Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
File:                     8N_7--IrTkOYavhggOjb0m5nNXs.mft (raw, json)
Hash identifier:          ldHcBqla2LKwPwdmljzLPP83b9vtz+wwbFyRf4soHPU=
Subject key identifier:   8B:6E:EA:65:DF:40:DB:52:14:13:19:BE:93:AF:0E:99:CB:5D:83:24
Authority key identifier: F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B
Certificate issuer:       /CN=F36D104BAF/serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
Certificate serial:       035D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
Manifest number:          035C
Signing time:             Sat 03 May 2025 03:26:11 +0000
Manifest this update:     Sat 03 May 2025 03:26:11 +0000
Manifest next update:     Mon 05 May 2025 03:26:11 +0000
Files and hashes:         1: 8N_7--IrTkOYavhggOjb0m5nNXs.crl (hash: YsPxGzayCF7Fpo3ZIDfgttbaGBKeJnTh2G0acUd21Ck=)
                          2: 788B31649BD611ED8E8A06CFF1222468.roa (hash: /DoapaGd3eagMu4E2GG71poz4ouCwc0M0wO9yu8zX6c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 May 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D104BAF, serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
        Validity
            Not Before: May  3 03:26:11 2025 GMT
            Not After : May  5 03:26:11 2025 GMT
        Subject: CN=68158cd3-1095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:0c:56:a1:3f:16:f9:58:c5:e0:c8:0f:07:
                    52:f4:15:d7:68:8b:01:98:e5:1a:9e:e5:bc:d0:b0:
                    d3:26:96:ea:cb:30:85:76:0b:e9:9c:23:36:a4:70:
                    de:f9:13:5b:93:51:6c:b8:05:95:5a:e4:3f:32:ea:
                    0f:f0:6e:78:8d:a7:46:79:02:bc:47:ec:a6:59:35:
                    36:4c:b0:f2:01:0b:af:0a:7b:f2:fb:9a:e8:f7:71:
                    72:c5:fa:50:7b:10:bf:c3:43:d7:e6:17:96:c3:19:
                    65:a2:2c:ec:bf:63:fb:0a:34:c5:01:55:f3:dc:b5:
                    21:de:7f:9f:cd:c5:86:b1:b6:50:83:c6:e2:fa:c0:
                    c3:09:b8:50:a5:22:ee:2c:1d:74:08:2c:99:77:8a:
                    c6:38:00:0d:11:a4:0d:f0:73:5a:0f:fd:1e:e5:ab:
                    55:8a:75:d3:53:4e:a6:4b:35:d0:9b:4a:55:62:06:
                    58:ee:92:5d:ba:fb:b1:f0:2b:1d:b0:68:fb:26:38:
                    d1:d0:ab:3c:d8:e1:19:20:06:82:42:e5:de:f9:f6:
                    48:66:39:5e:98:b2:63:13:83:24:aa:70:5f:a4:00:
                    26:2b:4f:a4:6b:85:8f:49:31:a1:00:e9:35:2a:63:
                    fc:b0:3f:96:67:4b:6b:8a:9e:c3:29:fe:0b:32:9a:
                    af:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6E:EA:65:DF:40:DB:52:14:13:19:BE:93:AF:0E:99:CB:5D:83:24
            X509v3 Authority Key Identifier:
                keyid:F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:80:c8:b5:bc:72:0f:d1:bb:09:82:3e:35:e9:24:a8:d6:
         13:af:ea:02:45:d6:34:6c:49:8d:d7:1e:be:5e:ab:45:03:95:
         d6:82:4c:fc:23:fa:4f:d7:cf:0d:06:62:8f:53:7b:32:25:8f:
         d9:59:71:03:e2:71:d6:d5:94:69:57:9c:30:02:1c:a2:7a:63:
         3b:2e:2b:4c:6e:62:f7:82:ff:90:8c:8f:3d:f3:4e:22:d2:96:
         d2:2e:38:e3:89:a1:09:e7:f9:ab:16:f3:8a:2c:24:ee:95:6f:
         3f:cb:13:51:37:dc:d0:91:07:a7:e8:6b:df:c4:f6:24:1e:bc:
         e2:db:c5:9d:98:07:47:78:d0:e3:2a:c9:18:98:50:d3:23:86:
         a9:88:2d:a6:89:02:92:eb:d1:e6:01:e8:0a:e6:4f:53:07:be:
         af:97:11:11:34:b7:ad:c5:27:1c:68:f8:f1:f9:8d:5a:e9:e9:
         1a:2e:e6:01:84:7d:22:d4:e7:37:7f:d0:e7:89:46:66:6b:13:
         fb:7f:7c:ab:f3:ac:31:81:e7:d5:17:3b:97:7f:22:b8:02:ab:
         19:9f:d7:28:5e:75:9e:72:97:08:9d:12:e4:40:57:14:ea:e6:
         b4:2e:fa:d7:d9:45:a5:9c:88:8b:24:ff:57:71:9d:bc:0b:90:
         64:cd:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:53:21 2025 by rpki-client