Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
File:                     Wob5iKEjH4bJcjMShVh-z4ZL25A.mft (raw, json)
Hash identifier:          H3AYHUC/7Nne9WXBropgR04wbpVF2H5pkyYQl1dR9J0=
Subject key identifier:   D6:45:F8:C3:DE:5A:CC:87:A8:7A:F3:17:4A:3D:B0:C4:AE:16:D8:81
Authority key identifier: 5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
Certificate issuer:       /CN=F36FA13FAF/serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Certificate serial:       08A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
Manifest number:          089B
Signing time:             Wed 02 Jul 2025 01:38:25 +0000
Manifest this update:     Wed 02 Jul 2025 01:38:24 +0000
Manifest next update:     Fri 04 Jul 2025 01:38:24 +0000
Files and hashes:         1: Wob5iKEjH4bJcjMShVh-z4ZL25A.crl (hash: sfn1FWk+3CTVQcqgZQ+AQUszKImz/PZ0cB0LISh/j+0=)
                          2: BC46616C9AFB11ECA18A8A895A40D577.roa (hash: siGB+YyYJADyfug/WgaGsUNasPkOvZWP4/Iz9BLePsI=)
                          3: 4C64BF4C9AFB11ECB58B52885A40D577.roa (hash: 58jy1C6d3WrJ/oJASDCkngyvBXzia2JH2GYnHdN661A=)
                          4: 508536209AFA11ECA56176855A40D577.roa (hash: AdNPqjJ7lYb3Mhu0FE9KQ9W5o9LsUhKXMO54oXl/coM=)
                          5: 19F651E6C4DA11E9AB3B1D27F8AEA228.roa (hash: 6cNifU+dnh2iNhQgpKvyLDNVbFzFJJzW3fscpRBY7Yw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 01:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2208 (0x8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA13FAF, serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
        Validity
            Not Before: Jul  2 01:38:24 2025 GMT
            Not After : Jul  4 01:38:24 2025 GMT
        Subject: CN=68648d91-9676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:03:13:55:be:dc:54:78:6b:0c:75:11:eb:
                    19:10:e7:ab:a2:53:69:0e:27:07:4d:4c:e0:67:2b:
                    f6:95:cf:ad:b6:bb:fe:7d:e0:cb:b6:32:6d:bf:05:
                    0c:2d:54:7f:dc:2e:31:5c:9c:bc:5e:77:ea:07:02:
                    d8:37:7f:0e:64:b4:cc:67:bd:64:e9:c4:77:c2:be:
                    40:36:15:a0:27:5d:ad:88:30:af:54:12:5b:32:16:
                    eb:39:79:12:4e:eb:02:94:47:6f:e6:93:84:77:3f:
                    66:27:62:17:54:2c:3a:d4:d4:b6:96:3d:fd:32:d2:
                    57:71:c8:a3:fe:a5:2b:0a:d3:e6:42:e9:41:f3:24:
                    76:ca:7c:e3:1e:0d:8e:67:a4:3b:5e:d1:fc:24:9c:
                    c8:59:16:17:42:fb:5d:de:93:05:df:f7:64:cb:aa:
                    ec:db:e5:a5:87:0f:16:b1:8d:86:71:ec:42:95:25:
                    10:c7:fe:39:be:be:39:04:1e:9f:74:bc:0e:7e:be:
                    e4:07:66:24:3f:51:8e:ba:93:d0:51:be:24:46:a5:
                    0c:97:1f:df:25:64:c4:9d:d9:c2:8d:ce:8b:95:15:
                    27:c5:d0:78:4d:65:19:18:07:04:fc:23:48:f3:64:
                    01:63:39:33:b2:7e:70:55:9c:8f:1e:e5:c1:4c:05:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:45:F8:C3:DE:5A:CC:87:A8:7A:F3:17:4A:3D:B0:C4:AE:16:D8:81
            X509v3 Authority Key Identifier:
                keyid:5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:33:70:bb:e7:bf:49:f7:67:a5:42:83:d1:cc:dd:0c:d4:c5:
         ff:18:12:49:aa:86:2b:5d:9e:0f:8b:d6:8b:03:61:26:a8:4f:
         dd:63:12:24:04:32:76:f3:43:e1:bd:7f:0b:f7:6d:81:3c:5f:
         4e:69:75:66:76:2b:8f:0c:b5:fd:bb:ef:98:da:e3:e9:ff:f2:
         f7:b3:22:52:84:01:ac:d9:44:84:0f:57:09:ad:fa:23:ee:6e:
         64:ce:4e:75:f7:a7:4c:8f:f6:26:42:bb:e8:57:e2:12:ae:4c:
         43:0a:06:3a:f0:0b:4f:ca:23:f8:ae:6f:f9:1f:1b:60:41:4f:
         88:13:8d:0e:b0:0c:d0:d5:0c:73:3a:f2:41:e5:8a:9c:2d:e5:
         24:fa:a2:d4:69:74:f3:5f:a6:ce:a2:1e:3a:a4:15:fc:4f:4d:
         98:03:54:7a:5f:ca:a2:2d:c0:a0:7d:27:ed:f1:11:e0:bb:c3:
         4e:7d:54:81:64:9a:36:4d:6e:99:a5:6d:a8:76:48:4c:19:d1:
         5a:43:53:6c:ce:60:5d:aa:d7:cc:aa:91:5a:e0:9c:d7:0e:07:
         aa:4c:e1:4a:73:5c:9e:e6:f8:3c:2f:36:d2:5c:f7:9a:30:95:
         8f:2c:b6:55:88:99:50:13:50:2d:fb:13:19:0c:4d:95:46:6f:
         6a:f7:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:08:05 2025 by rpki-client