Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
File:                     UD0YKNTvDNxjpYpU9cDJktI7wao.mft (raw, json)
Hash identifier:          UqeAdBnTZeDS+cqNNv5EaK4wPb6pD3NSrGxzX/+ZDQk=
Subject key identifier:   BE:94:A5:ED:B7:B3:A0:2B:F6:FE:BB:32:8F:2D:37:DD:09:34:A6:D4
Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Certificate issuer:       /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Certificate serial:       03A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
Manifest number:          039E
Signing time:             Wed 02 Jul 2025 03:27:39 +0000
Manifest this update:     Wed 02 Jul 2025 03:27:38 +0000
Manifest next update:     Fri 04 Jul 2025 03:27:38 +0000
Files and hashes:         1: UD0YKNTvDNxjpYpU9cDJktI7wao.crl (hash: UwKGAwXQOjSBmPLYaPIIy9a0kRD8ElEdiJ7aHCdetuY=)
                          2: 7BADB9E6F07211EF92AD9376762E951A.roa (hash: B2o+mnnPb8VJ0KXGT1vN0Wq4qZm+iGs6+p3J/guAPnc=)
                          3: F1E5F272F07211EFAFA7997A762E951A.roa (hash: zuqVO/yJxreB8Tl25mp3hH6BAgTW+c+L7Zu/GOdPyYc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 03:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930 (0x3a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619AFBAF, serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
        Validity
            Not Before: Jul  2 03:27:38 2025 GMT
            Not After : Jul  4 03:27:38 2025 GMT
        Subject: CN=6864a72b-71ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:db:d8:7f:06:7e:04:e5:15:00:91:ef:d4:
                    c4:85:60:ce:24:44:3e:9f:cd:db:d2:f2:ed:8b:64:
                    bb:21:07:1b:97:9d:72:26:f6:6f:21:6c:f4:ac:e0:
                    5a:af:83:58:e1:0e:54:8f:83:46:0c:0b:45:34:e3:
                    34:37:60:4a:2a:ba:ba:99:73:e5:c1:c5:1f:bb:f9:
                    07:e3:ba:8e:82:b7:5e:cb:59:d7:dc:e4:5d:23:6d:
                    7d:f0:fc:a6:6a:b8:40:4e:3c:29:a2:b7:48:90:e3:
                    f7:42:dc:24:ef:86:a6:f2:fa:64:ad:98:90:ef:4c:
                    95:c0:0a:76:ca:cd:d2:25:4a:66:31:c0:08:3a:ab:
                    ac:24:23:41:cd:91:33:99:01:f1:3a:4b:30:34:11:
                    18:57:1a:1f:ae:49:47:a3:36:84:84:18:7e:d9:61:
                    fe:87:d3:f9:6b:91:50:31:b4:86:b4:0c:0f:07:2f:
                    bc:f2:38:b8:10:54:0c:50:1c:0f:d1:ef:50:aa:f4:
                    3f:dc:b5:07:6b:e1:b2:a9:f6:59:d5:de:b8:14:08:
                    7a:94:64:fa:64:e1:2f:c6:28:0e:db:67:96:26:4e:
                    2b:96:39:aa:69:d8:93:36:8f:84:dc:b3:f6:ce:46:
                    21:8f:5f:1a:2e:30:2d:ca:e9:9c:22:cc:8a:2d:1b:
                    24:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:94:A5:ED:B7:B3:A0:2B:F6:FE:BB:32:8F:2D:37:DD:09:34:A6:D4
            X509v3 Authority Key Identifier:
                keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bc:6e:42:4d:35:c3:fc:2c:64:31:91:0f:2d:8f:04:f4:07:
         78:9c:29:f2:80:23:f3:54:1d:fd:79:f9:54:fa:32:e3:ad:cd:
         0e:46:e7:3f:0a:5b:63:4c:a7:88:a5:ae:6b:d5:64:1a:98:56:
         11:7d:d7:58:2d:aa:80:4d:2f:13:e6:12:24:d5:1e:31:81:a9:
         35:5a:54:9c:2f:16:05:3a:bc:6b:72:a2:8f:f9:15:f9:a5:d2:
         7a:31:38:ed:60:24:f9:76:5c:81:6b:9a:d2:84:3f:06:87:43:
         81:b1:4b:c9:a4:ea:3d:f8:e6:6b:dc:dc:31:34:f6:f5:b3:b1:
         56:bf:24:07:31:33:53:1b:1a:2f:a1:a8:56:07:97:d7:e7:0e:
         58:98:27:80:78:9c:f4:eb:e7:fa:b0:0e:9d:25:6c:df:7d:c5:
         a6:20:a3:c0:34:8c:57:a9:3b:02:72:b7:0f:25:b2:42:2f:88:
         6a:0a:e3:08:9b:9a:b4:9f:9c:52:71:a6:3a:3d:56:3c:c4:77:
         b2:ac:2f:2d:f2:6a:61:89:1e:3f:ac:04:ff:09:f5:3d:7c:05:
         d5:8f:bc:f7:a6:a6:0f:dd:ce:4f:55:b7:f7:21:7e:0d:ec:16:
         58:47:79:1e:b7:f0:13:6b:59:0c:91:26:42:82:43:6e:69:9d:
         c8:d9:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:43:32 2025 by rpki-client