Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
File:                     4u30RuwlLhL_hY7r4xim2a4EMbA.mft (raw, json)
Hash identifier:          UukLBW43jzXcPCQfAWprrGMffKNMoYZpyIvWPYgNgnY=
Subject key identifier:   A8:22:8C:0C:8D:26:22:E8:EE:AA:9A:D2:DE:18:E8:56:99:6E:47:57
Authority key identifier: E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
Certificate issuer:       /CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Certificate serial:       058A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
Manifest number:          0589
Signing time:             Mon 16 Jun 2025 02:34:13 +0000
Manifest this update:     Mon 16 Jun 2025 02:34:12 +0000
Manifest next update:     Wed 18 Jun 2025 02:34:12 +0000
Files and hashes:         1: 4u30RuwlLhL_hY7r4xim2a4EMbA.crl (hash: ShWwEhWbbyiwrCwiKUQQk5rVYV2BLOFaletRyRqKlj8=)
                          2: F2E8745215FF11EC9C41353BD8A014CE.roa (hash: DALkcQgZJxSOm1jJNi52fbxFVjnJTlBys9WoNl+MGWs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F61A5AF, serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
        Validity
            Not Before: Jun 16 02:34:12 2025 GMT
            Not After : Jun 18 02:34:12 2025 GMT
        Subject: CN=684f82a5-afa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:ad:20:46:fa:32:bd:8f:fb:79:3f:4b:73:
                    32:2a:02:02:4b:b3:6a:08:48:bc:d5:1f:da:11:99:
                    c1:f8:81:6f:cb:c1:82:76:81:a8:44:7d:74:ba:22:
                    09:87:7b:6a:7c:05:09:12:9e:96:82:05:76:8c:c4:
                    6f:d1:f4:82:e9:4b:47:ed:93:a3:e4:af:33:1d:fb:
                    a6:a6:05:7a:26:20:59:a4:de:ad:74:4b:42:53:b7:
                    f9:28:93:bf:97:dd:07:61:b0:f5:b9:12:d5:7a:a4:
                    bc:39:10:0a:2e:e8:4a:89:10:77:33:5a:bb:fa:7b:
                    f6:a9:93:2e:c2:19:f7:ea:95:a6:12:b3:41:ab:da:
                    55:1e:38:f0:f9:a7:b9:ef:15:8d:72:6a:c1:16:42:
                    9d:27:9b:c8:b0:f9:af:34:3e:65:b8:eb:83:ea:2c:
                    25:fc:ee:65:5b:26:63:68:72:09:06:bd:7b:67:d0:
                    24:6c:8f:11:f5:09:bb:ed:de:91:6c:5d:8c:37:7c:
                    65:f7:12:9f:33:b7:ff:39:93:27:43:de:19:0b:2c:
                    88:fd:97:2f:7e:ad:13:83:94:bf:15:33:9b:fb:70:
                    c2:11:33:f2:0b:f5:34:3d:26:f4:f4:82:8d:71:22:
                    28:ab:8e:94:23:98:52:33:d0:5c:f0:43:64:df:45:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:22:8C:0C:8D:26:22:E8:EE:AA:9A:D2:DE:18:E8:56:99:6E:47:57
            X509v3 Authority Key Identifier:
                keyid:E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:a7:67:5c:14:75:ac:ca:88:f1:d3:4a:d3:33:a6:5e:ae:
         cd:b8:fa:a7:e6:e0:d5:b9:11:8e:cc:cd:e9:f2:d9:f8:32:5a:
         6b:94:c3:06:f3:64:c6:18:39:f0:e0:fb:27:9b:80:fb:8a:fd:
         1c:f7:bf:31:cf:9a:52:e0:ef:64:5f:63:b5:c0:3b:17:e6:51:
         54:a1:f4:15:53:98:28:d3:6a:f7:20:27:a4:74:ad:ee:fc:a3:
         86:f4:8e:5d:e4:d2:89:2f:ba:a1:16:b4:0e:f0:d3:bb:6a:b7:
         d5:87:f7:1b:01:e9:f5:fd:15:2c:ee:d8:a8:9a:29:d3:23:79:
         30:ff:8e:eb:1c:74:2f:f3:90:2c:45:98:8e:ee:50:75:ae:3e:
         fb:0d:b0:68:b2:60:65:c6:77:46:7f:79:84:a4:98:a1:1d:ba:
         cc:e1:96:1f:31:da:ea:a1:90:38:27:28:b5:41:75:f9:c7:d6:
         bc:02:98:0a:22:45:f4:b5:33:c3:1b:dd:6f:21:6f:71:a9:f2:
         8d:ca:67:f1:58:0b:1f:d2:49:05:49:13:a1:08:7e:49:1d:5e:
         d4:f7:f9:ce:5c:b3:cb:13:29:fd:ac:fd:40:2c:03:f4:2a:72:
         2f:dd:d1:f1:b6:55:22:cf:2f:90:68:05:70:1a:b1:00:63:f3:
         01:29:6d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:53:48 2025 by rpki-client