Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
File:                     vM6G1hLUP4QasEFuxaiEBw9c5dY.mft (raw, json)
Hash identifier:          WNIz6+xq+DZpP2V/dRzzakZd2bAwdZx2qSCna+/XQxw=
Subject key identifier:   8B:69:EE:90:51:A6:CD:FC:71:34:4C:39:99:1B:12:42:63:9D:D4:D9
Authority key identifier: BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6
Certificate issuer:       /CN=F364C81DAF/serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
Certificate serial:       08FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
Manifest number:          08F5
Signing time:             Wed 02 Jul 2025 01:31:52 +0000
Manifest this update:     Wed 02 Jul 2025 01:31:52 +0000
Manifest next update:     Fri 04 Jul 2025 01:31:52 +0000
Files and hashes:         1: vM6G1hLUP4QasEFuxaiEBw9c5dY.crl (hash: +kH7w/PiHHVVHn2zdDaQOGy6Cj4tnObvhsO1vEgPdMo=)
                          2: 02F61C8EED4611EF9EE0C559762E951A.roa (hash: a0VBoAhb+w/AiTpkwDup0ND635i4uEH4NIMUxN2UJ2c=)
                          3: 929C94543E9A11EF81C02F58762E951A.roa (hash: kzZiAMvfqyV0gtRDj4Mv8x6FwuC+9RNVowjGfglAINY=)
                          4: D6A353C23E9A11EFB1A9DA58762E951A.roa (hash: zjYceRZMdmdc00axCHCL+H4eSNFidEdxSp7wrfGOu8g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 01:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C81DAF, serialNumber=BCCE86D612D43F841AB0416EC5A884070F5CE5D6
        Validity
            Not Before: Jul  2 01:31:52 2025 GMT
            Not After : Jul  4 01:31:52 2025 GMT
        Subject: CN=68648c08-86ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:6d:86:dd:a4:ce:50:a0:52:c0:80:64:f4:
                    10:3a:4d:9b:61:63:ca:41:88:2a:f4:65:49:f5:6b:
                    60:4c:37:e4:dd:5d:f6:b5:4a:3e:6b:1b:fe:07:4e:
                    e7:e1:bb:c3:db:08:64:f8:70:86:68:e8:5f:cc:62:
                    0d:54:36:a0:14:2b:ab:28:70:50:aa:07:43:86:0c:
                    62:22:19:db:5e:66:c0:32:29:84:85:dc:fc:cc:59:
                    ed:1c:4a:29:1c:75:53:de:50:ea:8c:64:17:92:10:
                    32:16:11:2b:28:cb:e1:e5:c8:e2:1a:ef:c5:01:19:
                    bb:95:fc:72:35:f1:27:ac:26:c5:f7:25:3e:55:72:
                    33:16:23:56:98:fe:93:1a:ec:77:be:6e:4a:f6:50:
                    3b:98:9b:90:a3:3d:9c:81:57:8b:64:b0:e3:24:c3:
                    6d:9c:18:ac:74:a3:17:0e:20:0c:dd:21:7d:4f:a2:
                    c6:28:f5:2f:0d:06:d0:f8:b9:97:39:f8:64:2d:f3:
                    8f:2c:b6:4f:17:33:28:c3:7a:77:c9:3f:1a:d0:ec:
                    44:70:8f:d0:fd:e4:12:c6:eb:55:8b:54:bd:cb:50:
                    b7:80:82:7d:b2:4e:58:ec:6d:db:75:bc:bb:18:c9:
                    b9:87:89:8a:0a:32:a5:01:26:e3:a4:1b:a9:56:87:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:69:EE:90:51:A6:CD:FC:71:34:4C:39:99:1B:12:42:63:9D:D4:D9
            X509v3 Authority Key Identifier:
                keyid:BC:CE:86:D6:12:D4:3F:84:1A:B0:41:6E:C5:A8:84:07:0F:5C:E5:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vM6G1hLUP4QasEFuxaiEBw9c5dY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/33794D2E890E11E99A72D162F8AEA228/vM6G1hLUP4QasEFuxaiEBw9c5dY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:be:77:17:a8:d2:76:ba:27:cc:f5:f0:69:5c:2e:4d:39:d9:
         53:dc:ea:59:22:64:e5:db:cc:6a:04:84:9a:53:f3:1a:5c:91:
         b6:8f:8d:a1:84:6d:7f:c3:07:c6:e1:ef:6f:43:77:69:0a:be:
         48:c7:05:e7:08:ba:35:1f:2c:8a:b5:65:43:98:b6:b2:b3:73:
         20:a3:91:23:fa:3c:56:5f:65:5a:ed:9f:8b:4d:62:f4:47:fe:
         e0:14:57:92:25:43:9c:4b:27:26:bf:11:51:ea:34:ed:8d:21:
         f2:ca:c7:34:9f:78:09:8b:1e:7a:29:0f:83:43:1f:60:92:6a:
         ee:aa:32:b0:33:b9:40:76:27:e5:02:d7:63:8e:a6:82:19:45:
         3b:a3:04:72:46:49:80:f2:b2:7c:72:fe:b9:fa:d2:6b:8b:46:
         cc:ad:ec:fe:69:77:c9:c9:f9:3b:17:b0:33:e9:65:28:00:00:
         07:77:70:2e:f4:a7:b0:05:41:77:d3:4d:bd:45:74:8c:25:3f:
         bb:53:a2:04:69:81:85:50:a5:75:e4:db:4e:80:c2:cc:06:51:
         78:8a:7b:6a:be:33:30:f6:f4:ef:da:4f:4b:f2:d6:7c:4f:4d:
         55:08:91:3d:44:f4:5b:11:f4:fd:e5:d3:96:ef:1e:d5:5a:d6:
         65:d5:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:34:51 2025 by rpki-client