Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
File:                     RQb8pqpV74TTpMAErIOrtQvu07k.mft (raw, json)
Hash identifier:          Vq6jXDT4XHmIEd/wYLQ8QwZJzY9hVNna+Nrmul85XMg=
Subject key identifier:   E1:33:58:0D:9D:CD:22:B1:A7:54:D7:C2:5A:B3:19:AC:3C:FC:40:52
Authority key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
Certificate issuer:       /CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Certificate serial:       04E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
Manifest number:          04E8
Signing time:             Wed 02 Jul 2025 02:49:57 +0000
Manifest this update:     Wed 02 Jul 2025 02:49:56 +0000
Manifest next update:     Fri 04 Jul 2025 02:49:56 +0000
Files and hashes:         1: RQb8pqpV74TTpMAErIOrtQvu07k.crl (hash: EHH+zrYa3j1ukmOJEGkNk4mBgy2m2A+5mgN9DPz7wBw=)
                          2: 9DDD28FC9A3111EC8707D1B65A40D577.roa (hash: FZcB4QBBqx/jYH6PVYH2VRq/gBlCUQZrKAZfwhy/+S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 11:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AE0AF, serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
        Validity
            Not Before: Jul  2 02:49:56 2025 GMT
            Not After : Jul  4 02:49:56 2025 GMT
        Subject: CN=68649e55-154d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:f0:c2:92:54:1a:db:c4:22:6e:2a:24:7b:
                    81:88:b7:46:d3:19:91:fe:d3:de:21:c0:39:30:32:
                    c7:99:07:1b:99:87:ed:2d:ed:12:ea:c4:2b:07:f7:
                    15:29:49:b5:86:55:d1:0a:a1:c9:36:18:7f:a8:74:
                    79:bf:f3:f2:08:c2:90:bc:bd:f0:83:39:10:56:89:
                    70:0b:44:0c:aa:46:95:45:73:28:00:58:3d:45:34:
                    1e:70:a3:2f:72:b5:3f:01:f8:c4:d2:df:a1:1c:ce:
                    a9:90:27:2b:b3:38:59:2a:b5:a7:c9:bd:a1:fd:d1:
                    79:d6:65:0d:91:9f:29:b8:ae:b4:d3:98:fb:05:79:
                    9a:de:c8:6b:23:a8:18:a5:e1:32:0c:20:7c:6f:96:
                    62:a0:a5:cf:d4:38:29:ec:d3:df:86:e0:5f:9a:53:
                    08:57:e2:47:75:22:ba:69:df:4f:de:3f:ce:47:6b:
                    33:85:6e:6e:e5:63:e2:6c:e4:1b:ef:a3:0f:ae:4e:
                    07:55:70:4e:d7:60:a4:f5:0e:cc:1c:75:d7:d5:85:
                    fd:da:f1:03:a1:2c:1b:12:5c:59:11:8f:8a:d2:54:
                    ae:bd:4e:93:34:c9:4c:02:d7:b8:b1:a0:b8:8b:83:
                    1d:24:4f:7c:d2:b5:03:77:93:a1:37:bc:77:be:af:
                    d5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:33:58:0D:9D:CD:22:B1:A7:54:D7:C2:5A:B3:19:AC:3C:FC:40:52
            X509v3 Authority Key Identifier:
                keyid:45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:5b:0f:42:1d:f6:6c:7f:5c:25:06:15:2c:c5:13:86:c4:98:
         4a:c9:f7:1e:94:e4:9a:c4:78:9f:41:d4:a0:e1:7e:d6:26:52:
         e3:60:3c:ce:21:ba:80:76:0b:99:d8:65:8f:5a:3a:b4:8c:e1:
         d5:c9:14:41:d3:c4:ec:0f:1a:1d:f1:27:9a:67:7a:22:9c:49:
         25:24:38:4a:28:66:67:17:bf:bb:48:94:89:a4:1c:9e:5c:0b:
         a5:33:a1:cf:b9:c1:9c:68:58:bd:58:c6:8b:c1:0d:61:33:6c:
         1d:3e:37:a6:82:a5:01:f6:bf:54:89:b4:c8:26:c3:14:c8:61:
         6e:94:0a:fa:a5:1a:4a:2b:5a:b5:43:08:97:4c:c6:46:7f:88:
         24:81:cb:c2:95:f2:1d:13:71:93:bb:d8:56:06:0b:de:bf:b3:
         18:74:ac:88:c2:5e:81:e2:47:0c:d3:fc:0c:9b:24:99:26:f4:
         c5:a8:fb:38:bc:a6:0d:f6:09:28:7a:80:b1:45:98:5d:88:a6:
         02:e7:58:ca:24:85:4e:91:57:13:b3:00:68:f8:1a:3c:e1:6d:
         6f:f5:32:47:5f:d9:e2:50:d1:2e:33:82:6f:ab:4d:e3:3e:fe:
         9e:20:f0:19:76:84:24:80:05:6d:8c:8a:d7:49:56:44:3b:01:
         52:0f:b5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:28:09 2025 by rpki-client