Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
File:                     -wkj-GnVLjM4ArnFPXizuoZUMMw.mft (raw, json)
Hash identifier:          pPUhcBbTZ+dk55GVPvfRb8VaB0AwlZCZuy5fnIA4fHc=
Subject key identifier:   56:E1:0F:54:62:C1:73:A0:56:3E:8B:18:2A:AE:84:E5:C6:5E:20:EF
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Certificate issuer:       /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial:       0420
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
Manifest number:          041E
Signing time:             Mon 23 Jun 2025 02:07:57 +0000
Manifest this update:     Mon 23 Jun 2025 02:07:57 +0000
Manifest next update:     Wed 25 Jun 2025 02:07:57 +0000
Files and hashes:         1: -wkj-GnVLjM4ArnFPXizuoZUMMw.crl (hash: Q+I7Rbu1wIzN4igjgVk0QBUMI81vGy+iqUSHfbyuEIk=)
                          2: 83ACCE309C0411EDB12456CEF1222468.roa (hash: TIYICNTcucn9WwS8nowmdJ5oP58ro1vC+nknb7WxgMg=)
                          3: 7E6D0BDA329411ED83690DA6F1222468.roa (hash: 9vBXav7hVf2XlLbTRQ+k6U2z6DcdpesgBwg/u89dKXo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 25 Jun 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
        Validity
            Not Before: Jun 23 02:07:57 2025 GMT
            Not After : Jun 25 02:07:57 2025 GMT
        Subject: CN=6858b6fd-b68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:90:12:50:48:df:41:5b:b4:d5:15:a9:57:
                    01:e5:ae:aa:a2:75:8b:c0:5c:db:6e:83:a9:f9:78:
                    cd:8c:4f:a6:04:bd:55:3b:c2:84:7f:5e:88:d4:89:
                    48:66:bf:5c:32:2d:f1:5e:c9:ab:74:6d:a4:dc:ef:
                    77:31:a2:74:18:a1:19:56:86:dd:c7:59:c0:9b:5a:
                    45:f1:17:d5:59:ce:10:31:da:76:1a:02:08:5b:9a:
                    dd:e3:5b:24:ee:3f:c9:76:5a:19:e0:7a:2f:ec:68:
                    a8:82:01:67:d6:ff:cd:0d:c0:a4:b8:ea:59:cd:cc:
                    18:bd:8e:67:fd:48:f5:f2:49:34:4a:c7:9c:6c:03:
                    aa:2a:b5:fd:d9:0a:3c:8f:8e:b5:1e:a0:46:2d:30:
                    2f:7e:42:8f:c5:50:88:03:d1:62:5e:a6:9e:4e:2f:
                    80:5e:77:12:86:7e:ec:9f:3d:25:de:62:47:f7:1e:
                    95:1c:27:27:23:61:e2:01:7a:8a:b4:3b:7a:e2:ae:
                    e7:1e:e8:8e:a1:45:dd:ca:f4:5c:1a:9f:d8:cd:0b:
                    77:6d:eb:d1:70:b6:00:bb:dd:e9:15:1e:b7:c9:81:
                    0a:42:26:d9:7d:6a:f5:30:e9:5e:6e:90:17:51:9f:
                    17:7d:9a:78:cc:57:eb:c5:f9:df:42:24:a5:7b:da:
                    27:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E1:0F:54:62:C1:73:A0:56:3E:8B:18:2A:AE:84:E5:C6:5E:20:EF
            X509v3 Authority Key Identifier:
                keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7f:71:19:d5:6f:5d:e7:e9:44:c5:1b:b5:50:6d:81:ae:46:
         07:79:ce:d5:62:70:2c:6e:9a:29:37:5a:02:de:26:43:f9:7f:
         1d:c0:da:3e:f0:fc:c2:a9:97:18:e8:88:43:a8:2f:c3:ed:bd:
         27:4d:cd:e4:92:8e:fb:3a:c5:ce:cf:06:8f:9b:a5:68:39:57:
         94:c6:92:92:b1:14:d9:ae:f4:22:7e:fd:6e:4a:18:11:e7:65:
         d7:90:06:d7:cf:bf:7b:e8:eb:de:01:65:6f:db:dc:5e:6d:94:
         bd:23:99:b1:1f:98:65:fd:36:97:6c:68:1f:df:28:94:4b:5e:
         50:2b:70:77:03:6e:19:db:5a:1d:c3:49:d1:d8:dc:99:c1:5c:
         b7:08:ce:08:9d:b2:6a:49:f4:28:81:61:bb:5a:98:e1:75:27:
         76:3e:77:09:ad:1f:99:c2:d9:f4:a9:72:92:94:fa:6a:b9:de:
         88:57:b7:1b:4f:55:43:93:9c:48:1d:0c:6a:25:1b:28:40:31:
         30:5f:53:ed:60:87:54:fd:d5:84:a4:5b:2d:77:f9:66:2f:a4:
         aa:30:0d:a9:ce:26:c8:85:a4:83:f5:88:45:49:50:fa:46:26:
         a7:fc:77:64:ab:6a:7f:49:c8:4c:fd:e4:9e:c5:2a:79:3d:17:
         b8:d3:81:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 14:12:37 2025 by rpki-client