Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
File:                     j1A71XPOETUXzWtM-jdKYvFeEsE.mft (raw, json)
Hash identifier:          3KzYMz0KrunOO5eMuxRUiqUuTYEk7Au7jTGIBgPZ76g=
Subject key identifier:   A7:F5:DD:54:73:2F:AD:57:36:5D:4C:CB:8D:35:37:48:D4:C6:8C:36
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Certificate issuer:       /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial:       0628
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
Manifest number:          0623
Signing time:             Thu 03 Jul 2025 02:15:29 +0000
Manifest this update:     Thu 03 Jul 2025 02:15:28 +0000
Manifest next update:     Sat 05 Jul 2025 02:15:28 +0000
Files and hashes:         1: j1A71XPOETUXzWtM-jdKYvFeEsE.crl (hash: j1sm/+xN1K9XxD6beqMn4VxLmemEz/0u3CKyYJw4Z/s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE44AF, serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
        Validity
            Not Before: Jul  3 02:15:28 2025 GMT
            Not After : Jul  5 02:15:28 2025 GMT
        Subject: CN=6865e7c1-979f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:a0:4b:db:9d:6b:ef:d4:e9:75:05:7b:7e:
                    a4:ea:f4:37:f7:ce:b2:41:65:6f:93:65:c2:a2:a2:
                    3a:83:ac:5b:22:34:1b:af:88:97:88:2c:22:cf:bb:
                    c9:47:fa:ad:8a:10:d7:78:27:15:0d:f5:4a:d0:7a:
                    f2:fb:39:fe:27:a1:ae:0d:eb:d8:ac:38:ec:38:94:
                    46:c2:01:d7:9e:25:22:0c:d5:40:64:95:1b:e8:10:
                    05:0f:1b:80:d1:fe:bf:80:4e:43:2f:f6:5a:c7:84:
                    ef:85:e3:6b:89:fc:82:87:71:65:80:76:53:e1:59:
                    94:b7:7f:fe:30:56:4e:9e:7b:56:0c:e4:d5:90:ec:
                    66:cc:36:be:1e:7c:7f:75:60:c3:96:8d:c6:76:d9:
                    3e:d4:85:a1:c0:1f:21:99:e9:ea:f9:2f:eb:9b:92:
                    22:45:c0:2d:1b:d8:aa:c2:fa:34:1e:f5:24:52:ec:
                    40:70:fa:f4:32:c1:bb:d1:21:91:92:06:8f:47:d3:
                    1e:e1:45:eb:a2:65:69:9d:70:99:d0:06:65:50:1c:
                    cb:3c:0e:2d:df:3d:36:bf:28:ab:e8:be:bc:9d:74:
                    30:a0:4d:aa:ea:a7:3c:8f:5f:d5:65:40:8a:f4:5f:
                    4f:04:54:d4:75:c9:01:44:28:17:42:2f:ad:69:1e:
                    bf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F5:DD:54:73:2F:AD:57:36:5D:4C:CB:8D:35:37:48:D4:C6:8C:36
            X509v3 Authority Key Identifier:
                keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:60:0d:5f:a9:59:3c:49:7f:c7:0c:fd:eb:8c:ba:11:7c:c1:
         a8:0f:57:b9:02:ce:43:83:fe:4c:00:22:40:50:37:20:ac:44:
         8a:ab:09:0d:85:e7:59:a9:31:1a:ad:c5:bb:b1:43:ce:0c:fb:
         ff:d3:db:59:e5:be:b2:ca:5c:74:ee:91:11:31:34:ba:29:39:
         d0:e5:51:d3:5b:8a:fe:b0:8d:27:35:05:98:f5:dc:cb:25:8b:
         7c:5e:63:cf:7c:59:d2:fd:fe:02:d2:53:aa:7e:cb:0d:9b:2f:
         b5:77:97:77:7b:32:ed:07:8d:7a:a5:3b:ac:bf:3a:a5:f1:33:
         57:bf:56:e7:99:c2:82:23:e8:10:ed:5b:91:4b:b1:85:fc:f0:
         63:2d:48:8f:e2:04:d1:03:de:97:17:e9:c5:28:d5:9b:89:30:
         14:c6:c2:8d:47:85:c8:e3:36:f2:5d:a3:68:e1:5f:3b:89:2d:
         98:43:ac:c6:5c:f6:08:94:2a:85:27:2e:e9:b5:4a:c5:e9:60:
         b7:13:73:c9:25:b9:88:c1:72:ee:72:4b:1d:87:32:4b:48:fa:
         43:7d:84:ef:46:ec:bf:68:5c:95:fd:3b:45:a3:d6:c4:e3:5c:
         26:8b:bf:79:72:aa:a0:3d:fd:73:b1:7d:1c:f8:f5:5e:f6:02:
         84:6e:04:a6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBigwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEFFNDRBRjExMC8GA1UEBRMoOEY1MDNCRDU3M0NFMTEzNTE3Q0Q2QjRDRkEzNzRB
NjJGMTVFMTJDMTAeFw0yNTA3MDMwMjE1MjhaFw0yNTA3MDUwMjE1MjhaMBgxFjAU
BgNVBAMTDTY4NjVlN2MxLTk3OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcMqBL251r79TpdQV7fqTq9Df3zrJBZW+TZcKiojqDrFsiNBuviJeILCLP
u8lH+q2KENd4JxUN9UrQevL7Of4noa4N69isOOw4lEbCAdeeJSIM1UBklRvoEAUP
G4DR/r+ATkMv9lrHhO+F42uJ/IKHcWWAdlPhWZS3f/4wVk6ee1YM5NWQ7GbMNr4e
fH91YMOWjcZ22T7UhaHAHyGZ6er5L+ubkiJFwC0b2KrC+jQe9SRS7EBw+vQywbvR
IZGSBo9H0x7hReuiZWmdcJnQBmVQHMs8Di3fPTa/KKvovryddDCgTarqpzyPX9Vl
QIr0X08EVNR1yQFEKBdCL61pHr8/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUp/Xd
VHMvrVc2XUzLjTU3SNTGjDYwHwYDVR0jBBgwFoAUj1A71XPOETUXzWtM+jdKYvFe
EsEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRBRTQ0LzIyMjcwRUZFQUY0NDExRUI4QzI1NzY4NkY4QUVBMjI4L2oxQTcx
WFBPRVRVWHpXdE0tamRLWXZGZUVzRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2oxQTcxWFBPRVRVWHpXdE0tamRLWXZGZUVzRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEFFNDQvMjIyNzBFRkVBRjQ0MTFFQjhDMjU3Njg2RjhB
RUEyMjgvajFBNzFYUE9FVFVYeld0TS1qZEtZdkZlRXNFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzYA1fqVk8SX/HDP3rjLoRfMGoD1e5
As5Dg/5MACJAUDcgrESKqwkNhedZqTEarcW7sUPODPv/09tZ5b6yylx07pERMTS6
KTnQ5VHTW4r+sI0nNQWY9dzLJYt8XmPPfFnS/f4C0lOqfssNmy+1d5d3ezLtB416
pTusvzql8TNXv1bnmcKCI+gQ7VuRS7GF/PBjLUiP4gTRA96XF+nFKNWbiTAUxsKN
R4XI4zbyXaNo4V87iS2YQ6zGXPYIlCqFJy7ptUrF6WC3E3PJJbmIwXLucksdhzJL
SPpDfYTvRuy/aFyV/TtFo9bE41wmi795cqqgPf1zsX0c+PVe9gKEbgSm
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:02:25 2025 by rpki-client