Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
File:                     8WD77pBHtMM9L6HZ04IBrg0Yw58.mft (raw, json)
Hash identifier:          FCRQcHRRUJY6tHmUn04hC0y4plHy03wVhr66dYWTO7I=
Subject key identifier:   02:1D:43:5D:F8:E3:35:F3:60:30:F4:04:A6:35:51:8C:09:93:19:C0
Authority key identifier: F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F
Certificate issuer:       /CN=F361C63DAF/serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
Certificate serial:       ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
Manifest number:          EC
Signing time:             Thu 01 May 2025 04:55:17 +0000
Manifest this update:     Thu 01 May 2025 04:55:17 +0000
Manifest next update:     Sat 03 May 2025 04:55:17 +0000
Files and hashes:         1: 8WD77pBHtMM9L6HZ04IBrg0Yw58.crl (hash: 4c49gn+RWSEz3yLC9GpUHWTyVGOtA3qMb/RDkNV9U/U=)
                          2: C7ECF7DE74D211EFA2250567762E951A.roa (hash: 2JN5T3Dym/uP+aQB4QDNBNpdJtMGonjqC1jPbmHacMk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C63DAF, serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
        Validity
            Not Before: May  1 04:55:17 2025 GMT
            Not After : May  3 04:55:17 2025 GMT
        Subject: CN=6812feb5-cf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:de:cf:ee:de:3f:eb:53:16:8c:53:a1:67:
                    25:7c:dd:42:09:2c:64:5d:f9:ed:19:39:c7:dc:77:
                    d2:7b:1c:90:4d:9f:f4:8c:9d:fb:48:11:03:ac:18:
                    55:8b:14:f5:3b:f1:23:79:fe:81:6d:d2:37:7c:d7:
                    23:3b:53:3a:28:e0:44:5a:28:de:08:a8:83:61:90:
                    52:a3:9e:00:5f:6e:3e:a5:0d:94:c8:06:69:a0:42:
                    a3:3a:83:b2:30:67:12:45:b4:7e:8e:b9:eb:33:c5:
                    28:29:c5:fe:79:f0:eb:ba:e5:55:52:f6:5a:81:e5:
                    f4:9a:07:73:70:3c:e5:cc:6d:55:8e:65:9c:53:7d:
                    96:ce:8b:c1:c7:f2:a2:58:33:a4:a4:23:a0:d7:a1:
                    ac:11:7f:5f:ec:46:b4:85:7b:7c:f5:f7:32:72:7d:
                    d5:7e:39:02:fc:af:a0:b4:59:8b:e0:36:3e:20:75:
                    e2:ed:b7:25:82:1f:9b:6c:ca:54:21:ce:36:19:02:
                    03:cb:bb:84:7e:ef:42:98:0d:63:90:7d:77:dd:38:
                    a5:e1:84:08:aa:09:73:40:e9:ac:60:00:6b:c5:1d:
                    2a:57:74:c2:b0:47:4b:4d:a8:eb:26:c9:48:63:10:
                    53:2e:62:55:96:c9:c6:9e:26:b1:e2:8d:98:2d:2f:
                    7e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1D:43:5D:F8:E3:35:F3:60:30:F4:04:A6:35:51:8C:09:93:19:C0
            X509v3 Authority Key Identifier:
                keyid:F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:51:4c:4e:a0:de:79:f3:38:f5:c4:3d:ce:9d:6b:72:90:40:
         68:ff:4c:a3:d1:34:4b:56:10:c2:88:57:48:0f:06:90:79:6d:
         f3:9a:72:ed:3c:02:b3:63:ab:08:27:65:d1:07:96:52:9c:bb:
         6e:47:ff:10:4d:a1:bd:25:fd:b2:30:19:fb:21:73:b9:3f:59:
         d4:a8:b3:31:60:f6:c8:d4:cd:3b:88:fb:08:4e:91:06:06:78:
         0d:bc:71:5e:3e:6e:b7:05:28:71:d0:5f:f4:1f:fc:ac:04:85:
         a4:85:fd:0d:a9:48:d1:a7:77:9a:16:c7:0d:6a:6b:fd:cc:5a:
         61:51:f9:9a:4f:b6:db:a1:44:25:79:de:0e:d1:ff:b2:4d:76:
         3c:da:91:68:0f:e4:30:93:0a:be:1b:f9:c3:62:46:1b:3b:66:
         75:14:2e:5d:3f:d2:06:82:38:5c:b1:e1:01:bd:b2:05:c8:d9:
         06:33:a2:0c:07:45:6d:82:47:46:22:02:e8:6c:dd:e6:53:c0:
         94:2c:78:d1:e3:53:0d:94:56:d3:66:1c:e5:43:f0:c8:fd:5e:
         9e:3e:dc:c8:5a:ae:fb:fc:02:5e:92:c8:45:1f:37:5e:d1:92:
         fc:95:59:2b:fe:bd:2c:f3:51:49:45:45:9e:c3:3b:65:bc:e0:
         92:56:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:47:11 2025 by rpki-client