Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
File:                     ki5AVQsnbd4essFQ31YlgeKM6LY.mft (raw, json)
Hash identifier:          gNAodNdVxZkMj5kqAwT57xKzgdHHgkCB2sCCBprWIjo=
Subject key identifier:   24:21:A6:3D:C2:76:F8:80:F5:58:C1:91:B6:F3:55:54:AE:22:F7:B2
Authority key identifier: 92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6
Certificate issuer:       /CN=F36F0F1FAF/serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6
Certificate serial:       02D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
Manifest number:          02D5
Signing time:             Tue 01 Jul 2025 03:56:55 +0000
Manifest this update:     Tue 01 Jul 2025 03:56:54 +0000
Manifest next update:     Thu 03 Jul 2025 03:56:54 +0000
Files and hashes:         1: ki5AVQsnbd4essFQ31YlgeKM6LY.crl (hash: b4ybPob1xhXMVnTCqiAAgNCrj6L0SJbG3Jceh8h/h3U=)
                          2: 100404ACF0EF11EF88C9AE71762E951A.roa (hash: 8k5gdkW/3dmY+rQ2FXNkTuiBZr2cv4drq04xkEmoRrA=)
                          3: 103C0BB8314711EE99292E464AD9E6FC.roa (hash: TmpoQ5dHcVfEPTGG3mk1fm6t56EElHhj1QpqJ0Vnq+E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 03:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0F1FAF, serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6
        Validity
            Not Before: Jul  1 03:56:54 2025 GMT
            Not After : Jul  3 03:56:54 2025 GMT
        Subject: CN=68635c87-721e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:b7:be:33:c2:ef:fb:76:99:7a:ff:b4:d8:
                    6f:cf:4e:b8:93:fa:eb:ae:b8:1d:ae:cd:37:d1:54:
                    ba:dd:21:d8:8d:0f:30:16:b1:ca:78:91:24:85:9b:
                    5e:e3:08:e8:d5:f7:5a:ef:67:1d:ca:e2:d4:ac:e2:
                    d8:d6:c2:82:df:bd:0d:03:fc:b8:d4:f6:70:34:25:
                    7c:ba:dd:2b:a1:13:75:c0:e2:38:ce:56:e4:ed:b7:
                    c8:8d:1f:02:04:46:d1:1f:ae:f0:72:2b:2f:4a:25:
                    d0:f3:6f:be:6f:c1:db:55:11:7a:c1:62:36:04:3d:
                    9f:d5:5b:57:b0:e9:c7:3e:2c:42:7a:53:0d:8f:d0:
                    77:f2:2e:a9:df:9b:31:32:d2:ff:c6:6e:ae:a7:da:
                    5c:72:e5:02:08:7d:c5:ea:da:64:b9:67:dc:4d:79:
                    c8:32:70:50:58:25:cc:91:ba:a8:43:9e:6d:9f:36:
                    14:71:db:19:b0:0c:fd:bc:b9:90:72:70:da:58:97:
                    8e:03:60:23:e5:b4:d8:67:03:65:f9:8d:2d:62:74:
                    cc:8d:40:a8:59:24:1b:dd:2b:e3:bf:29:49:b2:b4:
                    ce:61:0c:85:64:92:d1:b8:69:ae:16:b2:07:80:49:
                    fc:1d:c2:8f:3a:d8:e3:fd:95:79:7d:5c:df:ef:23:
                    9a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:21:A6:3D:C2:76:F8:80:F5:58:C1:91:B6:F3:55:54:AE:22:F7:B2
            X509v3 Authority Key Identifier:
                keyid:92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cd:8c:77:f5:51:e3:ee:71:7d:d3:6f:e1:a5:00:a6:e8:01:
         25:74:1d:7b:29:be:15:5c:fb:40:08:48:63:02:89:1a:d9:4f:
         1b:9f:87:00:e6:b3:51:97:e3:56:fa:0f:ac:d8:57:d3:d2:29:
         f7:c6:83:a2:b1:99:36:50:e3:fb:a2:5a:c9:b0:41:ed:42:67:
         02:c9:37:6d:56:de:08:47:91:1d:16:1f:89:66:18:7e:08:30:
         c8:61:2f:0e:f3:ac:86:32:c8:ab:18:5f:3c:30:5a:bc:50:fd:
         95:cd:5c:18:10:24:b8:93:59:ee:42:8e:cb:a3:f0:43:16:d4:
         8f:b3:f5:72:33:58:1e:cd:e6:6a:2a:f5:db:20:2a:e9:1f:84:
         ed:7c:eb:31:65:51:6e:80:c0:3e:81:f5:c1:0f:91:db:85:58:
         2e:20:7d:96:ed:1f:29:67:e5:ba:38:be:0d:84:43:e1:6f:71:
         48:72:7a:50:5a:13:33:f8:b8:56:f4:66:51:0e:55:de:c5:b4:
         b2:e1:2f:32:f1:28:bf:7a:14:90:bc:3a:98:4a:6e:a9:e0:94:
         ed:9e:9c:57:08:1f:1c:80:77:42:9c:1f:14:e7:20:ee:42:79:
         87:a5:bd:3f:b9:12:c2:6d:24:ed:f8:ff:d0:82:90:6d:b2:9f:
         36:c2:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:25:53 2025 by rpki-client