Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
File:                     OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft (raw, json)
Hash identifier:          4sPF+B/OdsZoS71qTiBnB5VjV4L2++5kwZYK977XQuk=
Subject key identifier:   98:88:58:71:9B:61:88:2B:09:E3:46:52:9C:2B:73:4D:60:19:89:05
Authority key identifier: 39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5
Certificate issuer:       /CN=F365E0EFAF/serialNumber=399D04F1168E65976D1AD6E8ECC5C01414781ED5
Certificate serial:       04CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
Manifest number:          04C8
Signing time:             Sat 23 Aug 2025 02:54:12 +0000
Manifest this update:     Sat 23 Aug 2025 02:54:11 +0000
Manifest next update:     Mon 25 Aug 2025 02:54:11 +0000
Files and hashes:         1: OZ0E8RaOZZdtGtbo7MXAFBR4HtU.crl (hash: dFm+maMJUIdBB61qwwkeFpC2AE0x+iW/eyo5LxFx3Zs=)
                          2: D763DBA871A111EF9436E86F762E951A.roa (hash: qropYAoqucax6ncLs9eruJFo9UBTM6S+IM1PViOJCTw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAF, serialNumber=399D04F1168E65976D1AD6E8ECC5C01414781ED5
        Validity
            Not Before: Aug 23 02:54:11 2025 GMT
            Not After : Aug 25 02:54:11 2025 GMT
        Subject: CN=68a92d54-d286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:05:6a:d7:5e:c4:b9:c4:8c:61:de:24:61:
                    f6:66:64:e8:3d:b1:5c:5e:7a:26:5a:94:16:57:ec:
                    67:48:0c:39:1b:81:35:37:5a:82:aa:2f:2a:55:da:
                    ca:0b:35:2b:40:10:22:ac:c4:9c:8c:3b:e3:5c:43:
                    2d:ef:67:a4:58:60:1d:7c:b6:b4:5f:c1:34:76:b8:
                    54:73:21:43:45:ed:75:91:51:25:5e:5c:35:73:5c:
                    c7:92:dd:40:03:b8:8a:af:d6:3d:e6:d9:e2:0b:a5:
                    ee:89:63:de:04:3c:40:8f:7c:5c:bc:17:51:4b:4e:
                    7e:9d:a8:4f:9b:63:83:d4:19:33:cb:53:2e:a6:7e:
                    f0:a8:80:d5:a5:c0:a8:dc:3b:c6:ed:eb:a3:ed:98:
                    1b:54:3e:ae:0d:8d:4e:68:b8:43:06:1e:02:b2:2e:
                    87:25:74:82:c7:07:76:e7:96:3d:67:e0:a1:5a:6a:
                    d3:a5:c1:21:be:2d:b3:78:03:88:9c:93:99:92:b7:
                    d9:69:cf:94:e8:e8:80:24:02:f6:0e:8b:13:e5:7f:
                    ec:45:9d:2d:5c:0f:08:d2:07:e8:b2:fa:fa:af:a5:
                    e2:01:31:80:46:88:b8:19:34:7f:3b:42:f0:f3:6d:
                    0c:17:c1:3a:4d:29:23:15:1f:06:fa:26:cd:b8:b8:
                    9e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:58:71:9B:61:88:2B:09:E3:46:52:9C:2B:73:4D:60:19:89:05
            X509v3 Authority Key Identifier:
                keyid:39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:00:ee:f8:06:a0:6e:c3:32:4e:a1:77:d8:f8:e6:37:78:f6:
         fd:dc:b7:f7:3d:16:a0:4e:31:58:49:15:a4:ba:7f:c6:f2:0c:
         c2:98:2b:22:bc:f0:74:dd:8e:c8:fa:68:4d:a6:c7:71:be:7b:
         b9:b8:0d:bc:ab:2f:8b:1c:c6:9b:61:25:b6:7d:45:b0:65:cd:
         11:47:95:bc:ea:23:66:45:fe:e7:3c:b2:e1:39:74:f3:60:df:
         f9:99:2a:34:49:cd:46:55:32:19:21:d8:62:cc:b0:94:02:21:
         98:e9:57:ce:eb:c7:8e:ca:07:9c:e1:05:5c:7a:3c:74:20:a5:
         1f:fe:97:42:bd:65:e4:14:0f:7f:21:91:02:8a:ff:dd:e4:d7:
         2c:05:c1:c1:28:ed:4f:62:5a:4d:73:35:38:83:67:b3:b5:ad:
         ea:ad:0c:a2:5d:90:7e:8b:e8:38:4b:66:25:90:41:16:89:c7:
         37:b5:d2:63:5d:5f:f9:22:f8:61:8b:0e:d5:82:d8:8c:b2:72:
         1b:3c:20:d9:90:ce:d7:90:6a:21:40:d0:89:61:b4:6c:16:0d:
         ce:a3:47:ea:3e:ba:c5:78:7b:08:a1:2c:0f:eb:14:7a:27:58:
         60:e1:cd:d4:12:c3:70:d6:de:53:cf:a8:61:61:ee:a8:46:96:
         92:5b:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:59 2025 by rpki-client