Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
File:                     sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft (raw, json)
Hash identifier:          H71fnp8vajQY/NdQ3uAy4ZADs2pa4ciYAdvbadT5vQs=
Subject key identifier:   F8:07:DE:A7:B9:3C:20:A2:C5:2A:80:F8:2D:1B:1E:41:0A:A5:4F:BB
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       01B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
Manifest number:          01AA
Signing time:             Wed 02 Jul 2025 04:33:53 +0000
Manifest this update:     Wed 02 Jul 2025 04:33:52 +0000
Manifest next update:     Fri 04 Jul 2025 04:33:52 +0000
Files and hashes:         1: sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl (hash: HBij5cQ80MU3ac4kfstmwmYmp4296lcs95Z7XL2cfqg=)
                          2: 0EB2B67C8FAE11EFB0C6F19A762E951A.roa (hash: dRhtvM/2t47z2JwA9sfqbVs7olYpopo1AghyJCkiJnU=)
                          3: A3E369B88FAD11EF84E8C298762E951A.roa (hash: KHj93NQJWTZ8oMi0gw+QEnklPoZI/vRnCOYhgqAuDO0=)
                          4: 7017818A912B11EFA858BC80762E951A.roa (hash: 8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: Jul  2 04:33:52 2025 GMT
            Not After : Jul  4 04:33:52 2025 GMT
        Subject: CN=6864b6b1-939e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:00:9f:12:fa:82:84:78:d7:a1:23:e5:93:
                    3e:f6:cf:0b:6d:22:0f:cb:42:a1:b2:68:7e:bc:c1:
                    4a:32:7a:f6:00:88:3b:5b:04:72:e8:e7:5f:88:bb:
                    e0:d6:a0:27:79:f9:7c:77:da:f4:ec:74:5d:09:75:
                    a1:f1:1e:aa:fc:1c:a6:53:0f:a2:d8:62:8f:05:97:
                    63:58:86:65:65:73:d1:21:bb:84:05:eb:68:1a:f1:
                    73:5e:a3:4d:de:ae:15:57:90:9a:3b:03:5c:fe:3b:
                    aa:d3:46:32:7c:3f:34:ec:34:15:2c:d8:f6:9c:b1:
                    37:8f:c8:f6:7f:f8:b4:90:35:7d:ad:7f:ee:9c:1b:
                    dc:a5:b5:42:ef:02:3e:75:93:e1:59:77:78:4a:e8:
                    f6:dc:e1:ec:b9:53:26:dd:3e:93:55:e9:a0:24:52:
                    d4:a5:d5:32:e9:2e:a7:cc:ed:db:50:0b:e4:4b:33:
                    b9:a4:04:f3:8e:e9:ff:39:92:fe:9f:b9:93:64:ea:
                    45:bf:c3:e0:11:75:2a:66:4a:f7:d7:2e:5b:27:45:
                    23:35:77:cd:d7:de:ac:09:50:6a:58:7b:9c:77:f7:
                    f2:ad:67:a7:31:a6:c0:48:35:1b:a7:10:40:2f:d0:
                    d9:52:24:9d:ef:58:c5:9c:d4:ed:61:06:e7:2b:b5:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:07:DE:A7:B9:3C:20:A2:C5:2A:80:F8:2D:1B:1E:41:0A:A5:4F:BB
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:16:16:0d:0f:df:0a:58:52:f2:40:7a:02:58:5f:62:7e:52:
         7a:0b:ac:e1:27:35:f9:02:06:e2:a5:00:f2:a2:ea:d4:e8:9b:
         0a:6a:3a:60:4e:58:cd:07:23:09:bb:15:25:72:f6:78:ce:93:
         eb:ad:e8:c9:29:ae:c1:96:84:92:96:71:a1:c1:ab:42:26:14:
         6b:2c:58:47:25:ad:8b:ac:49:af:6f:e2:16:b0:ae:c0:0e:ea:
         9e:83:56:22:ba:ed:d1:95:d4:91:c3:7c:ff:2b:df:86:9e:35:
         a5:3e:3f:9a:98:82:aa:16:a4:69:5b:5b:d8:0e:57:bf:2c:3b:
         2d:6a:2d:83:a8:c1:12:91:14:e1:ca:9f:c4:c1:cf:8d:81:ed:
         19:cf:de:db:96:06:3c:33:c1:6b:32:93:30:74:b7:67:97:84:
         84:4a:62:a7:ad:69:c7:65:22:c9:ff:c1:46:5b:ab:31:6e:1e:
         3e:6c:14:77:4c:e0:e2:3b:d9:99:05:4c:d5:1c:a5:10:66:85:
         e9:08:29:57:e1:b8:44:5a:04:4d:e6:bb:36:83:6b:05:c1:c6:
         fd:14:46:4b:1f:3a:46:7c:d5:12:52:b0:f8:04:bb:b3:ea:bc:
         cf:f8:53:40:81:5e:96:f0:fd:70:67:1c:55:07:d5:3e:0a:27:
         b0:5a:d6:77
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhGODZBRjExMC8GA1UEBRMoQjFCQTNEN0M3RDhFQ0Q1MTFGREE0QkYwRUMyOUY2
QTk5QjJDMzFCQjAeFw0yNTA3MDIwNDMzNTJaFw0yNTA3MDQwNDMzNTJaMBgxFjAU
BgNVBAMTDTY4NjRiNmIxLTkzOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+9ACfEvqChHjXoSPlkz72zwttIg/LQqGyaH68wUoyevYAiDtbBHLo51+I
u+DWoCd5+Xx32vTsdF0JdaHxHqr8HKZTD6LYYo8Fl2NYhmVlc9Ehu4QF62ga8XNe
o03erhVXkJo7A1z+O6rTRjJ8PzTsNBUs2PacsTePyPZ/+LSQNX2tf+6cG9yltULv
Aj51k+FZd3hK6Pbc4ey5UybdPpNV6aAkUtSl1TLpLqfM7dtQC+RLM7mkBPOO6f85
kv6fuZNk6kW/w+ARdSpmSvfXLlsnRSM1d83X3qwJUGpYe5x39/KtZ6cxpsBINRun
EEAv0NlSJJ3vWMWc1O1hBucrtX+9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+Afe
p7k8IKLFKoD4LRseQQqlT7swHwYDVR0jBBgwFoAUsbo9fH2OzVEf2kvw7Cn2qZss
MbswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4Rjg2LzQzMTU5ODg2MTkyOTExRUZBNzBDQzA2RTAxNzAwMUIxL3Nibzlm
SDJPelZFZjJrdnc3Q24ycVpzc01icy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NibzlmSDJPelZFZjJrdnc3Q24ycVpzc01icy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjhGODYvNDMxNTk4ODYxOTI5MTFFRkE3MENDMDZFMDE3
MDAxQjEvc2JvOWZIMk96VkVmMmt2dzdDbjJxWnNzTWJzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPFhYND98KWFLyQHoCWF9iflJ6C6zh
JzX5AgbipQDyourU6JsKajpgTljNByMJuxUlcvZ4zpPrrejJKa7BloSSlnGhwatC
JhRrLFhHJa2LrEmvb+IWsK7ADuqeg1Yiuu3RldSRw3z/K9+GnjWlPj+amIKqFqRp
W1vYDle/LDstai2DqMESkRThyp/Ewc+Nge0Zz97blgY8M8FrMpMwdLdnl4SESmKn
rWnHZSLJ/8FGW6sxbh4+bBR3TODiO9mZBUzVHKUQZoXpCClX4bhEWgRN5rs2g2sF
wcb9FEZLHzpGfNUSUrD4BLuz6rzP+FNAgV6W8P1wZxxVB9U+CiewWtZ3
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:05:53 2025 by rpki-client