Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
File:                     tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft (raw, json)
Hash identifier:          9SxZhSvc2eKeo88xB5i07d3uxTr6EmcCcoscN4kqp38=
Subject key identifier:   67:01:57:C9:30:3A:1A:38:D7:AD:58:ED:4D:68:AC:C9:43:B2:70:A4
Authority key identifier: B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D
Certificate issuer:       /CN=F36E75A9AF/serialNumber=B5C74246EE5E3C8FA999841DDC443653F854BA7D
Certificate serial:       0235
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
Manifest number:          0234
Signing time:             Mon 04 Aug 2025 04:21:23 +0000
Manifest this update:     Mon 04 Aug 2025 04:21:22 +0000
Manifest next update:     Wed 06 Aug 2025 04:21:22 +0000
Files and hashes:         1: tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl (hash: fPBggUQUxjJBlGP5jjmXRc+T9Rw4FAi8UsodBJNQo6c=)
                          2: A95C3E7CC46711EE9DAAFFA7775412E6.roa (hash: 5YGMUo45vZOEsVw7rxMl98qm2QPWhnBn5cPNqxBly50=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E75A9AF, serialNumber=B5C74246EE5E3C8FA999841DDC443653F854BA7D
        Validity
            Not Before: Aug  4 04:21:22 2025 GMT
            Not After : Aug  6 04:21:22 2025 GMT
        Subject: CN=68903543-e899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:0e:c8:a2:dc:bf:5d:2a:f5:01:f6:2c:8a:
                    c0:42:38:11:f2:61:d5:25:ad:88:db:5f:51:57:85:
                    29:e2:c0:e0:60:12:c5:62:18:6a:35:82:1f:56:0a:
                    d2:33:45:c2:43:1b:b2:80:50:69:75:d9:92:6e:dc:
                    21:52:60:f0:0a:a1:44:c5:b0:f6:16:04:30:c0:55:
                    e4:da:ad:aa:72:55:50:49:8d:d7:a6:0d:b8:51:97:
                    63:69:72:97:32:56:3f:10:de:89:7f:82:ff:95:9c:
                    fd:7a:29:42:3e:8a:db:24:dd:88:25:30:7d:ef:a5:
                    a5:4a:56:11:03:89:01:4d:12:61:c5:33:a8:6b:50:
                    a3:16:01:ac:01:a7:f4:01:8c:5d:31:1f:b3:88:5f:
                    87:6d:ba:ab:f2:d0:dc:ba:3f:48:c6:35:39:8d:2e:
                    e0:7a:f2:7d:ee:d6:9e:fb:45:71:04:58:6e:b5:95:
                    3c:12:9c:df:65:63:80:14:0e:01:86:82:35:a1:1b:
                    c1:ca:10:c6:5c:5b:ac:4d:7b:77:28:9b:97:2c:ca:
                    ce:e3:7b:1c:d1:a0:f8:ce:eb:38:f2:06:7b:4b:43:
                    62:96:07:9e:55:ad:fd:21:ec:37:58:76:86:a9:d0:
                    36:87:b5:77:a0:70:fe:68:fb:93:3b:00:90:b3:0f:
                    8e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:01:57:C9:30:3A:1A:38:D7:AD:58:ED:4D:68:AC:C9:43:B2:70:A4
            X509v3 Authority Key Identifier:
                keyid:B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:97:7b:de:cd:0c:93:36:36:10:3f:1b:a1:14:1b:c3:1e:f1:
         f2:13:98:5c:6c:70:0d:fa:40:0e:70:85:d1:f2:89:03:35:c5:
         2f:f5:02:2b:be:1b:ce:87:97:3c:1d:12:69:71:de:e7:5c:e7:
         3c:83:f1:63:66:a2:73:71:42:0d:73:49:9d:7d:ea:65:ec:58:
         db:4f:61:c0:74:7a:1a:8e:74:3b:26:c1:3b:7f:8f:c9:cd:9f:
         2b:c7:5a:c4:b4:3f:ad:78:db:6b:d0:7b:1d:7a:70:6c:d5:5a:
         c8:c8:55:a2:45:59:70:f3:d7:c4:a0:4a:d8:5d:f7:dd:4c:1a:
         99:cb:bc:ad:5e:55:d2:a8:1a:ce:72:94:54:74:d9:c7:b4:45:
         67:1c:8e:f4:5d:74:4f:2f:e3:7a:db:a5:51:e1:ce:bc:cf:3f:
         1f:be:a3:da:92:3a:1f:91:c4:9c:39:03:00:83:99:15:2d:a3:
         2a:17:ba:ce:b9:28:67:0a:a1:70:75:95:cc:6f:90:ec:08:07:
         85:3c:7f:61:59:db:b9:5d:5c:a1:f6:72:88:83:10:b3:60:87:
         8c:2b:b0:38:ae:0a:aa:11:49:e6:80:16:db:64:57:e6:78:b0:
         2a:b5:52:6f:4f:9a:ba:3a:86:10:df:cf:75:06:79:e2:bb:b5:
         08:19:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:00 2025 by rpki-client