Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
File:                     U3W2ePNrjZxrXcMoG29etnFqEQk.mft (raw, json)
Hash identifier:          x3QlfbHtR089BUttxm1yNTjLJJw2MkzdGEhH1s7/sag=
Subject key identifier:   28:15:94:74:CB:C8:A8:51:BC:ED:86:95:59:61:FF:DF:59:06:AD:E0
Authority key identifier: 53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09
Certificate issuer:       /CN=F361F1DAAF/serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
Certificate serial:       02B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
Manifest number:          02AE
Signing time:             Sat 23 Aug 2025 04:04:48 +0000
Manifest this update:     Sat 23 Aug 2025 04:04:47 +0000
Manifest next update:     Mon 25 Aug 2025 04:04:47 +0000
Files and hashes:         1: U3W2ePNrjZxrXcMoG29etnFqEQk.crl (hash: Ijr5uVDjQxobSa7vewZJfKZAcjyGK5Zyf2Sx9dAsVBc=)
                          2: 902EBEC6960311EEBE7A780ED25BE465.roa (hash: RI1NH59VXYSwoVvD3QSrzuux5c6I6SJhdTOnik9vzQs=)
                          3: 6684D06A960311EEBA07EA0DD25BE465.roa (hash: 43CBfTPYLSaOl2NwiPQTIsa3VBBdU7WdHBgYb3+EOHI=)
                          4: 790E531095AD11EE9C283379D25BE465.roa (hash: Qj3JkuwJNN7j0VesRDUQ2bCZfvpe+I/vZ/mOS/O0MGI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAF, serialNumber=5375B678F36B8D9C6B5DC3281B6F5EB6716A1109
        Validity
            Not Before: Aug 23 04:04:47 2025 GMT
            Not After : Aug 25 04:04:47 2025 GMT
        Subject: CN=68a93de0-8431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:48:78:1f:7f:41:1d:99:25:e3:f0:0e:a5:
                    99:54:d5:d6:f0:ba:73:8b:c2:41:4b:36:b8:1b:34:
                    af:a5:ad:d3:c1:81:2b:d8:e7:cb:7c:c6:77:31:20:
                    96:ff:c0:0a:e9:5c:b2:c1:fb:39:b6:6c:59:8a:7a:
                    5c:10:17:c1:d2:17:ce:d0:d4:0f:ab:c2:b3:76:f4:
                    39:43:11:ab:88:95:9c:48:34:06:ff:5a:d1:64:66:
                    11:5c:46:36:2a:bc:28:44:2d:75:a5:c7:d5:0c:86:
                    51:4d:5c:61:e2:03:91:09:1e:07:09:b0:ea:37:b7:
                    7c:58:92:00:2b:8b:da:36:5e:b5:cb:5c:b9:31:d8:
                    a9:be:8d:d9:e8:4b:ac:84:1b:64:78:f0:60:7a:cb:
                    66:41:e2:0f:c9:b2:a7:30:21:a9:52:72:34:7f:33:
                    21:b1:c4:65:de:fb:a2:92:b5:c0:9f:83:71:62:4d:
                    35:69:d9:bf:c9:3a:b0:f7:11:25:1a:88:d6:1c:1f:
                    72:83:6a:e7:7e:98:31:10:3c:83:14:89:44:fc:5e:
                    d8:83:97:21:df:36:3d:ae:12:4d:f1:69:0d:bd:40:
                    3c:a2:4c:be:88:e5:0a:5d:98:32:4c:41:39:7b:72:
                    7d:44:e0:4a:05:3f:69:eb:0e:0a:e8:cf:41:c5:36:
                    12:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:15:94:74:CB:C8:A8:51:BC:ED:86:95:59:61:FF:DF:59:06:AD:E0
            X509v3 Authority Key Identifier:
                keyid:53:75:B6:78:F3:6B:8D:9C:6B:5D:C3:28:1B:6F:5E:B6:71:6A:11:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3W2ePNrjZxrXcMoG29etnFqEQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/2DA8F37A77E011EEA233EA7B4AD9E6FC/U3W2ePNrjZxrXcMoG29etnFqEQk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a4:88:c3:8b:c2:d6:0a:77:04:fa:d6:15:57:2c:1e:eb:07:
         ca:ab:9d:93:85:dc:29:b7:2b:51:f5:ed:6b:9b:93:06:70:c9:
         63:35:c3:0d:e1:8b:01:32:7d:3c:69:26:40:c7:07:ed:b6:bb:
         b8:b9:c8:24:ed:ca:b5:f6:8e:8b:e2:76:d8:b9:f0:fb:e5:54:
         41:1a:ce:a1:e7:2e:9f:01:7d:46:de:e5:b6:3e:0b:2b:64:e3:
         48:13:f6:93:d0:c3:bf:f3:f8:ae:71:ac:e1:98:39:f9:51:42:
         e3:af:13:b8:a7:ec:6a:57:6b:18:c4:3f:0e:03:6e:56:2a:d3:
         8a:cf:18:af:1a:3e:18:19:eb:b7:1f:cf:6b:14:23:5d:9b:2e:
         9c:49:e0:85:b3:8e:b8:2c:f1:4e:7e:2a:70:b7:9b:8e:b9:eb:
         1d:81:a0:77:17:91:28:74:f7:df:78:59:99:8b:71:bf:b9:96:
         cd:e3:c8:3f:1f:e0:2d:c7:36:99:ee:fa:2a:43:1b:68:f9:3a:
         a4:49:7c:49:15:d1:46:ad:0c:f2:56:1c:2b:d0:00:11:52:f4:
         da:80:71:22:2d:93:43:aa:51:bc:09:11:4f:f3:19:00:f7:00:
         4c:4e:58:23:92:6d:e8:9a:ac:38:19:f3:9b:ea:3a:62:3d:25:
         22:39:73:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:07 2025 by rpki-client