Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
File:                     o5s35g1cIOlutaIPRdIs7vh_5bw.mft (raw, json)
Hash identifier:          B1hgWxi5vAsfC16aMritjrJhG4B0P2irz7qEiglTsjM=
Subject key identifier:   AE:D2:18:10:C7:65:CD:E8:7C:C2:25:6C:56:C4:CE:DF:48:72:4A:2A
Authority key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Certificate issuer:       /CN=F36BD167AF/serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Certificate serial:       5F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
Manifest number:          5D
Signing time:             Mon 28 Apr 2025 07:50:03 +0000
Manifest this update:     Mon 28 Apr 2025 07:50:03 +0000
Manifest next update:     Wed 30 Apr 2025 07:50:03 +0000
Files and hashes:         1: o5s35g1cIOlutaIPRdIs7vh_5bw.crl (hash: 6FiNeZDHThoYzRimBAG1cPS5wnSY87I2o1HLF985NgU=)
                          2: 4C4CA36C240511F0A41941F0DAE4EC9C.roa (hash: 96jN3F3S5Qws4lMbtHi32wuOKDgpX0E+Lst17cIJts8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD167AF, serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
        Validity
            Not Before: Apr 28 07:50:03 2025 GMT
            Not After : Apr 30 07:50:03 2025 GMT
        Subject: CN=680f332b-3a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:aa:0d:d8:85:e9:de:97:4f:8e:e5:f2:82:
                    d3:ca:72:3e:ec:be:66:02:ef:bc:8d:b3:53:df:09:
                    93:f8:6b:ab:ab:72:da:d0:a4:db:68:24:2f:59:fe:
                    28:3e:22:aa:fc:e7:6a:a6:37:9c:82:80:31:74:79:
                    44:90:64:19:91:10:8c:d0:ae:e7:00:fc:02:39:25:
                    7e:34:52:ce:0f:87:eb:58:ca:8f:26:e1:14:52:3d:
                    5c:79:e6:89:36:5c:f5:8f:68:02:a4:3f:26:3f:e7:
                    17:de:7f:8d:df:eb:0b:63:24:58:b6:34:ef:23:d9:
                    f8:0c:7e:9e:80:82:2a:0e:45:f1:f7:6d:e6:39:db:
                    e8:9f:18:d7:96:00:07:dd:e9:d3:75:1b:6e:50:ab:
                    8e:96:89:2c:18:b6:ba:c2:e3:7a:b7:b0:b3:30:b1:
                    6d:91:99:22:0d:3e:35:90:63:e9:d7:74:c1:7c:6c:
                    e8:c1:0b:8c:22:82:ed:0d:4a:30:c1:c9:86:2e:d8:
                    c4:2d:89:08:92:3a:a4:1c:29:d3:15:46:32:ab:11:
                    c6:61:44:de:46:fc:4f:53:dd:d1:78:aa:85:7d:88:
                    f2:2f:f3:7e:c9:30:74:a3:02:7c:2d:97:1f:7d:0c:
                    d5:78:5c:72:ef:45:72:e4:c9:d3:9a:ef:89:6d:83:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D2:18:10:C7:65:CD:E8:7C:C2:25:6C:56:C4:CE:DF:48:72:4A:2A
            X509v3 Authority Key Identifier:
                keyid:A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6d:6e:fa:f8:47:d2:fa:42:05:94:b1:be:24:fd:91:33:99:
         26:78:a0:29:0f:91:1e:4b:66:13:2d:d7:3f:a0:48:eb:17:d4:
         94:bf:45:c2:bc:69:23:54:19:be:ae:b8:36:60:1e:31:bb:da:
         10:42:e1:89:3f:23:9c:5a:c7:9e:0f:7f:32:53:5c:9e:96:68:
         c6:38:9b:8a:9b:13:f4:23:7a:74:a2:fb:0a:2f:be:86:08:2d:
         d2:38:99:2f:14:c6:14:73:f2:c9:05:60:24:8e:45:9f:df:d2:
         72:fd:d6:32:7b:6a:28:32:f0:6c:8d:f5:cd:6d:48:16:de:0c:
         1f:85:96:ca:41:26:61:e3:ed:28:44:4b:11:01:a5:ce:74:f0:
         ad:49:d8:bb:47:bd:c3:7c:86:8e:7d:15:b2:83:c6:b1:4a:6a:
         f2:60:1b:e9:0e:1a:53:b9:72:32:2f:44:01:1c:87:bf:42:07:
         35:9f:91:5d:79:fd:82:e9:c2:32:ef:e0:e1:9c:46:0b:9a:e6:
         53:07:10:26:4c:81:22:8e:85:15:e0:34:bd:c0:52:26:5b:65:
         60:ee:f2:df:52:05:26:5c:f9:4f:a2:18:ed:a7:b7:4d:31:a5:
         9d:a2:41:c4:97:42:ce:2e:1d:ad:f2:98:d7:3d:95:b7:56:81:
         5d:b4:40:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----