Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
File:                     QabtdYD_4RTJIrivEHMnCV4AVbo.mft (raw, json)
Hash identifier:          oui9qsNiLW0Ku0lEVLFRTiYBU2IjZBMpbLv+DUiwKyE=
Subject key identifier:   18:8A:D7:18:2B:96:60:32:A3:C6:51:03:FA:03:C8:54:13:F3:00:84
Authority key identifier: 41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA
Certificate issuer:       /CN=F3633204AF/serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
Certificate serial:       058A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
Manifest number:          0588
Signing time:             Thu 03 Jul 2025 02:35:21 +0000
Manifest this update:     Thu 03 Jul 2025 02:35:20 +0000
Manifest next update:     Sat 05 Jul 2025 02:35:20 +0000
Files and hashes:         1: QabtdYD_4RTJIrivEHMnCV4AVbo.crl (hash: IengrBATW/Q9Jn0vMIM89eD0EoOFqNYqSx1trcqmPjE=)
                          2: B904AFAE405211F0AECBAA98DAE4EC9C.roa (hash: EPkgdYP45sUjC5MQQ8eIhXPc3ynifHxMQiyi4EpsgAM=)
                          3: 60C18DA81F8B11EC8FB62036D8A014CE.roa (hash: Jdq3emfvNJDMjT/lQOHOUpy/8j3a1sny+FYMlqTox8c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633204AF, serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
        Validity
            Not Before: Jul  3 02:35:20 2025 GMT
            Not After : Jul  5 02:35:20 2025 GMT
        Subject: CN=6865ec69-0807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:38:59:a7:cf:35:be:2b:73:0d:4c:0a:ca:
                    3e:2b:59:bf:24:95:d0:41:a1:7f:48:18:80:ac:aa:
                    f3:53:4c:15:a4:7c:0c:a4:18:64:ee:6c:73:01:db:
                    87:a0:a3:fc:6d:50:69:af:24:28:b0:7f:9c:32:94:
                    da:b2:b7:6f:68:cb:14:9e:60:68:ba:25:37:18:e4:
                    8d:39:ff:17:84:b4:9a:b8:bf:29:9c:93:82:5c:1d:
                    20:2e:e9:73:01:8a:4a:b6:9d:a6:84:76:80:ae:29:
                    58:cc:66:3e:9a:90:89:6b:a7:85:91:48:01:18:91:
                    b2:ad:ed:20:26:85:d0:aa:b0:7e:d1:17:be:33:c5:
                    18:89:ae:87:99:1e:97:11:60:67:c6:b8:27:25:22:
                    fd:3d:f3:1c:6d:31:9c:01:91:68:28:50:4d:04:51:
                    93:19:2b:5d:b3:32:51:5c:dd:cf:3a:54:bb:ed:fc:
                    a8:3b:9f:83:41:e2:0a:ad:ee:58:bf:03:bc:14:6f:
                    c8:e1:09:58:a1:ed:b7:1b:4b:e8:c6:e3:6f:25:db:
                    98:4e:2b:32:e1:54:22:42:bc:b1:1e:3f:a4:4f:97:
                    41:39:af:ea:75:e2:b6:87:c5:bc:e9:46:17:2a:6d:
                    46:aa:30:fd:e8:d9:23:58:96:b7:54:06:a1:64:59:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8A:D7:18:2B:96:60:32:A3:C6:51:03:FA:03:C8:54:13:F3:00:84
            X509v3 Authority Key Identifier:
                keyid:41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c2:a8:3d:42:52:5c:82:1e:cc:78:15:cd:e0:71:5d:6c:83:
         48:26:10:f9:09:91:2a:fd:ae:1b:f8:52:b4:b3:ac:b1:3e:1f:
         2d:c2:da:e4:73:0f:d6:53:f6:f1:3f:f3:f4:a5:c4:c9:84:c7:
         e4:f8:0b:5c:8f:7c:cf:38:54:01:ec:bc:04:55:5d:0c:0b:dc:
         b2:07:85:9a:89:97:78:4a:5e:82:d9:7f:d0:7c:99:4e:73:07:
         8f:7a:7b:a8:cd:11:f0:23:c4:ce:af:03:e5:62:2d:48:34:43:
         31:b5:68:35:7f:9d:0c:0d:4b:9d:85:bf:6e:74:ef:f7:97:d3:
         55:9a:e9:08:59:5f:99:f4:3d:8e:68:61:49:a2:9b:ad:76:f9:
         3a:d6:bb:45:42:64:1f:c1:0e:b7:fa:b9:da:34:9a:14:16:7d:
         0d:11:c5:b4:fa:b5:60:59:50:f7:2d:7a:95:c6:5f:45:08:de:
         c1:f0:89:3f:05:6d:0e:ce:ac:82:60:f5:01:35:4a:6c:4f:eb:
         83:86:f3:9a:d2:81:bd:bc:5b:12:b6:1a:6d:86:5a:56:50:fc:
         68:70:7e:73:f4:ae:9e:3a:99:70:28:5d:a9:06:9a:48:fb:04:
         07:02:9a:c6:ff:04:df:4b:f1:e0:68:08:3e:c0:84:4d:0a:f5:
         2e:19:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:05:25 2025 by rpki-client