Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
File:                     W8VPKEgipxexrUw3z2nQls5_Z3M.mft (raw, json)
Hash identifier:          nSo+FW+T6Scj0Gh6NOkAGlwasMudJ5dyFypGdjA4Afo=
Subject key identifier:   16:2E:D7:8D:25:56:F5:A9:C7:87:D9:3F:F3:1B:76:40:1A:3E:FE:AB
Authority key identifier: 5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73
Certificate issuer:       /CN=F36F8F4FRI/serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
Certificate serial:       0575
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
Manifest number:          0571
Signing time:             Tue 17 Jun 2025 02:39:01 +0000
Manifest this update:     Tue 17 Jun 2025 02:39:00 +0000
Manifest next update:     Thu 19 Jun 2025 02:39:00 +0000
Files and hashes:         1: W8VPKEgipxexrUw3z2nQls5_Z3M.crl (hash: gGm4t+F7Ret0uVbXCslpwPJBteEWDcFleUqhML91jDY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
                          rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 19 Jun 2025 00:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FRI, serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
        Validity
            Not Before: Jun 17 02:39:00 2025 GMT
            Not After : Jun 19 02:39:00 2025 GMT
        Subject: CN=6850d545-08a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:f6:ad:5c:66:60:d3:2c:7e:de:6f:aa:6d:
                    0f:e3:ed:77:45:0d:18:8b:5b:ac:ba:55:33:73:29:
                    d4:f3:21:2b:a3:92:0d:fb:f6:fe:a5:41:f9:12:83:
                    37:39:2d:fd:d8:b7:c9:c5:a2:29:19:27:08:62:35:
                    10:3e:58:46:8f:4f:fe:0b:63:0c:52:7c:f5:1c:7c:
                    31:b3:5f:7b:70:10:50:c1:b3:6d:ef:1f:80:e8:14:
                    2d:79:4f:de:1a:fe:c6:12:30:81:b3:3a:e1:b6:22:
                    de:22:47:e7:92:ed:6d:82:47:42:43:ea:f7:e7:58:
                    da:0f:f9:b0:98:0b:31:88:b7:a7:a3:c7:d4:07:13:
                    9f:b1:5a:e7:98:a5:ae:8a:76:0f:fe:9a:09:01:36:
                    08:49:69:f8:a4:da:70:69:c9:23:18:00:c0:d5:ae:
                    6c:59:9a:c6:22:e2:d9:55:44:4c:d8:1b:7b:72:77:
                    b2:50:34:bf:f0:90:55:2e:b1:e9:12:c6:a3:95:7e:
                    ba:1f:42:ad:02:ef:f4:fc:f6:d5:d1:a1:91:fa:b9:
                    b7:a3:23:a0:8f:4b:87:37:40:b1:8c:67:0f:1f:b0:
                    63:33:57:36:70:6a:5d:54:94:93:8f:c5:33:d1:e6:
                    13:7d:e8:7e:d7:98:46:48:60:62:42:a8:71:63:f5:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2E:D7:8D:25:56:F5:A9:C7:87:D9:3F:F3:1B:76:40:1A:3E:FE:AB
            X509v3 Authority Key Identifier:
                keyid:5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:dd:b6:7f:d2:fb:74:25:d6:34:43:ee:fe:97:ab:82:35:9a:
         58:5d:66:31:4d:79:fe:b4:e7:87:4e:a0:3f:61:08:92:76:ff:
         29:6a:c5:77:60:46:88:bf:5a:9a:41:eb:95:e3:a7:94:60:0e:
         a3:64:f7:2e:60:fd:14:4f:f5:c0:85:d7:1f:18:ab:f9:a5:b0:
         81:80:0a:2f:d3:08:c0:5c:a1:ed:0f:c2:d2:c3:53:47:88:3d:
         73:e8:7d:67:58:fb:cd:f9:7b:dc:61:0f:cf:91:22:7b:71:ed:
         42:c7:e9:32:19:9e:86:a4:b6:42:d5:74:4e:c7:7b:c0:94:86:
         b3:2d:72:7c:04:40:9d:fc:28:10:e1:1d:f9:72:ac:ac:1e:9f:
         e7:24:bd:09:d4:a0:24:49:dd:c2:4d:a0:17:f1:33:46:c0:4e:
         03:f2:c4:37:b8:64:7a:40:68:4e:20:92:2a:4a:bf:2e:ce:86:
         6c:7d:dc:dd:09:e6:4d:bd:eb:b3:25:01:bb:db:5d:f8:22:bc:
         99:aa:50:42:a9:b7:f0:46:7a:39:0e:2b:ca:9b:7e:88:d6:f9:
         31:5b:38:29:82:ec:fa:ea:85:36:ed:2c:60:60:af:f9:2b:ae:
         55:2a:2d:d1:5d:4c:f8:ea:0c:34:00:5c:e3:f8:ab:5c:89:ed:
         bd:6c:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:14:12 2025 by rpki-client