Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
File:                     pM4k_g7il2reULOd__0tfkLA8oo.mft (raw, json)
Hash identifier:          o0fbrE544lX+bMOgrg3SYvXKTQdzIA5SaLJ0Dfo6EnE=
Subject key identifier:   03:BA:82:AD:A3:70:26:E3:32:18:E4:35:06:DC:90:00:1B:AA:83:08
Authority key identifier: A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A
Certificate issuer:       /CN=F36987B2AF/serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
Certificate serial:       0698
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
Manifest number:          0696
Signing time:             Mon 16 Jun 2025 02:07:08 +0000
Manifest this update:     Mon 16 Jun 2025 02:07:07 +0000
Manifest next update:     Wed 18 Jun 2025 02:07:07 +0000
Files and hashes:         1: pM4k_g7il2reULOd__0tfkLA8oo.crl (hash: XsMqEJBIo12O/wWudwyl+IiAfEiKQ/B0bxPfAPLwvy4=)
                          2: 390A5A34413211EB90B58A09F8AEA228.roa (hash: BLtGDMxqbFhD8bZdR2LWNCdZfA1WGqCQ2lVMd70kTH0=)
                          3: CAB95F3A413111EBAEFE3009F8AEA228.roa (hash: 3J8csPHyGJk8M/namF0fmG+U4+q5VVyeZJygS1yfavI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36987B2AF, serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
        Validity
            Not Before: Jun 16 02:07:07 2025 GMT
            Not After : Jun 18 02:07:07 2025 GMT
        Subject: CN=684f7c4c-3e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:cd:8a:a6:de:17:1a:77:3e:fe:c3:a7:1d:
                    24:c8:99:3d:51:8a:b4:2f:fb:68:8a:63:5f:2e:13:
                    f5:98:df:b9:61:11:f8:d8:dc:ab:73:2a:49:84:37:
                    05:94:dd:0e:8c:db:91:6f:be:85:69:4a:e5:70:8f:
                    d4:95:a9:1c:5c:b4:67:c9:cc:4c:70:67:e5:90:54:
                    ff:2a:93:0e:f6:f9:11:1c:cd:cf:0f:e8:a2:c6:45:
                    14:5d:43:26:d9:3a:28:9a:86:a8:e8:7e:cc:e8:4e:
                    d7:75:8f:1a:f7:e6:63:d4:14:ef:ed:46:21:8e:64:
                    80:92:59:e5:d4:8e:e8:8b:b3:19:c4:5d:be:dc:a7:
                    f4:d7:30:22:a1:ae:7f:ee:2f:c0:4f:0b:2c:c1:ad:
                    df:c2:36:7e:5e:c4:ea:21:a0:72:18:cc:d9:dd:e7:
                    04:1c:02:d5:61:b5:fb:0b:ed:03:29:6c:83:64:b2:
                    20:5d:f5:9b:f9:62:0d:72:e2:f9:82:19:71:92:78:
                    82:7d:27:eb:1a:a0:ff:aa:86:67:84:e9:64:e2:07:
                    e2:67:d6:df:90:51:c9:e8:b3:4b:b1:1e:d7:1d:6c:
                    46:ef:03:f8:f4:e4:ab:6e:6b:7c:7d:18:16:bc:c2:
                    c4:f6:87:30:46:7d:fe:b0:92:59:5e:0b:01:3a:52:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BA:82:AD:A3:70:26:E3:32:18:E4:35:06:DC:90:00:1B:AA:83:08
            X509v3 Authority Key Identifier:
                keyid:A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:b8:62:42:80:0d:e9:70:b4:c0:13:9e:41:c0:ed:dd:75:
         86:25:85:5d:8c:19:c7:eb:be:31:c0:8e:df:cc:ca:92:27:6b:
         9b:64:1e:1e:72:fe:ad:8c:aa:3a:30:eb:ed:b3:10:7f:b2:2c:
         9f:9b:7c:18:7f:39:1f:bc:16:4c:ff:6d:49:54:3c:08:9b:9a:
         a4:4b:e2:ce:88:97:b3:fc:20:51:08:7f:22:23:bb:d5:f7:dc:
         65:b2:c1:84:01:8e:4e:28:22:c1:52:ce:dc:ca:ff:45:49:a6:
         05:2f:38:db:d7:15:9b:b4:59:8d:fa:27:ec:7c:b2:86:c6:5f:
         25:b4:bc:52:d2:40:28:e7:5a:9f:ff:d2:31:f0:62:c8:6b:67:
         58:bd:f2:c5:69:2f:3d:7f:82:1f:7c:b1:88:ec:7e:ae:91:cf:
         92:5e:e5:3c:fe:29:d8:cc:c8:df:c1:32:7c:a3:a0:9a:bd:f5:
         08:58:81:ce:c2:2f:7b:73:8b:db:03:35:2a:2a:aa:56:30:29:
         63:f5:35:ca:e4:31:1f:87:b9:ec:93:8a:9f:e8:06:f5:d2:ff:
         d1:b3:43:9b:43:d9:87:a1:34:fd:b1:61:4a:73:83:6b:3f:c4:
         3e:58:a6:6c:00:e2:85:fc:6f:c5:b6:0a:d1:ad:aa:f4:d1:98:
         02:b6:5a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:16:24 2025 by rpki-client