Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
File:                     1DoqVLLNNnZCx2hmihOEa4nsje8.mft (raw, json)
Hash identifier:          7Bx2IjaK8eqMthqpAmj182ZZISdOAfFDqxogfiHzG+c=
Subject key identifier:   ED:DB:AC:F1:7F:CE:B5:21:C0:26:CF:CD:43:1C:E0:03:CC:72:C5:FD
Authority key identifier: D4:3A:2A:54:B2:CD:36:76:42:C7:68:66:8A:13:84:6B:89:EC:8D:EF
Certificate issuer:       /CN=F364EAB0AF/serialNumber=D43A2A54B2CD367642C768668A13846B89EC8DEF
Certificate serial:       0165
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
Manifest number:          0163
Signing time:             Mon 30 Jun 2025 04:46:23 +0000
Manifest this update:     Mon 30 Jun 2025 04:46:22 +0000
Manifest next update:     Wed 02 Jul 2025 04:46:22 +0000
Files and hashes:         1: 1DoqVLLNNnZCx2hmihOEa4nsje8.crl (hash: cKbbgVFPmYO66buphkceV81eEwiz6PNhWMMNeVhXr8E=)
                          2: 7DA8929649D011EF8540F4B5762E951A.roa (hash: YovCsrPwXRshmsWk3A69TUGehERZxXiw2xy+oTe5v1Y=)
                          3: ECC95BD248EB11EF9E6AB0A8762E951A.roa (hash: oLh1HXERxgDkZE8Kx15N1v8Oh2muKtEvQ5qn9c925Ag=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 04:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364EAB0AF, serialNumber=D43A2A54B2CD367642C768668A13846B89EC8DEF
        Validity
            Not Before: Jun 30 04:46:22 2025 GMT
            Not After : Jul  2 04:46:22 2025 GMT
        Subject: CN=6862169f-de27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:f3:68:f8:24:59:7e:23:7c:4e:ea:6e:34:
                    9c:78:7e:66:fe:70:0b:d3:30:2b:5a:2a:55:35:d3:
                    d3:54:02:b9:f0:aa:61:2d:50:45:e3:48:03:a0:65:
                    22:4d:40:dd:a2:91:00:11:16:41:8d:70:3e:c9:22:
                    28:6c:17:bf:33:1b:2d:99:0f:05:8b:2f:f4:63:cb:
                    9b:d9:9e:50:a8:a2:c3:69:e0:56:44:f8:e6:6b:d2:
                    39:dd:8e:49:f3:c8:d1:fc:12:07:bb:4c:95:4c:0b:
                    2b:79:d9:ac:cb:25:78:83:fc:f9:e5:60:ca:40:2a:
                    c5:5a:6b:45:ef:0d:3b:10:3a:e7:76:c8:0d:74:5c:
                    df:ad:86:cb:dd:56:dc:82:16:d8:3a:92:c1:42:b4:
                    9e:a1:22:3c:9e:4c:53:82:3f:f5:18:16:22:ad:7d:
                    f8:73:df:5c:96:1d:c6:d1:f0:b4:61:fc:d8:ac:6b:
                    d5:7b:b6:88:a4:26:79:80:74:ff:53:fa:af:e1:c4:
                    f5:03:d4:ab:78:f0:12:0c:42:c4:4f:7e:d8:03:81:
                    af:3c:d2:46:df:d3:1f:85:99:5e:48:9b:53:07:be:
                    11:3e:35:a5:4e:b0:d3:1b:3c:f1:cd:ac:a9:5b:5d:
                    7b:5b:b9:4f:91:77:32:d7:c3:fe:f1:c2:59:23:0e:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DB:AC:F1:7F:CE:B5:21:C0:26:CF:CD:43:1C:E0:03:CC:72:C5:FD
            X509v3 Authority Key Identifier:
                keyid:D4:3A:2A:54:B2:CD:36:76:42:C7:68:66:8A:13:84:6B:89:EC:8D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:37:77:c4:ea:e8:ac:e3:6b:a8:23:15:17:28:ea:be:a8:3b:
         9d:0e:ce:9b:e7:98:00:f6:b8:4d:d1:e5:9f:f1:7e:2f:4d:72:
         39:57:2b:97:5b:1e:06:9a:ba:1b:45:c7:81:50:73:4c:e8:38:
         f7:9c:93:3f:91:99:2c:cd:2d:23:96:8d:d3:f2:34:18:98:81:
         36:04:49:ce:e6:11:53:76:f4:20:29:e6:b4:3a:53:a4:fd:22:
         80:5d:63:b8:42:59:9d:af:56:d1:29:ed:13:f3:5d:44:62:95:
         d4:9e:5d:f7:7b:7c:9a:fb:23:66:15:53:7b:1c:d8:b0:f4:8a:
         9d:d4:20:e9:81:9e:77:cc:c9:2f:6c:5a:e1:4c:27:62:98:d1:
         b7:70:a4:a7:35:ec:40:40:c3:1d:6c:b2:ca:1b:8e:c1:f5:e0:
         a7:00:a7:eb:d8:b2:08:ef:4c:b8:6c:1f:49:ac:c6:e1:28:ef:
         c3:6a:77:c5:09:d1:b0:74:6d:e6:31:a3:c1:7f:cb:fa:5f:6d:
         d6:2a:47:73:b7:13:62:b8:88:64:6a:5e:46:be:58:04:b7:40:
         eb:56:af:63:33:f3:6c:aa:ef:45:1c:a9:db:6d:e4:53:0c:d7:
         1c:e8:51:54:b3:9e:00:4f:67:0d:53:c0:dd:64:b5:be:d4:70:
         4b:99:ca:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:04:21 2025 by rpki-client