Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
File:                     UJrkB4CHuVMUvanvade7dIgcL94.mft (raw, json)
Hash identifier:          tLV7CN8uH/pMcpvDm9n2BrcWaAoOPfjQAP7kX5hSq40=
Subject key identifier:   64:D8:FA:C3:AD:80:93:3E:09:55:36:4C:DB:F6:E8:7B:4F:FA:86:79
Authority key identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
Certificate issuer:       /CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
Certificate serial:       012A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
Manifest number:          0126
Signing time:             Wed 02 Jul 2025 04:56:47 +0000
Manifest this update:     Wed 02 Jul 2025 04:56:46 +0000
Manifest next update:     Fri 04 Jul 2025 04:56:46 +0000
Files and hashes:         1: UJrkB4CHuVMUvanvade7dIgcL94.crl (hash: wntSesK9RYxZ9ByUDYYjIb8u+EpvwGof6CI0ExHQFQI=)
                          2: FCFCC1C67A7111EF9AF36551762E951A.roa (hash: qrAboZUTqac+Q2mxl59aHmWOevvURvqrYd1DnspbsRc=)
                          3: 8CB5168E7A7111EFA28C7C4D762E951A.roa (hash: wxbx8f56MZI34oPvLMhsBGgkuRggcFGrbjCG/8PfNq8=)
                          4: 077D2872950A11EF882E6662762E951A.roa (hash: FmMHw1MbWECOIR2uR6bUIj//ZenNUVJQZYWgci9jbBo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 04:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630501AF, serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
        Validity
            Not Before: Jul  2 04:56:46 2025 GMT
            Not After : Jul  4 04:56:46 2025 GMT
        Subject: CN=6864bc0f-41ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:9e:d9:37:c8:e5:0e:6c:ec:a6:e1:8f:38:
                    bb:f5:21:37:af:f3:b4:8c:14:fe:f3:d6:79:9e:82:
                    45:91:20:95:fb:79:b6:b2:ed:6b:12:5d:67:e4:be:
                    31:01:9c:dc:89:54:89:c1:3c:d2:b3:30:ad:82:85:
                    22:53:9a:03:2e:ce:db:53:f9:88:e6:f8:e0:c4:7f:
                    d3:f6:7a:a6:fb:d0:2b:e3:fe:17:fa:3b:3f:69:88:
                    b0:cf:85:b1:fc:08:11:57:c5:14:46:87:2b:29:8a:
                    fc:88:ba:32:a1:9c:b0:7a:f3:8a:b5:36:c1:29:71:
                    3e:2e:f9:eb:ab:b5:2c:e7:48:b5:75:e6:79:a7:34:
                    44:34:d1:87:97:8b:75:37:f4:98:0d:ad:cd:5e:9f:
                    d4:a3:37:17:cf:6f:28:5e:dc:dd:f8:7e:b3:49:a3:
                    ca:b8:75:ff:81:6f:ab:05:ee:ce:ba:10:42:0d:e0:
                    82:1d:ed:2c:14:6f:ad:c7:ee:d8:4e:fe:d7:f3:ca:
                    01:48:ce:2c:3c:29:e3:87:6f:10:36:ca:74:4b:73:
                    9d:1d:4a:43:58:5d:24:72:f2:fe:35:01:28:4a:54:
                    cb:2f:cf:b9:44:76:aa:dc:70:6c:69:39:21:7d:25:
                    bc:ac:27:34:4a:45:b2:6a:68:25:4c:b1:e5:55:73:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D8:FA:C3:AD:80:93:3E:09:55:36:4C:DB:F6:E8:7B:4F:FA:86:79
            X509v3 Authority Key Identifier:
                keyid:50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:94:29:1a:66:70:a3:d9:52:06:bc:fa:8f:a6:8b:30:7c:d2:
         d6:58:7b:fb:7b:39:cc:38:bf:60:45:73:0d:61:8a:12:fb:b4:
         9c:c3:af:3e:26:26:18:1e:ba:7f:7b:29:f1:6f:b4:88:14:b4:
         34:c5:7a:fc:40:b1:7d:51:f2:23:3f:f9:b2:39:ea:31:ae:9c:
         ff:e8:a3:0d:08:31:78:db:19:54:91:09:89:62:78:01:4c:15:
         ab:7d:bd:95:74:9f:5e:ea:f1:3f:81:21:29:1e:e4:33:6e:67:
         80:cd:17:25:0f:e1:1b:00:55:d2:4f:11:27:70:62:f6:e1:ec:
         69:f6:4e:47:ea:59:64:20:e9:db:cf:f8:c9:cd:e1:2b:dc:57:
         d1:46:92:a4:c9:fb:3d:7f:a9:29:60:e9:a1:b8:26:a7:4b:0e:
         b9:56:f5:56:db:3d:95:27:2f:28:ed:a9:aa:2e:6e:ba:7d:65:
         ce:88:86:e1:50:74:bd:d4:79:d5:b7:62:56:3c:2c:fb:37:77:
         a1:1d:f5:0b:53:b1:51:30:8f:64:a0:42:a7:35:73:39:d8:cb:
         fd:75:ed:42:76:93:bf:d7:0e:cd:94:bf:28:a7:50:55:95:2b:
         e2:61:39:99:31:b5:60:f6:9b:3f:17:49:6a:e6:99:9f:fd:96:
         b3:54:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:23:08 2025 by rpki-client