Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
File:                     2LbhjGXdH5bypUTKz8mAhq75KW8.mft (raw, json)
Hash identifier:          rbajD6bg3XZdCf1xwI3OQq7BPtTzUuzuk5FfbavW1DM=
Subject key identifier:   CC:C7:6F:52:95:2B:70:68:BA:50:E5:0F:DE:52:A8:FD:BE:30:EB:C5
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Certificate issuer:       /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial:       0708
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
Manifest number:          06EB
Signing time:             Sat 23 Aug 2025 02:05:52 +0000
Manifest this update:     Sat 23 Aug 2025 02:05:51 +0000
Manifest next update:     Mon 25 Aug 2025 02:05:51 +0000
Files and hashes:         1: 2LbhjGXdH5bypUTKz8mAhq75KW8.crl (hash: 3LrF7sYaGV3LbzdG5fA711zsGgRt8OlI6joe0I1SOto=)
                          2: 4D448904CF5811EE973188BD775412E6.roa (hash: ySSYPE0shLpdO7tNiGvvy73ZDXbdIqU3PG2m2I/Ajqg=)
                          3: DCC047FEE06E11EEB2B0FC6C775412E6.roa (hash: Tz/tIAPulQlEyr/QEKB9q80Zxn8V6++we+recfQKhpE=)
                          4: 2DE942E8F05011EEB7E2EA77775412E6.roa (hash: GBenxdZx6aEBeL1h9fe5p87DnQDStd1SWX74CBckZcY=)
                          5: B26CC39CE06E11EE9B19AF6C775412E6.roa (hash: Ty5HAlTEhASXYCuUF5uWrrX1/gj8dWsdudDz16cov10=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAF, serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
        Validity
            Not Before: Aug 23 02:05:51 2025 GMT
            Not After : Aug 25 02:05:51 2025 GMT
        Subject: CN=68a92200-2cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:45:77:20:a5:d0:dc:b9:32:99:e7:19:00:
                    4a:36:2c:81:1d:f2:ac:90:f8:04:a5:a2:8f:98:49:
                    6d:3a:cc:8d:cc:82:9d:6e:96:22:02:92:39:c7:96:
                    b4:76:66:d2:40:97:06:13:20:74:2f:f8:46:ae:8b:
                    27:d7:d9:9b:48:ee:03:cc:05:62:19:12:dc:7c:e0:
                    62:f9:29:64:e1:0c:d7:e6:8e:c0:2b:3f:6b:00:e7:
                    90:33:85:1e:5d:7d:13:69:4f:a3:6f:11:7e:ec:84:
                    16:5a:ee:17:50:e3:40:24:be:e0:fb:af:a8:74:5b:
                    14:b0:79:1f:47:a6:06:9a:a9:73:e5:4f:89:a9:6e:
                    3d:1b:07:f9:ca:d6:67:9b:eb:86:17:81:49:f2:84:
                    2f:ad:89:6f:1b:16:d9:11:89:bc:41:52:86:4f:83:
                    74:8a:14:b8:c5:a1:11:70:8e:1f:eb:e7:1b:e3:31:
                    83:b5:87:8d:1f:4f:2e:dc:91:af:dc:53:33:32:85:
                    bf:45:6a:ce:dd:e0:c9:48:4a:ac:d4:cd:80:52:4e:
                    1e:c2:9b:04:59:4f:81:52:e7:7e:fb:c3:70:e3:f4:
                    6b:ba:a2:de:ec:22:da:51:46:d3:ae:67:8e:9f:ae:
                    1e:34:b7:73:d5:8c:d0:a2:37:38:07:09:7a:7e:64:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C7:6F:52:95:2B:70:68:BA:50:E5:0F:DE:52:A8:FD:BE:30:EB:C5
            X509v3 Authority Key Identifier:
                keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a9:63:4a:70:e0:82:f6:4a:d3:46:e6:45:ef:fe:f0:57:73:
         4b:9b:c7:2d:52:a3:26:a4:e1:fe:83:d3:ca:a0:1a:b7:90:a4:
         61:f7:ad:5c:99:7c:d3:47:2e:e8:f7:2f:23:0c:b4:e6:6b:c7:
         31:35:9c:a2:9d:85:fb:7a:d2:19:38:e2:85:c6:76:f3:16:5a:
         8e:8c:e6:92:ae:08:de:61:51:9d:56:52:3a:19:52:38:9e:10:
         fa:bd:41:0d:a4:96:d5:32:bf:ec:7b:78:6d:74:06:ca:85:98:
         1d:8e:de:d2:4d:90:d8:8b:ea:20:62:75:8f:b9:cf:10:48:70:
         65:d4:e4:f3:55:44:4d:ec:e9:c2:06:24:ea:1a:86:57:d1:0f:
         ff:0c:5c:44:48:21:8d:e6:09:4a:95:95:c6:2a:3d:fe:bb:56:
         89:ba:ab:bf:d3:f6:08:a8:e6:f3:cb:b2:f3:8f:19:db:ba:89:
         96:52:79:2f:95:ee:19:ff:50:9c:02:fd:2b:90:22:4a:23:a1:
         c7:d0:f7:51:c6:e7:79:94:25:57:37:61:18:d9:07:89:c1:d5:
         a0:77:bb:cc:a0:df:81:0e:22:29:93:a5:9e:37:21:43:17:67:
         2e:71:9e:00:c3:33:14:53:4a:db:93:e0:01:6a:de:e0:97:8d:
         ce:44:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:24:40 2025 by rpki-client