Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          po4sU3xt0JxJXak1iaeWdMdVu0Re2ALZXw8XEZh0J1w=
Subject key identifier:   C8:58:7B:D9:3C:02:51:44:B4:DD:3D:3E:2F:97:C2:59:93:38:E6:43
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       010E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          010A
Signing time:             Mon 16 Jun 2025 05:01:17 +0000
Manifest this update:     Mon 16 Jun 2025 05:01:16 +0000
Manifest next update:     Wed 18 Jun 2025 05:01:16 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: fcTTDsWmV3ITubMU//2r4Q1iIFW6LB2RAHeQXiPa4TA=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: Jun 16 05:01:16 2025 GMT
            Not After : Jun 18 05:01:16 2025 GMT
        Subject: CN=684fa51c-8192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:01:5d:fd:fe:cb:1d:1a:ef:69:9d:f4:98:
                    8f:ba:3c:f6:95:46:2d:26:15:26:3e:78:e0:68:d2:
                    9c:76:2d:88:80:83:0a:da:a3:19:91:ca:25:78:67:
                    8f:c6:5c:cb:4a:24:1c:11:89:48:a6:66:ac:1e:cd:
                    36:50:57:3a:fc:93:e0:18:6f:07:d1:40:b4:02:1c:
                    fd:b8:fa:c5:a1:79:aa:5f:a8:27:92:8b:b2:21:e0:
                    a6:51:ce:9a:3b:0e:1c:5d:c8:fb:d0:30:76:4d:33:
                    f0:bf:de:2c:30:6f:19:2a:27:e1:ef:b4:5b:c6:7b:
                    6e:2c:04:2b:d3:da:82:5e:56:28:1b:fd:1a:9d:89:
                    0e:00:e2:7f:46:a0:b0:67:29:ab:c8:d0:ae:41:ee:
                    f7:ea:5f:59:1c:f9:f9:d3:8a:8a:52:33:e0:6d:39:
                    ff:27:b4:ca:72:fd:82:90:4b:95:ef:40:bd:a4:82:
                    34:85:e3:e7:08:30:a5:85:3e:9d:e1:17:e2:9b:cd:
                    19:df:a7:16:bd:92:e6:2f:e6:85:25:4f:bb:a3:21:
                    9c:7a:56:02:8f:9c:cd:2a:27:c2:1d:0a:10:48:26:
                    9f:fe:01:4d:4a:5e:a6:a8:07:4b:d1:8d:83:bd:5f:
                    95:18:19:96:a2:0b:4d:05:a9:d4:fc:16:0a:12:13:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:58:7B:D9:3C:02:51:44:B4:DD:3D:3E:2F:97:C2:59:93:38:E6:43
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e6:a3:56:28:99:77:1d:c3:d0:bb:fe:61:a9:cd:94:1d:7e:
         e4:eb:8c:02:ea:f3:78:70:7b:e6:53:ea:96:9e:d6:13:80:0f:
         73:90:ca:a0:68:61:fe:f6:95:12:6c:1b:53:aa:29:f9:69:1d:
         68:f3:ec:a8:76:63:e1:3e:6a:1f:29:f5:ba:d8:b7:2e:ad:13:
         fd:fb:95:e6:e0:c9:3e:c3:27:bf:ec:2d:b6:17:94:a1:7d:7c:
         81:cd:57:c6:5b:32:31:94:70:f6:64:6f:1a:8e:63:a9:f1:ca:
         8c:22:dd:db:05:d1:ed:d3:84:26:c6:58:9c:34:56:0b:5a:f1:
         f9:7b:2d:1a:48:a9:0d:40:54:3f:81:09:16:b5:a8:17:bb:cc:
         3d:c3:05:83:84:63:29:f4:78:f0:22:c9:02:b8:a7:b9:d2:33:
         0d:f0:39:c3:35:1c:65:5a:92:ea:f9:11:46:e5:2d:4f:9b:30:
         44:7a:0b:49:0b:f1:7c:7b:12:8a:97:61:de:0c:ab:d5:1e:76:
         c4:a4:f8:c2:5c:97:48:81:03:78:c0:f4:d1:33:a7:f2:05:ca:
         ab:81:87:82:d9:ec:c8:e8:ae:bf:b2:05:d9:c1:c6:8a:ca:5b:
         59:2a:a6:65:76:c6:b1:3b:8c:71:f3:34:41:80:84:ad:59:ea:
         d8:0b:22:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:13:50 2025 by rpki-client