Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.mft (raw, json)
Hash identifier:          THR7slUeqyiuWS5+Guuv9WRvLYDBc8DQQ2DTLcau774=
Subject key identifier:   1D:D9:B3:94:15:6E:5D:EF:B2:6D:C8:94:A0:9E:25:52:2F:4F:6A:42
Authority key identifier: C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Certificate issuer:       /CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
Certificate serial:       0233
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
Manifest number:          0231
Signing time:             Thu 03 Jul 2025 04:15:23 +0000
Manifest this update:     Thu 03 Jul 2025 04:15:22 +0000
Manifest next update:     Sat 05 Jul 2025 04:15:22 +0000
Files and hashes:         1: x_9uywvS7BI1alQX4xxzC5BQlBE.crl (hash: xVQgKLDkatubaiwCSJYkRkJt3xrrnggi6acAuDmWfzw=)
                          2: 209064A80ECA11EFA0FB8D6C017001B1.roa (hash: SYHt2ENsggByHF7FNfIiJDtYCTGlxeYoFHTIRbjH6Hc=)
                          3: 3906A38AAD5411EEB67B65B2775412E6.roa (hash: ReFNAC4d+VQBlR/AEunK+azob89VljT5w2yD48BTB3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AF, serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
        Validity
            Not Before: Jul  3 04:15:22 2025 GMT
            Not After : Jul  5 04:15:22 2025 GMT
        Subject: CN=686603da-4e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:67:ff:71:92:1f:3b:89:ff:2b:88:c8:c9:
                    2a:9e:82:53:4d:7b:d1:d8:06:b9:89:98:0e:25:f9:
                    d2:dc:b6:a6:09:3d:a1:d4:96:ed:4e:52:a9:5d:37:
                    a3:01:b1:6a:cc:23:45:49:93:7f:26:fe:dd:07:2a:
                    81:2d:a8:71:52:c8:bb:46:c0:2d:0c:71:84:7c:a0:
                    ed:fa:b3:ae:5a:46:29:2d:84:66:0d:24:73:f5:4d:
                    e4:7a:6e:e8:59:ef:77:82:97:66:52:5a:74:7d:62:
                    5f:bd:01:3c:3d:70:30:34:cc:d7:b2:0d:6c:70:95:
                    07:54:15:dc:cb:81:57:3b:ed:df:bd:2c:d7:05:63:
                    1a:3d:8e:f7:f2:7b:c6:d5:c7:83:00:a7:35:ef:6d:
                    f7:41:de:92:26:99:c7:25:36:be:96:7c:39:fb:94:
                    26:f2:bc:a2:78:81:10:f5:b7:f2:ca:7f:61:bc:9e:
                    9b:49:af:55:ba:d3:94:8f:6d:da:25:1d:96:09:50:
                    be:3b:07:f1:29:fb:9e:ca:2a:94:37:37:b3:aa:7c:
                    1e:16:ee:0b:8d:64:8d:d8:2e:f7:1f:64:82:ee:f4:
                    54:dd:77:8d:a4:43:12:42:75:88:c3:93:3c:93:ce:
                    a1:0e:fa:3f:0b:11:13:5d:32:8d:02:01:7e:95:69:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D9:B3:94:15:6E:5D:EF:B2:6D:C8:94:A0:9E:25:52:2F:4F:6A:42
            X509v3 Authority Key Identifier:
                keyid:C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:79:d3:91:df:5b:d1:29:d5:33:e0:37:51:c4:3c:30:f1:1b:
         37:b8:66:64:9b:f7:92:b4:e2:3a:25:ce:cf:5b:58:9d:04:16:
         ff:7f:3e:8d:54:92:54:1c:c7:54:4a:2a:a2:b3:49:b4:e0:98:
         41:64:5a:f0:61:6f:e7:92:e4:84:e8:0c:ca:d9:0f:ea:58:9d:
         d3:63:84:ea:db:41:29:1f:cd:8a:7c:c4:d1:6b:47:36:19:ba:
         c8:83:8c:44:71:ab:ff:06:07:7a:26:a6:d2:64:53:6f:9a:24:
         7a:8d:fb:e6:9f:1b:fd:41:64:4d:5a:2e:6f:2b:74:db:a2:d4:
         05:c9:8d:84:f2:06:3d:46:89:11:87:6a:a5:20:01:8d:f7:e0:
         51:5c:25:d0:b2:34:f4:6f:d3:46:23:9a:e6:72:12:d6:b2:5f:
         1e:ca:59:ba:8f:b6:cc:d6:18:20:90:f2:d7:3d:68:82:41:21:
         ce:1b:f0:a4:53:58:9c:e6:17:a3:27:b9:8a:54:f5:90:91:84:
         27:8b:0b:f2:c6:21:9a:d0:58:0d:5a:a1:d2:56:15:b1:6d:c7:
         4b:ea:7f:0b:27:d0:e4:c7:8d:09:c3:14:42:4c:53:00:de:22:
         f9:22:36:41:b2:7c:a0:e0:ea:e3:52:bf:5e:c8:f7:02:e1:24:
         55:39:27:d4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzlBNzFBRjExMC8GA1UEBRMoQzdGRjZFQ0IwQkQyRUMxMjM1NkE1NDE3RTMxQzcz
MEI5MDUwOTQxMTAeFw0yNTA3MDMwNDE1MjJaFw0yNTA3MDUwNDE1MjJaMBgxFjAU
BgNVBAMTDTY4NjYwM2RhLTRlMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5OGf/cZIfO4n/K4jIySqeglNNe9HYBrmJmA4l+dLctqYJPaHUlu1OUqld
N6MBsWrMI0VJk38m/t0HKoEtqHFSyLtGwC0McYR8oO36s65aRikthGYNJHP1TeR6
buhZ73eCl2ZSWnR9Yl+9ATw9cDA0zNeyDWxwlQdUFdzLgVc77d+9LNcFYxo9jvfy
e8bVx4MApzXvbfdB3pImmcclNr6WfDn7lCbyvKJ4gRD1t/LKf2G8nptJr1W605SP
bdolHZYJUL47B/Ep+57KKpQ3N7OqfB4W7guNZI3YLvcfZILu9FTdd42kQxJCdYjD
kzyTzqEO+j8LERNdMo0CAX6VaeDZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHdmz
lBVuXe+ybciUoJ4lUi9PakIwHwYDVR0jBBgwFoAUx/9uywvS7BI1alQX4xxzC5BQ
lBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5QTcxLzQyQzAxRURBQUQ1MjExRUU5NzQ3MEJBRjc3NTQxMkU2L3hfOXV5
d3ZTN0JJMWFsUVg0eHh6QzVCUWxCRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hfOXV5d3ZTN0JJMWFsUVg0eHh6QzVCUWxCRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzlBNzEvNDJDMDFFREFBRDUyMTFFRTk3NDcwQkFGNzc1
NDEyRTYveF85dXl3dlM3QkkxYWxRWDR4eHpDNUJRbEJFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbedOR31vRKdUz4DdRxDww8Rs3uGZk
m/eStOI6Jc7PW1idBBb/fz6NVJJUHMdUSiqis0m04JhBZFrwYW/nkuSE6AzK2Q/q
WJ3TY4Tq20EpH82KfMTRa0c2GbrIg4xEcav/Bgd6JqbSZFNvmiR6jfvmnxv9QWRN
Wi5vK3TbotQFyY2E8gY9RokRh2qlIAGN9+BRXCXQsjT0b9NGI5rmchLWsl8eylm6
j7bM1hggkPLXPWiCQSHOG/CkU1ic5hejJ7mKVPWQkYQniwvyxiGa0FgNWqHSVhWx
bcdL6n8LJ9Dkx40JwxRCTFMA3iL5IjZBsnyg4OrjUr9eyPcC4SRVOSfU
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:00:06 2025 by rpki-client