Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
File:                     _wMoIAB4rDbwLXEB0DS3vll-oVg.mft (raw, json)
Hash identifier:          YLf5mwm2J1c7Xx8UH2ENR1Lfg5XIHvL8p/Cq4fsBT28=
Subject key identifier:   43:02:56:A4:90:85:FE:7A:06:0B:D1:39:1B:20:75:D5:05:C6:E5:32
Authority key identifier: FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
Certificate issuer:       /CN=F36EC712AF/serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Certificate serial:       036D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
Manifest number:          036B
Signing time:             Tue 01 Jul 2025 03:36:33 +0000
Manifest this update:     Tue 01 Jul 2025 03:36:32 +0000
Manifest next update:     Thu 03 Jul 2025 03:36:32 +0000
Files and hashes:         1: _wMoIAB4rDbwLXEB0DS3vll-oVg.crl (hash: TG+YqNoXv6c9tRPpzA6b5hjxKbswd9CxLKntT6jWZtQ=)
                          2: A1A5CE94563C11EE88D6F1324AD9E6FC.roa (hash: saKiwJ8KKnppgVVbmjEBrSXoNu9lhnFM5zhR+5yMxKU=)
                          3: 70135CE8563C11EE84A463324AD9E6FC.roa (hash: FAzApSbefpRaVqlqwSbC+qhl5egdnzLXqnPgFd8tD84=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 03:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC712AF, serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
        Validity
            Not Before: Jul  1 03:36:32 2025 GMT
            Not After : Jul  3 03:36:32 2025 GMT
        Subject: CN=686357c1-bbaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:d0:b9:11:df:0c:b5:57:93:32:51:28:38:
                    52:84:5f:31:8b:95:eb:17:9e:07:14:e5:84:a8:9e:
                    1b:6b:72:3c:e1:30:ca:47:bf:00:f6:0d:85:33:02:
                    a5:13:fa:5b:32:23:c3:a4:f8:03:67:b2:2c:89:3b:
                    18:53:42:b4:4d:c2:0c:c7:26:00:52:86:64:06:6f:
                    6c:35:ed:41:aa:1e:94:75:41:a3:0c:1e:e5:c8:7b:
                    b1:06:d9:00:45:8b:16:12:4b:3f:12:7c:7a:37:f1:
                    65:7a:a3:cf:b9:fb:d4:47:d3:06:b5:a5:44:35:67:
                    fe:05:bf:ec:a5:29:52:64:4e:70:85:54:4f:20:0f:
                    65:bc:4c:11:59:b5:17:36:ad:a3:5d:ee:fd:59:ac:
                    85:45:3c:50:bc:a2:a1:92:9b:cb:ef:3d:df:d9:4e:
                    18:04:cf:10:6e:e1:5c:7e:e6:dd:3d:d9:a5:ab:58:
                    c1:86:19:e5:a1:1a:2c:07:75:23:ce:fa:02:13:d3:
                    6f:ea:03:e8:1c:05:1c:22:da:fe:b1:96:56:b9:18:
                    9d:00:56:39:e9:13:0c:60:93:c0:17:0c:09:2a:49:
                    45:2b:51:1e:c8:f2:f0:a1:e2:51:ef:bb:d2:36:75:
                    58:55:8f:90:5f:3d:51:1a:19:8c:92:c3:6f:2d:77:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:02:56:A4:90:85:FE:7A:06:0B:D1:39:1B:20:75:D5:05:C6:E5:32
            X509v3 Authority Key Identifier:
                keyid:FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6f:96:97:e7:ae:e3:71:12:57:56:b4:07:e1:ea:6f:98:c3:
         ab:c9:44:e9:74:cd:a1:99:76:82:f3:d4:08:9d:66:35:04:b7:
         b0:3a:83:2e:cb:57:6e:ed:44:46:6a:95:73:cc:f6:fb:e9:0b:
         a4:c8:24:c3:12:20:4f:54:f8:82:5d:73:ff:c5:1d:03:db:41:
         70:a9:c7:f7:62:36:05:fc:9d:9d:4f:46:65:4d:79:5e:25:72:
         06:1c:37:89:ea:fd:0d:c9:52:22:83:29:57:9b:34:35:c6:13:
         46:61:88:89:d9:69:73:ea:73:9c:d2:63:33:02:29:5c:68:f7:
         f2:32:72:75:7f:54:df:23:08:8a:b6:96:f6:74:77:9a:cc:17:
         99:2f:1a:76:3d:fc:0e:b5:da:13:27:31:9d:b0:3b:72:ce:0d:
         6f:83:c1:2a:ae:31:77:a2:83:44:e5:e9:88:4d:91:36:c2:20:
         f6:ef:5f:17:81:fe:bb:45:9e:83:f7:ad:0f:e0:41:3e:b9:22:
         02:ec:a5:97:2d:a5:a3:d2:48:16:f9:53:a3:46:b8:85:1f:b5:
         b8:34:c9:44:07:0b:95:67:f9:41:2e:63:2f:da:ed:b3:73:79:
         e9:e8:24:92:ae:d6:03:7f:20:c9:59:f5:72:2c:8c:b2:03:4a:
         2e:db:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:25:29 2025 by rpki-client