Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
File:                     Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft (raw, json)
Hash identifier:          xKnPq+6OLSiP2pDULvLabU0kz/ivu2Llrqnum25iPFw=
Subject key identifier:   89:01:C7:BE:1B:0E:70:24:C6:97:60:CF:4B:F1:D1:DA:B8:74:AC:13
Authority key identifier: 3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65
Certificate issuer:       /CN=F36FC328AF/serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
Certificate serial:       0546
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
Manifest number:          0545
Signing time:             Fri 04 Jul 2025 02:43:09 +0000
Manifest this update:     Fri 04 Jul 2025 02:43:09 +0000
Manifest next update:     Sun 06 Jul 2025 02:43:09 +0000
Files and hashes:         1: Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl (hash: +tiXiHqbiZBq4BlWZI5H19Lkyczxpq3vTkEVI9CHftc=)
                          2: 5966A982513411EC87153C3CD8A014CE.roa (hash: XiML3N/Ks2DTKm6yJyQZ8MauTZzboO/Tl8GClySWfiw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1350 (0x546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC328AF, serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
        Validity
            Not Before: Jul  4 02:43:09 2025 GMT
            Not After : Jul  6 02:43:09 2025 GMT
        Subject: CN=68673fbd-6344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:33:7d:64:27:66:c3:8f:2f:24:93:ed:1e:
                    6b:ce:e7:f6:1e:29:42:fe:29:0e:09:0d:29:f2:55:
                    02:d7:60:7b:36:79:99:ec:70:34:29:d4:be:c1:92:
                    96:e2:68:2c:26:b0:38:30:df:37:01:87:d5:2f:52:
                    61:11:bd:3a:ba:fb:22:d6:d5:9a:d7:dd:00:30:29:
                    d1:51:f3:bd:db:78:19:9d:4a:c8:27:21:5b:a0:fa:
                    cf:c2:8b:fa:10:14:93:f3:2d:a2:d5:9f:0c:e5:c9:
                    f6:c6:34:5b:02:0f:1c:c7:51:86:98:ad:6c:72:c5:
                    af:b5:cb:e4:3c:20:2b:b1:51:fb:fd:42:7d:b1:66:
                    5c:54:3c:bb:9a:3e:68:67:fc:ab:64:2d:90:66:ab:
                    56:df:ed:b9:0c:e1:84:48:30:6a:4f:44:1d:a2:1e:
                    69:80:c6:a2:1e:14:8f:0a:b1:a4:58:df:0c:9c:54:
                    c3:e0:6d:38:45:02:f1:5c:97:f2:5a:68:4f:67:c5:
                    c9:a4:fb:97:d0:4e:35:ff:3a:25:53:d7:34:aa:ae:
                    e7:4e:4e:11:4b:4f:c7:41:70:48:21:31:54:aa:26:
                    4a:98:64:99:0f:f4:ea:3e:ff:af:9b:91:06:84:dd:
                    b5:4e:64:c8:2c:1f:e8:11:11:20:db:0c:1c:d7:0f:
                    88:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:C7:BE:1B:0E:70:24:C6:97:60:CF:4B:F1:D1:DA:B8:74:AC:13
            X509v3 Authority Key Identifier:
                keyid:3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:19:48:6a:05:31:13:a3:eb:9a:f2:6f:de:53:57:c3:fc:
         39:8c:ec:3a:0d:35:c8:ea:dc:7e:a1:34:cd:58:a9:3f:40:60:
         e5:29:eb:01:62:03:21:78:33:9f:cf:23:ac:6d:b3:eb:b0:12:
         1e:0d:2d:df:49:ee:d4:af:a1:f3:c1:9c:8c:20:1f:a5:27:88:
         f1:3f:92:1c:5c:6b:3d:6d:7c:3f:42:1c:19:41:34:df:ec:33:
         fe:fe:c2:90:9a:84:26:88:49:60:50:49:18:56:9d:c5:61:fa:
         23:56:61:98:b9:8b:37:60:cc:05:f6:a2:7f:d2:62:17:94:2b:
         5c:f6:7e:cd:78:68:10:e9:3b:cb:50:eb:cd:48:63:fa:96:de:
         e0:dd:42:3e:ec:53:4f:52:e1:5c:48:d5:c3:cb:34:78:7a:a8:
         f3:f4:fb:f1:dd:97:3d:a6:e8:4a:3b:6f:94:bb:69:d6:b5:0f:
         7f:6f:e3:22:21:06:39:cf:16:51:9d:23:1c:e1:68:64:4e:65:
         8d:77:c9:3d:f7:c3:3a:1d:9b:67:8f:85:42:bc:09:0b:06:be:
         25:89:48:f9:71:29:53:23:6c:66:12:13:5f:1f:71:ad:84:bc:
         a6:b8:52:92:6f:40:81:06:95:ba:0f:d0:25:ce:9e:8d:17:39:
         ee:fa:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:03:41 2025 by rpki-client