c0:
         1c:ec:00:7f:5a:ed:59:1f:17:4a:83:b4:b0:b1:3e:64:d6:d2:
         cf:7d:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:26:33 2025 by rpki-client