Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File:                     Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier:          Y8uQqv7imjmwupH1BjdDnTxp6l8Vb/brG0eGmpcfKss=
Subject key identifier:   67:BF:FD:7D:90:23:B9:6A:73:E9:07:75:FD:50:4F:57:83:A9:F6:C3
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer:       /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial:       01D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number:          01D6
Signing time:             Fri 08 Aug 2025 04:33:59 +0000
Manifest this update:     Fri 08 Aug 2025 04:33:58 +0000
Manifest next update:     Sun 10 Aug 2025 04:33:58 +0000
Files and hashes:         1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: SjSsEVTSM6MqG5rB6X+Rd++omlCBXHB8TsKvVwtZrDA=)
                          2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 04:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
        Validity
            Not Before: Aug  8 04:33:58 2025 GMT
            Not After : Aug 10 04:33:58 2025 GMT
        Subject: CN=68957e37-470c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4f:16:75:ae:70:a8:be:4f:95:6b:02:fe:3c:
                    dc:a0:c1:78:99:aa:55:ed:5e:e4:9c:67:28:b3:83:
                    28:78:e4:bb:9f:b7:ea:b5:2c:c8:5f:94:e3:c9:12:
                    94:1c:f6:b9:0f:51:c2:e8:85:b6:3f:de:11:db:a2:
                    b0:a9:5b:3f:e2:2f:f0:56:35:eb:d7:ec:14:88:07:
                    57:67:76:ad:64:e5:28:1b:01:06:fd:54:f5:23:66:
                    91:f4:7f:6b:13:18:fc:ba:2e:a1:2e:f7:1d:4b:ad:
                    b8:6b:8e:32:45:81:5b:1a:24:6a:b5:e6:64:5d:bc:
                    2d:45:13:58:96:26:3e:b6:8e:07:e3:00:99:0a:63:
                    a3:e9:f9:ae:68:31:a2:67:03:a2:8a:de:b5:78:96:
                    b6:d9:3c:b2:74:f9:3d:9a:ec:5d:30:63:36:b3:42:
                    19:c5:8a:8c:a7:37:bf:f7:a5:d7:d1:fd:10:5b:9d:
                    1a:d4:89:59:b7:ea:20:8b:c0:1c:7d:3c:66:54:68:
                    17:f0:dd:e8:b3:08:94:50:90:99:8d:ed:7b:b2:55:
                    82:71:5d:f0:0b:a7:19:8b:03:4a:96:7a:c5:7e:c1:
                    54:c4:f2:14:96:03:08:e5:28:88:69:cd:42:3b:88:
                    bd:89:d1:4a:f7:99:6b:c3:c6:dd:88:4b:75:a7:7a:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BF:FD:7D:90:23:B9:6A:73:E9:07:75:FD:50:4F:57:83:A9:F6:C3
            X509v3 Authority Key Identifier:
                keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:6f:77:58:2c:7f:d1:a2:67:82:0d:17:53:65:6a:8b:d0:05:
         ef:ed:48:e9:41:e8:04:be:a6:b6:8d:39:12:89:4c:64:61:fa:
         b5:51:d6:c5:c7:fb:55:61:51:06:db:d2:41:21:fb:8f:d9:48:
         6f:b5:12:58:83:3d:aa:f9:cb:e3:88:a1:2d:70:fb:1e:78:cb:
         76:29:e3:6a:62:e0:e0:ef:8f:54:aa:eb:4b:0d:18:9c:4b:9c:
         4e:e2:d5:80:3d:8a:3e:4b:fb:c7:4d:c2:6f:01:bf:6f:78:ae:
         59:95:a5:ee:20:93:2e:16:34:b7:d0:ee:24:f6:6d:3e:91:ab:
         7d:b9:3f:c1:b7:58:8a:b8:2a:3e:f1:2b:3a:dd:9c:b4:92:98:
         a7:b7:98:4e:e6:ac:e2:c7:fc:a5:fd:65:fd:63:44:ad:2d:cd:
         22:97:96:9e:98:18:a9:99:01:e2:aa:d6:e6:7a:16:1f:80:0f:
         2c:df:79:7d:0d:10:a6:11:fd:70:ca:a2:ba:d6:2b:ed:69:b8:
         fd:bf:0f:49:50:42:f8:f3:6d:a9:d1:87:24:0f:d6:d9:25:c3:
         80:72:ae:43:e3:0e:b8:09:04:a6:b6:07:ed:75:1f:6a:0b:d6:
         6f:c0:8a:7b:bc:bb:87:03:93:04:e9:02:d4:ed:85:14:cd:3e:
         58:4b:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:57 2025 by rpki-client