Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
File:                     w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft (raw, json)
Hash identifier:          +fT/bdsHtpsRDNYOWk0y7n5YlV7AUqv0z4V5qSSbDxI=
Subject key identifier:   D0:F0:21:1B:27:3B:E3:9E:B1:A0:6E:F8:0E:FD:23:92:90:70:47:3F
Authority key identifier: C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C
Certificate issuer:       /CN=F36897F5AF/serialNumber=C39A32407B4BD96E283760C7155726E6D0D7199C
Certificate serial:       05F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
Manifest number:          05F6
Signing time:             Tue 29 Apr 2025 02:13:44 +0000
Manifest this update:     Tue 29 Apr 2025 02:13:43 +0000
Manifest next update:     Thu 01 May 2025 02:13:43 +0000
Files and hashes:         1: w5oyQHtL2W4oN2DHFVcm5tDXGZw.crl (hash: YkTTeXnclc4H6hOpqVnRR3W51fEd6cQfLShSIrgHQuU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 May 2025 00:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529 (0x5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36897F5AF, serialNumber=C39A32407B4BD96E283760C7155726E6D0D7199C
        Validity
            Not Before: Apr 29 02:13:43 2025 GMT
            Not After : May  1 02:13:43 2025 GMT
        Subject: CN=681035d8-15c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:df:32:ee:c5:91:02:b4:24:d1:d1:b8:18:2d:
                    2f:4d:f9:b7:8e:23:94:06:d1:86:41:db:e5:de:a8:
                    80:40:69:6c:34:2c:4c:4f:97:3a:fd:bc:42:13:41:
                    8e:68:cb:7b:1e:a4:11:b0:88:30:75:80:9a:98:ac:
                    1d:40:a2:a7:3f:9f:88:d4:4c:c3:00:9c:97:26:d1:
                    98:fb:bf:ad:fa:b5:9b:74:69:6f:e4:5b:4c:cd:5d:
                    96:68:7d:4b:98:1c:d8:b7:d0:cf:0f:53:cb:0a:84:
                    57:e2:70:49:d6:3c:27:14:e9:0c:9a:0f:79:22:a0:
                    45:41:6a:e1:d4:0c:01:3b:f5:a9:cf:ca:99:1b:17:
                    55:a8:6a:e6:57:c9:15:00:15:cd:9e:70:73:62:9d:
                    65:d2:bc:89:fe:47:35:1e:49:0a:a8:f1:ba:d0:16:
                    90:33:d8:57:7f:d5:d5:b1:a0:82:60:2a:65:56:ca:
                    52:46:72:9c:77:33:df:84:76:23:92:28:2d:fc:92:
                    b2:89:3b:25:b3:9d:b0:01:0d:be:65:70:75:ec:6c:
                    62:0c:96:75:1b:be:8e:8e:ad:e2:3c:f1:87:bd:ef:
                    9b:d9:4a:49:2f:34:0c:27:8f:8e:be:f2:6b:e4:cd:
                    d3:24:5d:88:c2:d5:86:61:d1:a8:27:a7:e4:00:c8:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F0:21:1B:27:3B:E3:9E:B1:A0:6E:F8:0E:FD:23:92:90:70:47:3F
            X509v3 Authority Key Identifier:
                keyid:C3:9A:32:40:7B:4B:D9:6E:28:37:60:C7:15:57:26:E6:D0:D7:19:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w5oyQHtL2W4oN2DHFVcm5tDXGZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36897F5/A52F56649BB011EBA8A3CC35F8AEA228/w5oyQHtL2W4oN2DHFVcm5tDXGZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:38:cf:ee:2d:c4:e5:1a:28:81:ab:d7:e4:c4:99:2f:61:cb:
         01:78:ae:16:bf:c6:c0:bc:45:6b:3b:75:f0:07:d6:e5:7b:d0:
         cc:07:16:4f:86:9b:3e:38:6a:4c:1b:bf:4c:be:a2:9d:cf:9c:
         ac:d3:0a:be:20:f4:91:d0:d3:d4:99:a2:99:3e:f6:3f:17:0f:
         13:7c:4e:15:a2:68:15:1e:a4:33:92:1f:ef:34:67:aa:a0:2e:
         d1:ba:a6:eb:d3:aa:16:17:5a:8b:3a:14:23:7d:36:85:4e:4c:
         03:87:87:9f:bc:96:2a:15:22:39:91:f3:83:93:90:d3:c2:e2:
         6a:f5:94:6d:82:92:a7:e9:e7:08:9d:be:c8:f3:6b:96:28:80:
         a8:e5:fe:f6:e7:58:5a:a3:00:17:d3:a5:fd:bd:56:7a:64:07:
         25:e8:9c:40:e5:0a:74:69:03:e0:db:c6:b7:9b:b2:31:ab:19:
         7e:89:42:4e:50:c4:d6:60:b1:eb:28:bf:4f:88:53:95:5b:b8:
         d9:d4:c7:b7:44:da:63:93:81:d1:48:8d:7e:26:11:97:7b:49:
         71:9c:13:cc:f8:79:44:42:c4:8e:0e:a6:bd:5a:59:c1:a4:d6:
         8a:7a:0b:ed:8c:f9:c7:07:4c:bb:66:d3:94:91:60:85:e3:03:
         aa:67:da:07
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODk3RjVBRjExMC8GA1UEBRMoQzM5QTMyNDA3QjRCRDk2RTI4Mzc2MEM3MTU1NzI2
RTZEMEQ3MTk5QzAeFw0yNTA0MjkwMjEzNDNaFw0yNTA1MDEwMjEzNDNaMBgxFjAU
BgNVBAMTDTY4MTAzNWQ4LTE1YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDx3zLuxZECtCTR0bgYLS9N+beOI5QG0YZB2+XeqIBAaWw0LExPlzr9vEIT
QY5oy3sepBGwiDB1gJqYrB1Aoqc/n4jUTMMAnJcm0Zj7v636tZt0aW/kW0zNXZZo
fUuYHNi30M8PU8sKhFficEnWPCcU6QyaD3kioEVBauHUDAE79anPypkbF1WoauZX
yRUAFc2ecHNinWXSvIn+RzUeSQqo8brQFpAz2Fd/1dWxoIJgKmVWylJGcpx3M9+E
diOSKC38krKJOyWznbABDb5lcHXsbGIMlnUbvo6OreI88Ye975vZSkkvNAwnj46+
8mvkzdMkXYjC1YZh0agnp+QAyMifAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0PAh
Gyc7456xoG74Dv0jkpBwRz8wHwYDVR0jBBgwFoAUw5oyQHtL2W4oN2DHFVcm5tDX
GZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg5N0Y1L0E1MkY1NjY0OUJCMDExRUJBOEEzQ0MzNUY4QUVBMjI4L3c1b3lR
SHRMMlc0b04yREhGVmNtNXREWEdady5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3c1b3lRSHRMMlc0b04yREhGVmNtNXREWEdady5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODk3RjUvQTUyRjU2NjQ5QkIwMTFFQkE4QTNDQzM1RjhB
RUEyMjgvdzVveVFIdEwyVzRvTjJESEZWY201dERYR1p3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiOM/uLcTlGiiBq9fkxJkvYcsBeK4W
v8bAvEVrO3XwB9ble9DMBxZPhps+OGpMG79MvqKdz5ys0wq+IPSR0NPUmaKZPvY/
Fw8TfE4VomgVHqQzkh/vNGeqoC7Ruqbr06oWF1qLOhQjfTaFTkwDh4efvJYqFSI5
kfODk5DTwuJq9ZRtgpKn6ecInb7I82uWKICo5f7251haowAX06X9vVZ6ZAcl6JxA
5Qp0aQPg28a3m7Ixqxl+iUJOUMTWYLHrKL9PiFOVW7jZ1Me3RNpjk4HRSI1+JhGX
e0lxnBPM+HlEQsSODqa9WlnBpNaKegvtjPnHB0y7ZtOUkWCF4wOqZ9oH
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:49:02 2025 by rpki-client