Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
File:                     VCiBspPW4uKh8hlSyLwDISbuu8k.mft (raw, json)
Hash identifier:          II1yuntFBQOFVxNAYFCqV157x72cN7YayWVQuz3Txew=
Subject key identifier:   F2:BE:B2:E6:11:25:74:6E:05:8E:EC:F0:CB:47:AF:51:40:FF:C5:C1
Authority key identifier: 54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9
Certificate issuer:       /CN=F36B52A6RI/serialNumber=542881B293D6E2E2A1F21952C8BC032126EEBBC9
Certificate serial:       08F7
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
Manifest number:          08F6
Signing time:             Thu 19 Jun 2025 01:22:55 +0000
Manifest this update:     Thu 19 Jun 2025 01:22:54 +0000
Manifest next update:     Sat 21 Jun 2025 01:22:54 +0000
Files and hashes:         1: VCiBspPW4uKh8hlSyLwDISbuu8k.crl (hash: 5+J5fqt5qCoTMBiELDZU7sRqRJ0SEve87fZsRjfcYyY=)
                          2: 6B867142864C11EF92D39262762E951A.roa (hash: q/5PVa0Y5jiVYanPXInC3+mN2koWYpdxJKq6XS413jQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
                          rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Jun 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6RI, serialNumber=542881B293D6E2E2A1F21952C8BC032126EEBBC9
        Validity
            Not Before: Jun 19 01:22:54 2025 GMT
            Not After : Jun 21 01:22:54 2025 GMT
        Subject: CN=6853666f-da55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:93:5a:e5:3a:1f:c7:c3:14:c3:ec:73:69:
                    f0:bb:55:f0:0e:b2:87:cf:5c:4a:dd:a8:01:ad:90:
                    6b:98:e1:a8:91:2d:d2:ac:99:4a:b4:40:83:cf:86:
                    22:43:d0:c0:c8:b7:8d:72:61:62:4b:44:b3:eb:0c:
                    e9:dd:55:63:c4:b0:ff:cd:76:74:4e:b6:3c:55:3b:
                    e0:00:c8:6d:ba:6e:f7:69:50:03:d5:1f:8d:06:b7:
                    4d:0d:78:19:56:e4:4b:66:7c:1e:7b:2e:6a:5b:81:
                    12:f9:22:fb:3a:9e:98:39:74:a1:44:29:67:ed:78:
                    f3:1b:62:95:f8:67:e8:9f:f6:c7:59:3f:41:76:33:
                    ba:65:c9:b6:bd:57:1c:fb:29:43:c4:9a:e4:b6:34:
                    a3:13:27:1e:76:ac:25:a4:15:30:8c:e1:f9:72:26:
                    c5:c2:25:b9:33:37:bf:44:80:6f:d3:93:65:f3:49:
                    4a:80:e5:83:94:40:42:f2:04:14:da:87:87:de:1b:
                    a7:95:96:f5:bd:59:67:1d:cb:19:62:81:96:6c:7d:
                    e0:23:d5:79:03:ca:1d:00:64:43:75:e3:66:aa:e7:
                    10:79:b7:5e:5b:44:e1:fb:d1:9a:2d:6a:20:68:05:
                    d5:de:a6:03:4f:bf:c8:b4:27:bc:3b:59:e8:13:ba:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BE:B2:E6:11:25:74:6E:05:8E:EC:F0:CB:47:AF:51:40:FF:C5:C1
            X509v3 Authority Key Identifier:
                keyid:54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:43:8a:6f:6f:b7:fd:7c:fd:58:f0:0c:05:22:fc:5f:0b:15:
         8d:ca:ab:06:7e:10:95:10:f5:30:61:b1:50:6b:11:08:84:cd:
         e5:da:24:e6:e5:d4:cb:19:5b:27:af:af:5f:a0:31:42:6f:08:
         1f:9f:3f:e3:4e:3d:12:45:5c:a0:67:01:9e:5f:0c:8a:86:b6:
         54:11:43:2b:e2:c2:8d:97:9a:20:64:76:25:4d:ab:34:d8:82:
         92:8f:f9:53:5e:cb:c4:be:15:fe:e9:d4:ff:7d:f1:29:ae:32:
         78:b7:e8:a0:b3:cb:1a:4a:08:e0:5d:db:71:dc:f8:f6:c0:be:
         66:79:0b:d0:96:f3:fa:3a:f8:58:9e:2a:ef:8d:93:d6:e4:e5:
         18:f0:0e:b4:fc:02:b7:cd:c2:ca:d1:ed:65:2b:70:57:3b:76:
         bd:12:15:02:73:55:81:29:0d:3f:6b:61:d6:17:29:a7:be:24:
         ac:88:e1:42:0c:98:29:73:2f:8b:b8:b5:85:fd:9c:26:8a:a1:
         41:25:da:3a:b9:01:14:9d:a4:27:82:33:69:19:9b:21:d5:03:
         b2:43:72:e4:32:42:2e:f2:c5:d0:cf:69:61:cb:90:0a:44:66:
         c5:ea:0d:69:65:5d:8c:18:79:ba:19:b5:af:64:a3:d6:f8:3b:
         f6:8f:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:23:23 2025 by rpki-client