Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
File:                     OudkbOatVp92Fuam9v07GYa-1Bk.mft (raw, json)
Hash identifier:          TV12gY+oNSzpYWrDuAK0m+MQPLTc/ZQ2Zszmr5Wev8c=
Subject key identifier:   3C:00:5E:68:0D:54:5F:A1:3B:44:9E:88:81:C5:F1:7E:93:AA:FA:7F
Authority key identifier: 3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
Certificate issuer:       /CN=F366A2B2AF/serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Certificate serial:       19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
Manifest number:          17
Signing time:             Sat 09 Aug 2025 05:40:51 +0000
Manifest this update:     Sat 09 Aug 2025 05:40:50 +0000
Manifest next update:     Mon 11 Aug 2025 05:40:50 +0000
Files and hashes:         1: OudkbOatVp92Fuam9v07GYa-1Bk.crl (hash: ZADEitpRB0xZONTLkYssEyBR1XuTBZMMHGUbCgCrj5s=)
                          2: EF99DEAC66E711F0A50F79A4DAE4EC9C.roa (hash: 1ALkP5AE5BnLJ65DORy6a8qL9QHzH+dCAgd18lTAG+k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A2B2AF, serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
        Validity
            Not Before: Aug  9 05:40:50 2025 GMT
            Not After : Aug 11 05:40:50 2025 GMT
        Subject: CN=6896df62-fe3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:29:f3:3d:19:d6:15:8b:e7:aa:0d:cb:83:1b:
                    15:2f:d5:6b:60:31:04:25:4d:2b:d5:a9:71:5d:05:
                    39:1c:b8:63:d1:a0:3e:20:97:43:14:ac:3c:d2:99:
                    7a:4a:e9:bc:b8:3c:9e:13:e4:ee:e3:46:36:14:14:
                    cb:3d:43:18:79:b3:bb:20:04:57:0a:1a:2d:e0:2f:
                    a4:14:2c:21:9b:86:9a:fb:38:d7:54:ab:fb:ca:f0:
                    2a:a6:58:cd:c3:31:00:c0:6d:a4:93:65:44:8e:d9:
                    25:64:f9:e7:17:55:2b:e2:aa:ec:61:10:9b:83:da:
                    b5:9f:2c:b1:47:6d:47:81:13:33:71:99:2e:e0:cf:
                    1f:10:38:20:73:7e:c9:c5:a4:bf:89:3f:3b:14:57:
                    40:df:42:41:72:52:ee:a2:8c:91:2d:d4:22:20:19:
                    e3:55:44:a7:a5:67:f0:03:63:46:df:43:e5:36:da:
                    22:23:68:0a:19:b1:b1:1b:a3:6d:7b:0f:57:6e:93:
                    c7:a8:b2:65:df:02:77:c8:40:73:bc:0d:c5:be:6e:
                    32:03:c4:79:94:52:06:38:93:88:a6:ad:f1:76:65:
                    ed:74:ac:8f:f4:32:93:ea:84:2d:db:08:87:f1:0d:
                    a5:da:c6:c2:57:7c:d3:03:79:eb:e5:73:4a:05:72:
                    bb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:00:5E:68:0D:54:5F:A1:3B:44:9E:88:81:C5:F1:7E:93:AA:FA:7F
            X509v3 Authority Key Identifier:
                keyid:3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6d:1b:63:fb:73:1f:46:55:10:e8:1b:72:9d:06:c0:49:11:
         79:31:ee:9c:dd:eb:f9:73:b9:37:f5:f9:31:7e:f1:9b:99:76:
         2c:8c:13:6e:77:52:9c:2f:2c:8f:ce:68:46:e2:0f:50:67:d3:
         f4:68:2e:c7:da:95:3e:69:5d:8f:24:15:be:ac:6a:47:8e:65:
         82:8f:b1:98:72:8a:9d:e7:74:8a:60:76:b7:08:4d:c6:7e:5b:
         6f:59:14:0a:8f:e9:18:66:43:19:c4:75:e6:55:1a:d3:c4:05:
         2c:d9:3d:22:4d:78:ac:d6:9d:2a:aa:85:26:f9:dc:af:e6:e3:
         89:f1:3e:cb:a9:eb:aa:0d:45:34:aa:8d:fc:0b:e1:16:2f:25:
         4d:63:35:4a:57:f0:06:11:10:3e:51:a8:79:b4:e5:51:f8:fb:
         79:3d:80:5c:b8:b7:15:77:84:d8:eb:d5:77:e4:44:5a:52:2d:
         f9:e2:89:42:fc:13:e6:bc:81:e9:7f:06:8e:30:30:64:9f:55:
         35:90:13:6c:db:96:1e:89:25:73:6f:02:d2:c5:af:4b:4f:48:
         d6:5e:77:20:42:21:6d:a2:16:63:14:4e:49:1a:a8:70:1a:d0:
         c8:7e:5f:91:4f:27:63:0e:b0:46:64:7d:b8:bf:47:15:e9:8d:
         b1:06:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:32:17 2025 by rpki-client