Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File:                     9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier:          PHTnmcyA1FJnwmGs5EHrhrjMzzMHDJ1PA7QreyFJ1Is=
Subject key identifier:   14:7B:A7:87:65:14:F9:2F:46:C6:15:3D:7F:0E:77:3A:23:5C:BF:38
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer:       /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial:       013B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number:          013A
Signing time:             Tue 13 May 2025 04:46:24 +0000
Manifest this update:     Tue 13 May 2025 04:46:23 +0000
Manifest next update:     Thu 15 May 2025 04:46:23 +0000
Files and hashes:         1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: x/YoHTZhhIwb+ShrMKG4ogkn2/PaJZvpad3mgoG+8OA=)
                          2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 May 2025 04:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
        Validity
            Not Before: May 13 04:46:23 2025 GMT
            Not After : May 15 04:46:23 2025 GMT
        Subject: CN=6822cea0-1c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:17:53:0b:01:43:a5:68:af:54:25:2d:46:
                    ad:4b:8c:ba:09:ff:42:17:aa:8b:10:de:68:f3:3d:
                    d7:1e:68:1e:49:dc:fd:32:4e:22:5f:29:34:33:fb:
                    c7:3b:ed:4e:a0:75:63:49:cd:9b:9c:b1:60:49:e4:
                    9b:ec:a7:2d:9a:80:7e:35:5e:7f:57:99:68:8b:05:
                    bf:02:56:8a:83:a3:50:4e:8d:e0:c7:92:fa:31:95:
                    53:48:72:c6:55:ea:05:65:c0:fe:c7:c2:4b:84:26:
                    22:15:4c:7f:37:b2:3a:91:12:3f:b8:a7:60:54:6a:
                    03:b0:be:78:1d:be:50:8f:d6:62:58:5a:3d:92:63:
                    cf:41:d4:93:f0:7e:db:74:e5:77:ba:f6:30:ae:12:
                    5a:f1:7b:e8:b8:8f:7e:77:0e:c9:e2:37:8b:64:5b:
                    a3:b1:28:b0:32:75:67:50:36:24:b3:76:9b:b4:43:
                    f1:57:1a:cd:ec:1e:c7:c3:ca:9b:50:b8:0f:54:57:
                    ad:cc:86:3c:a4:b2:ad:37:86:ef:f4:42:c7:7c:fe:
                    13:9f:3d:f6:96:99:ad:e6:ac:a9:d0:0f:31:5e:98:
                    04:88:c3:bb:19:40:12:8d:33:39:5a:31:92:37:b8:
                    6c:d3:ee:8b:48:2f:23:b9:21:64:a0:1c:39:d5:8e:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7B:A7:87:65:14:F9:2F:46:C6:15:3D:7F:0E:77:3A:23:5C:BF:38
            X509v3 Authority Key Identifier:
                keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6f:9d:8f:aa:f9:2d:7e:e5:a4:87:0e:48:7a:54:92:7f:44:
         90:d9:aa:dc:5d:64:48:40:f3:c9:01:34:8f:b6:67:df:11:d2:
         1b:80:3d:f8:de:fd:21:e6:06:92:ff:13:ae:08:99:56:d7:ee:
         47:be:e7:a4:00:d0:85:a8:30:9b:07:d2:94:33:e6:8a:bf:a4:
         68:10:3e:b1:0c:8d:73:04:62:7a:82:ae:6c:1e:8e:4f:5c:a7:
         5f:20:ad:8c:5f:64:1f:40:dd:3c:7b:8d:2b:c7:34:fc:f0:87:
         27:33:df:b2:00:ea:d6:bc:a3:88:ec:88:98:3e:9a:3b:3d:57:
         78:02:5a:ed:2e:4b:72:36:86:c6:49:9d:49:72:da:46:3f:4b:
         ca:17:fd:ef:52:66:37:7c:0c:05:49:ba:1e:2e:cf:53:d3:91:
         35:69:0d:1b:ff:3d:78:24:6b:33:f6:ed:f4:92:25:20:40:a3:
         d1:dc:8b:4d:17:85:c4:c3:d5:95:90:b7:60:35:2c:12:cd:57:
         93:fd:1a:71:30:0d:65:f9:a4:ef:13:e7:c0:ab:c4:8d:5d:0e:
         57:6e:9b:8c:47:db:27:ba:da:bc:1d:b9:8d:04:49:04:2a:03:
         ae:89:7f:58:9e:59:37:aa:0d:d3:5a:d9:20:e9:6f:b1:c9:b7:
         8e:0b:05:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:02:45 2025 by rpki-client