Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
File:                     QrWM7qosEujy3JjWRMIM-BzhzgU.mft (raw, json)
Hash identifier:          ovWOeSeoPhZzwz7Jjws6Zy+xoxcHLK7akxkPLrkcpc4=
Subject key identifier:   D7:0D:C0:A6:A0:74:0A:DB:A4:A3:BF:4B:BE:22:A3:CF:EF:47:CD:90
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       0955
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
Manifest number:          0951
Signing time:             Mon 30 Jun 2025 01:21:22 +0000
Manifest this update:     Mon 30 Jun 2025 01:21:21 +0000
Manifest next update:     Wed 02 Jul 2025 01:21:21 +0000
Files and hashes:         1: QrWM7qosEujy3JjWRMIM-BzhzgU.crl (hash: O7n/vGJ18hhHPegJvP/WxIB9jw8EjeATFYSR2SQ6Z5U=)
                          2: 1119CD76DFD311EB88361B37F8AEA228.roa (hash: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=)
                          3: F539AC2ADFD211EBB0D1FD36F8AEA228.roa (hash: eXFh4emIQs516bgW52azXjxVc2VVoIN8dsu/3Z+Sdok=)
                          4: EE5F2E50369E11E98EDB1621F8AEA228.roa (hash: weMqKqZKyHm0tyqjfHAxnqGFkomIgwidKnm2Dpx5xnA=)
                          5: 14DA972C369F11E9A85A3C21F8AEA228.roa (hash: rRgU+4tFqjCwv3sj5zK6L+vCSIEp2/0zfXQO2ATh2MM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 01:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2389 (0x955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF, serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
        Validity
            Not Before: Jun 30 01:21:21 2025 GMT
            Not After : Jul  2 01:21:21 2025 GMT
        Subject: CN=6861e692-0f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:00:76:a0:13:dc:bc:d7:59:a4:76:30:9c:
                    40:78:a8:58:3a:40:a1:53:63:84:32:ff:40:a9:70:
                    4c:ee:22:0f:40:8e:52:c3:99:62:b4:9e:89:c5:c9:
                    61:58:bb:02:1c:77:f3:a4:f5:a8:e8:7b:bf:8b:11:
                    b2:ca:43:ff:f2:75:82:ae:4b:6d:7d:81:41:94:29:
                    3e:15:aa:30:07:26:7e:65:27:fd:dc:18:26:66:cd:
                    97:3c:ad:fb:7e:cd:e8:ca:47:e7:21:3b:37:b4:40:
                    08:d9:d5:9e:ce:54:51:ed:d8:1d:ee:ef:4d:53:d3:
                    13:d3:39:56:1a:f3:49:45:dc:a3:38:21:df:68:79:
                    1d:7d:ea:ae:33:ef:1a:d4:c8:79:f1:7b:c3:5b:b9:
                    f6:7a:4c:08:fc:3d:44:3c:c3:47:92:66:ca:e3:7a:
                    bb:31:2f:6d:fd:5b:a4:0a:ac:5e:b1:9a:53:24:2c:
                    62:0b:93:2e:b9:12:a4:23:9e:42:30:a4:86:eb:81:
                    da:66:f5:1c:a5:45:e5:d0:49:d7:e9:f7:2c:33:d7:
                    89:c9:04:a6:21:8a:35:c0:9f:97:bf:9b:d7:d4:52:
                    ca:67:8c:e5:05:fa:c3:9a:8c:49:26:44:9c:de:ff:
                    ad:d5:bb:e9:20:61:9e:58:f2:b2:e7:03:a4:a5:98:
                    56:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0D:C0:A6:A0:74:0A:DB:A4:A3:BF:4B:BE:22:A3:CF:EF:47:CD:90
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:da:88:87:29:be:77:91:15:c7:69:55:9d:11:a2:a9:94:10:
         01:42:db:86:b6:a1:4d:e6:2f:ae:1d:15:db:b8:75:9c:f6:c0:
         bb:03:27:60:0a:34:ec:31:90:4f:72:b1:a5:48:cf:1f:d4:ec:
         ed:2c:2a:f7:77:8f:94:32:78:3f:9e:a2:f2:8c:51:53:8b:70:
         d7:8d:39:02:5d:1e:5d:cb:23:61:43:dd:66:1f:ee:f6:3c:65:
         f4:54:4e:f6:33:a3:b2:bb:15:e1:c0:8d:eb:00:66:db:69:9e:
         6d:f4:5b:8b:f4:dc:d5:ca:26:6f:0e:dd:ae:fc:21:87:4c:41:
         ed:53:b2:d9:59:b9:18:55:1d:1b:9d:7f:12:a0:ab:9b:3b:11:
         26:43:11:09:62:71:4f:8b:29:a0:f1:63:1a:76:bb:65:b5:25:
         16:f3:7b:57:47:f9:21:b5:ef:ee:f7:cb:d8:10:04:b2:a9:82:
         f9:92:ae:f3:26:49:ff:32:9b:27:d5:0b:66:7e:00:46:b6:eb:
         f6:d7:36:18:30:22:e2:06:42:64:92:01:e2:2c:3b:8e:29:e0:
         a7:e8:f1:c1:47:1b:d7:2b:3b:52:3f:29:38:5a:f1:1e:0e:65:
         f9:1f:01:a4:0b:58:53:32:40:fb:cb:63:89:92:1e:fb:cc:b2:
         d1:86:9a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:24:05 2025 by rpki-client