Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
File:                     OdAwrgr6xpErCxM_96NC94TQ6ow.mft (raw, json)
Hash identifier:          bNaqm/fecmJnE+HeFaponRMk0MpxukjtAaYZpUhQ1E4=
Subject key identifier:   66:B2:21:EC:48:87:9C:11:EB:6D:4C:1F:BD:39:8C:4D:F6:82:AD:C7
Authority key identifier: 39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
Certificate issuer:       /CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Certificate serial:       085C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
Manifest number:          0856
Signing time:             Thu 03 Jul 2025 01:42:51 +0000
Manifest this update:     Thu 03 Jul 2025 01:42:50 +0000
Manifest next update:     Sat 05 Jul 2025 01:42:50 +0000
Files and hashes:         1: OdAwrgr6xpErCxM_96NC94TQ6ow.crl (hash: qbe+zCcEh6KsLjCmldeUtuwXj2OCxAOXpWECRp46hqQ=)
                          2: FE48D08AFC9D11E9BD0D4B40F8AEA228.roa (hash: bklBiFJiibIM4Ahr4MuYEGegKTjEFLUjUyhhSPhmCAA=)
                          3: EC1AC2E4FCA011E99F078842F8AEA228.roa (hash: vMaEHZSbtMwTml47SDgjbkHSKoCPHIjAJPxF4JG+NtM=)
                          4: B0109E46FC9F11E9A7249141F8AEA228.roa (hash: mWLr9gpGgYGc2eTR3HzordVAt5z5qlqSSvhvwmTMGaQ=)
                          5: 38D7B3B4FC9F11E9A4E33B41F8AEA228.roa (hash: nNsbmr9/5pRB8Y6AFAqdxecPNFhdqNuMc+kOEEeB4Yk=)
                          6: BF97D40AFC9B11E9A8F7AE3EF8AEA228.roa (hash: G9n58toWNUqMDu66699/GW70sTU/7pnUIRdVDqWMeDQ=)
                          7: A4EBAA16FC9E11E9A1B9C140F8AEA228.roa (hash: 80PrfbUNINLOm8aOdH0UPxFoBlumMScmqP938jPlttA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0163AF, serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
        Validity
            Not Before: Jul  3 01:42:50 2025 GMT
            Not After : Jul  5 01:42:50 2025 GMT
        Subject: CN=6865e01b-7b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:ee:49:99:a3:f3:99:09:98:51:d0:ac:5c:
                    77:62:47:04:47:ff:13:5f:ff:c3:a2:30:50:dc:7c:
                    b9:28:da:b5:f1:4f:69:de:de:be:56:20:ef:6a:a2:
                    58:59:e8:3f:cd:07:06:2d:46:d1:fd:08:da:74:20:
                    62:80:88:89:7d:b5:a3:13:1b:1e:18:1a:6e:85:ed:
                    d0:55:b8:af:0f:d8:e4:63:42:dd:e9:d3:0a:3b:6c:
                    22:67:90:08:50:d8:98:d6:2a:4e:b9:e8:9d:c3:bf:
                    1c:cb:c5:a2:80:25:84:45:5c:66:79:25:7d:91:3f:
                    49:38:86:cf:fb:75:ac:df:44:e3:51:6b:f8:ae:2b:
                    f0:1e:3c:36:c3:c4:61:2c:11:87:2c:c9:6f:69:c9:
                    a9:1d:47:33:21:34:36:28:5a:88:21:9b:73:fb:59:
                    27:9b:f9:1a:52:82:de:0d:12:49:f3:42:e9:55:60:
                    3f:43:0b:e3:e0:45:3e:a3:95:4c:63:b1:0d:ae:a9:
                    65:ed:f7:0d:9e:47:81:72:3e:cf:d0:62:ac:81:79:
                    63:ca:60:3c:25:4e:1e:64:37:d9:e5:a9:8c:29:7a:
                    96:88:d7:7e:f2:fa:be:09:c8:39:30:58:db:00:cc:
                    86:ab:57:a7:ef:a4:8f:ac:75:79:bb:c4:23:57:36:
                    16:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B2:21:EC:48:87:9C:11:EB:6D:4C:1F:BD:39:8C:4D:F6:82:AD:C7
            X509v3 Authority Key Identifier:
                keyid:39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:e8:3c:08:1c:d4:63:ff:1b:e2:3d:22:3c:56:03:37:f4:
         d2:06:ef:2e:a5:10:3c:ff:5f:e4:f6:29:07:50:a8:9c:aa:57:
         8d:29:6a:24:f6:59:c5:7c:26:20:38:3f:ff:94:fa:bc:9e:4a:
         03:b3:28:d2:ba:cb:60:ab:76:2d:64:0f:d0:68:72:c4:3b:ce:
         71:7e:01:ab:ce:52:f4:b4:bc:ff:a2:53:52:5f:8a:3a:89:0d:
         5e:6f:87:08:b6:2e:d3:df:1b:43:09:e2:03:2f:7d:91:65:7f:
         45:e5:fc:46:f3:ee:ed:b2:72:11:66:f9:1a:09:ef:de:bb:e3:
         f4:1a:7b:3c:ea:b9:35:9b:91:68:93:b1:3e:b0:25:c1:a2:c6:
         12:97:1e:98:d3:d4:ef:35:1f:0b:c1:a2:84:b4:42:96:22:1e:
         68:c8:33:a5:42:52:87:2b:f5:c1:bc:e8:9f:6b:b5:52:69:29:
         ad:36:b5:85:bf:ba:5c:f2:a9:61:b3:03:b3:46:22:d4:78:81:
         4f:f4:70:13:fa:46:98:84:5f:eb:ce:92:21:30:0b:32:50:e7:
         ef:1f:b6:f2:ec:7c:e3:b1:47:bb:9b:90:da:b2:be:98:a9:03:
         68:e6:c8:d1:64:17:65:df:c9:20:e9:99:c0:02:30:bb:f5:d1:
         dd:e6:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:03:27 2025 by rpki-client