Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
File:                     sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft (raw, json)
Hash identifier:          B1BQEhavTN/HeKA+y+phD2DcAZjNXcueSeFSVTq33Zk=
Subject key identifier:   B5:8C:2E:47:B6:6F:23:16:32:CF:9C:01:89:EE:4D:8F:B8:D2:67:91
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       016E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
Manifest number:          0168
Signing time:             Mon 28 Apr 2025 04:37:03 +0000
Manifest this update:     Mon 28 Apr 2025 04:37:02 +0000
Manifest next update:     Wed 30 Apr 2025 04:37:02 +0000
Files and hashes:         1: sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl (hash: zgwD3WI/s0tFozZdhIaIGygPeV/tmuBbeYBvNm2MEJ4=)
                          2: 0EB2B67C8FAE11EFB0C6F19A762E951A.roa (hash: dRhtvM/2t47z2JwA9sfqbVs7olYpopo1AghyJCkiJnU=)
                          3: A3E369B88FAD11EF84E8C298762E951A.roa (hash: KHj93NQJWTZ8oMi0gw+QEnklPoZI/vRnCOYhgqAuDO0=)
                          4: 7017818A912B11EFA858BC80762E951A.roa (hash: 8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 04:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: Apr 28 04:37:02 2025 GMT
            Not After : Apr 30 04:37:02 2025 GMT
        Subject: CN=680f05ef-583d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:aa:e6:5e:92:6c:d6:a3:44:52:de:0a:50:
                    0b:cb:91:9c:b6:f1:93:a4:e5:da:bb:f8:64:c7:58:
                    e2:9a:fd:a0:c9:3c:18:84:06:15:8b:82:ff:35:a1:
                    16:bc:2a:e5:06:70:42:df:90:2a:76:79:a6:8e:b8:
                    20:6d:2f:74:3e:67:84:22:40:2d:6c:79:ac:b6:48:
                    59:01:46:c9:2b:3f:73:08:8d:cb:9a:64:8f:38:cd:
                    f5:4a:16:c1:db:89:50:cf:f3:7d:3c:d7:8b:73:aa:
                    e5:21:63:b6:98:7d:a9:99:ad:11:48:1e:4c:a8:99:
                    b4:89:6c:9c:cd:e9:d1:c1:f2:61:9c:58:30:b5:d2:
                    32:0e:91:7f:4a:0e:61:87:f4:f5:4e:b0:d8:a4:8f:
                    1b:7d:7e:42:80:3a:4e:0c:b7:8b:c2:8c:d0:6d:95:
                    af:01:9d:71:1d:53:73:84:53:21:30:31:ec:9b:da:
                    ee:31:a7:3c:3a:b3:61:0e:87:0b:19:31:bc:49:42:
                    e2:ae:f3:fa:1f:da:08:fa:24:ce:20:0b:61:8b:1d:
                    09:dc:1b:68:0c:89:45:9e:2f:1d:cb:a6:37:5d:e0:
                    3c:eb:e2:fb:78:69:9b:29:be:90:5f:28:2d:2f:d2:
                    eb:08:96:60:b9:eb:05:b9:03:dd:aa:1d:53:e9:89:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8C:2E:47:B6:6F:23:16:32:CF:9C:01:89:EE:4D:8F:B8:D2:67:91
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e4:8d:d0:04:61:78:2f:83:fe:88:37:54:f5:02:a1:aa:31:
         86:7c:c2:13:a8:3c:ea:0c:14:fd:ad:49:21:13:91:01:05:d1:
         aa:56:e8:29:26:3a:db:f7:e3:dd:87:83:06:02:ce:6a:ae:f8:
         02:7d:c8:4e:37:f6:1b:3b:fa:75:1e:69:93:52:0b:6c:4e:c7:
         a7:40:0b:ea:56:cf:3f:d3:a6:ef:7f:b1:30:09:43:9f:f5:fe:
         64:f3:28:8b:71:c0:ae:4e:9c:51:11:99:fe:a4:f3:8b:79:98:
         d9:12:e5:9f:a4:12:30:7e:75:cb:a4:a4:d8:70:64:f2:a3:87:
         47:b3:b7:46:0b:81:4c:d6:9a:61:3d:65:d9:d1:d1:09:1b:70:
         6b:68:d9:a1:a7:04:f3:1a:59:42:67:5b:a7:c6:39:2a:31:5f:
         04:4d:ac:17:ec:1e:5e:54:e5:48:a0:37:c9:06:4d:7d:1c:27:
         a8:5a:8d:62:21:65:93:b2:89:02:98:e4:2a:57:7d:09:9a:5d:
         ac:d3:0e:8d:d8:10:03:f5:d2:3e:b6:97:be:5c:b8:90:10:0d:
         fd:55:64:05:3a:f2:2a:fb:d8:55:4f:f5:ad:54:97:f1:05:20:
         55:b0:d5:56:51:e4:c0:00:f3:21:0d:02:de:7d:5b:c1:57:c4:
         ce:32:12:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:20:52 2025 by rpki-client