Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
File:                     Wob5iKEjH4bJcjMShVh-z4ZL25A.mft (raw, json)
Hash identifier:          cfa6QehI6+3jJP4vaTcNtvfB0o5nFHEbePh0a32azJg=
Subject key identifier:   0C:1B:A5:33:BC:2C:07:D0:31:4D:44:0C:F7:F7:44:89:92:55:77:F1
Authority key identifier: 5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
Certificate issuer:       /CN=F36FA13FAF/serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Certificate serial:       0860
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
Manifest number:          085B
Signing time:             Wed 30 Apr 2025 01:37:48 +0000
Manifest this update:     Wed 30 Apr 2025 01:37:47 +0000
Manifest next update:     Fri 02 May 2025 01:37:47 +0000
Files and hashes:         1: Wob5iKEjH4bJcjMShVh-z4ZL25A.crl (hash: eZStWyu7Gn211YepDbfsNSWnAMse6COecEAw9fXn1+g=)
                          2: BC46616C9AFB11ECA18A8A895A40D577.roa (hash: siGB+YyYJADyfug/WgaGsUNasPkOvZWP4/Iz9BLePsI=)
                          3: 4C64BF4C9AFB11ECB58B52885A40D577.roa (hash: 58jy1C6d3WrJ/oJASDCkngyvBXzia2JH2GYnHdN661A=)
                          4: 508536209AFA11ECA56176855A40D577.roa (hash: AdNPqjJ7lYb3Mhu0FE9KQ9W5o9LsUhKXMO54oXl/coM=)
                          5: 19F651E6C4DA11E9AB3B1D27F8AEA228.roa (hash: 6cNifU+dnh2iNhQgpKvyLDNVbFzFJJzW3fscpRBY7Yw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 01:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2144 (0x860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA13FAF, serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
        Validity
            Not Before: Apr 30 01:37:47 2025 GMT
            Not After : May  2 01:37:47 2025 GMT
        Subject: CN=68117eeb-ed26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:eb:a3:53:71:5f:a9:6d:aa:b7:19:3e:52:1a:
                    fe:38:9e:2e:07:0f:f6:dd:b8:e2:e5:db:2d:de:15:
                    94:ee:3f:1e:b6:eb:71:57:5d:00:a6:e2:6e:4a:36:
                    56:f2:c0:d6:80:c1:47:ab:7d:06:90:26:68:c8:ee:
                    a4:2d:9f:45:9f:70:b9:c6:9c:3b:d6:81:78:83:21:
                    76:cc:68:5f:31:80:f6:dd:40:f0:95:c0:6e:29:7f:
                    8a:ae:b9:c1:4e:32:79:56:0c:59:84:d5:f9:72:66:
                    6c:2f:fa:22:73:9a:24:c0:6c:88:b6:5c:c1:48:31:
                    e4:b4:b9:23:5e:8b:7f:24:a9:a5:5e:4e:66:64:3f:
                    9a:f2:50:93:16:45:bf:91:90:52:8c:8c:96:46:f9:
                    1d:08:3c:0c:83:db:b7:c6:95:a2:10:59:e4:db:77:
                    7b:d1:56:d5:c7:e5:8c:5f:88:5a:af:87:04:2e:a3:
                    97:38:74:98:2b:75:e2:62:8c:15:c0:33:ce:91:5b:
                    e9:24:bc:f4:7d:df:0a:69:41:49:7e:06:05:18:af:
                    aa:c1:17:9d:a9:57:06:15:0c:6d:e9:a7:8a:1a:65:
                    48:d2:b5:4d:ad:5d:61:2c:ae:30:c9:c5:86:24:09:
                    96:5a:a7:52:b6:b0:80:76:e6:26:b5:41:4b:d3:9c:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1B:A5:33:BC:2C:07:D0:31:4D:44:0C:F7:F7:44:89:92:55:77:F1
            X509v3 Authority Key Identifier:
                keyid:5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:24:63:a8:29:0d:da:b8:ee:06:c9:03:b1:84:90:53:42:44:
         e5:35:25:58:bc:27:1d:24:1d:b0:7c:1e:0b:58:6b:c4:39:a7:
         fa:ac:6e:6c:a3:e2:52:39:f3:ff:45:61:45:4f:25:42:37:35:
         57:38:8c:8c:5b:58:c0:d8:38:25:63:af:af:3c:c1:6a:44:8d:
         19:b2:98:ce:7c:a4:7e:95:e6:9d:c5:72:2d:a9:e6:cf:c1:30:
         2c:91:71:bd:37:06:3d:cd:64:8d:ef:db:7f:a3:6a:12:76:d2:
         e8:d5:7c:e9:03:50:94:50:f9:22:14:10:e6:c0:54:ea:cf:00:
         e0:6f:4a:96:c7:81:05:e5:97:4a:56:12:5c:67:e5:6f:02:eb:
         d5:51:cf:99:09:18:24:fb:92:65:5f:be:8a:d7:89:4f:2e:a6:
         4b:7f:17:fb:2d:56:53:f6:0c:59:c3:f9:8c:86:62:57:93:ae:
         1c:65:bd:8c:2b:04:4d:50:94:7d:06:2c:3f:6f:81:cf:c1:ed:
         8f:be:ca:c3:8f:9d:af:d9:9d:fc:3e:c3:67:c1:3d:dc:1b:d5:
         32:a1:cb:ee:a3:9c:96:0b:72:32:b6:1e:04:fd:ec:e5:38:9e:
         02:a3:f0:5d:78:b7:75:3a:e2:88:28:8d:86:9d:9c:e1:a5:22:
         b9:4e:7f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:46:40 2025 by rpki-client