Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
File:                     U3W2ePNrjZxrXcMoG29etnFqEQk.mft (raw, json)
Hash identifier:          G4XPOOeqI0v6XtLTdMa9Xm2Ml2WEQTaFO9Mf2hnM3NQ=
Subject key identifier:   4C:84:70:A3:26:BE:E7:7E:73:67:64:5B:2B:35:85:13:47:C2:42:25
Authority key identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09
Certificate issuer:       /CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
Certificate serial:       027D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
Manifest number:          0279
Signing time:             Tue 01 Jul 2025 04:08:49 +0000
Manifest this update:     Tue 01 Jul 2025 04:08:48 +0000
Manifest next update:     Thu 03 Jul 2025 04:08:48 +0000
Files and hashes:         1: U3W2ePNrjZxrXcMoG29etnFqEQk.crl (hash: V6kvFxihp9h/IVkVMi98A25Op/lPGv2R35dLZyLwhJA=)
                          2: 902EBEC6960311EEBE7A780ED25BE465.roa (hash: RI1NH59VXYSwoVvD3QSrzuux5c6I6SJhdTOnik9vzQs=)
                          3: 6684D06A960311EEBA07EA0DD25BE465.roa (hash: 43CBfTPYLSaOl2NwiPQTIsa3VBBdU7WdHBgYb3+EOHI=)
                          4: 790E531095AD11EE9C283379D25BE465.roa (hash: Qj3JkuwJNN7j0VesRDUQ2bCZfvpe+I/vZ/mOS/O0MGI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 04:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637 (0x27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAF, serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
        Validity
            Not Before: Jul  1 04:08:48 2025 GMT
            Not After : Jul  3 04:08:48 2025 GMT
        Subject: CN=68635f50-98c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:4d:a2:0a:52:11:cc:cd:a5:ef:fd:85:76:f4:
                    41:f4:75:d0:46:a6:61:b2:7f:5d:ec:cf:2f:41:34:
                    fb:4c:1f:3f:8d:36:c7:34:57:5e:b7:a2:7e:18:a9:
                    17:3f:11:2a:2d:e5:6e:82:e1:6a:7e:88:11:de:7c:
                    5d:86:e8:c9:fd:99:82:19:bf:09:ee:19:9a:00:92:
                    6d:9d:a5:1f:ff:ee:28:bf:76:32:58:55:da:c7:35:
                    f5:e8:71:8e:6f:d0:22:90:7c:09:90:10:c2:6b:f2:
                    e6:2f:c7:e7:79:73:86:57:d2:76:e5:9c:1e:11:76:
                    2a:e8:fc:d1:fd:c0:ee:80:bf:37:10:14:f5:f8:05:
                    d9:c4:9e:75:14:70:68:3d:33:54:47:04:ce:ea:15:
                    a6:46:bf:69:fa:66:0c:e1:47:3f:a1:f3:ae:53:1b:
                    83:90:79:ed:35:57:70:3f:80:4f:e3:c3:61:a9:c8:
                    25:6c:d2:31:28:62:9e:a6:f1:f4:16:b2:29:8f:5f:
                    64:64:3f:d9:aa:6e:39:14:dc:35:1c:e5:15:77:bd:
                    d3:a5:8f:6d:e3:04:20:14:c5:f6:06:a6:60:7c:8b:
                    6b:a1:f1:15:f2:c7:2d:dd:7a:a0:96:db:b9:7a:67:
                    88:1c:0d:98:cb:bf:1c:cf:20:90:c8:8b:89:1d:68:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:84:70:A3:26:BE:E7:7E:73:67:64:5B:2B:35:85:13:47:C2:42:25
            X509v3 Authority Key Identifier:
                keyid:53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:99:7b:d9:c7:78:a6:ba:fd:11:bd:b8:db:e8:10:aa:9c:70:
         bd:54:85:0f:65:eb:fb:7b:f7:79:d4:b1:a8:a1:2e:50:c6:89:
         05:50:89:40:ff:9b:81:b3:2a:da:7b:64:9e:01:da:36:b6:20:
         a0:00:63:32:4a:02:b0:48:37:ff:29:cf:74:9f:9e:3a:6f:57:
         42:b4:85:fb:35:b3:53:34:a9:12:40:a5:44:68:58:4e:d8:f9:
         bd:b7:7d:6e:d6:b7:a6:11:f2:1b:ec:8a:0d:f4:26:a9:d7:47:
         8f:8e:4e:eb:8e:7f:e1:cb:5e:cf:1a:15:11:67:b2:ee:0c:b8:
         12:cc:8c:96:25:bd:e0:c4:06:b9:f2:6e:98:48:44:ad:e8:c2:
         e2:2f:6a:0f:6e:0c:e8:8b:7a:7b:60:d1:46:58:ba:c7:5a:b9:
         b0:1d:c3:36:3c:2f:d7:a4:84:af:ee:85:59:d9:c7:9b:c0:48:
         2d:aa:8f:8f:5d:64:87:6a:47:b6:8e:7a:df:a3:99:46:a2:66:
         6c:78:d6:8a:52:96:50:19:27:37:eb:9d:2f:a7:a0:7a:76:ef:
         79:47:fc:89:9a:39:23:e6:ec:4a:75:9d:ac:d0:15:ea:39:88:
         f0:fb:64:dd:65:b0:e4:fa:df:8f:9d:8d:aa:eb:67:12:58:d1:
         e9:2f:01:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:42:39 2025 by rpki-client