Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File:                     XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier:          gIG/Ri4wpgsoDmlY4Rmz3Kgh04HGy0Mg13Zseopeiuk=
Subject key identifier:   72:5C:0E:13:63:75:8D:31:42:CC:C9:02:A9:2E:9D:0B:BE:76:5A:9A
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer:       /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial:       037C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number:          037A
Signing time:             Tue 13 May 2025 03:27:22 +0000
Manifest this update:     Tue 13 May 2025 03:27:21 +0000
Manifest next update:     Thu 15 May 2025 03:27:21 +0000
Files and hashes:         1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: 2cvoYdSWMziYdfB7r5j/qoDI3S4jFLEGyCzrSpKFMz0=)
                          2: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 May 2025 03:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892 (0x37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
        Validity
            Not Before: May 13 03:27:21 2025 GMT
            Not After : May 15 03:27:21 2025 GMT
        Subject: CN=6822bc19-7bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2f:db:a3:04:b3:eb:25:ae:6e:d5:4b:73:73:
                    8e:20:ab:a7:c2:7d:86:73:a5:75:8a:cf:19:4b:ee:
                    9b:cf:18:79:52:83:82:7d:f2:79:b1:6c:a4:db:de:
                    56:92:a0:e5:9c:88:60:52:78:1a:39:46:d8:67:64:
                    76:1d:5d:93:1d:c6:cb:f0:04:79:c2:a5:ad:dc:7d:
                    c7:ae:16:1e:ac:30:a0:e7:b7:ce:43:07:bb:b2:05:
                    9b:fb:77:95:cb:fc:68:78:71:11:4e:8a:69:b5:49:
                    e4:e0:d9:ed:17:55:53:27:b0:0c:d3:56:ce:a3:9a:
                    6c:48:ce:db:93:9d:cd:2a:65:d1:99:cc:16:c1:04:
                    39:8f:52:bc:be:2a:c5:a8:6d:40:58:2d:d5:90:14:
                    fe:65:79:70:6f:f6:e9:b7:50:6d:49:e0:1a:2b:e0:
                    ea:ef:b5:5c:50:21:c6:8a:e1:7d:b1:1e:7d:8d:a9:
                    7b:3e:2f:e6:37:bc:21:5f:8f:bc:b3:b6:e6:6d:cf:
                    8e:01:6d:09:f8:a7:72:88:ac:68:56:5d:0d:81:85:
                    87:4d:89:d5:25:94:de:df:ef:e5:a2:53:3a:52:71:
                    fe:85:fd:3c:d3:31:04:74:be:77:29:39:b7:66:d4:
                    ea:e9:78:da:3b:55:86:fb:e1:9e:07:64:fb:ae:b2:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5C:0E:13:63:75:8D:31:42:CC:C9:02:A9:2E:9D:0B:BE:76:5A:9A
            X509v3 Authority Key Identifier:
                keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:0a:c5:f0:cb:68:eb:40:7f:47:36:08:82:8b:9a:c4:99:85:
         08:9b:50:38:35:13:0b:e9:72:37:43:83:08:e5:b7:d1:88:74:
         08:2f:31:1e:10:05:1c:a2:5a:55:5c:74:3a:7a:41:f8:5d:9d:
         6c:f6:b2:ac:6b:1f:ed:4a:2f:cf:3d:bd:13:11:a5:3f:48:bf:
         b3:67:8e:c0:9f:78:05:2b:ab:c0:cf:dd:f5:83:3f:16:7e:4e:
         a2:59:c3:c4:0c:80:f8:a2:95:4f:1e:d2:b8:c8:59:0e:05:ca:
         38:4d:af:08:4d:99:1b:0d:76:d3:90:22:d5:43:b2:4d:65:f3:
         80:2a:b0:99:ed:97:62:06:08:da:b4:35:21:15:e5:66:e8:3d:
         b6:b7:4a:5b:1d:4a:80:7d:08:57:ea:57:b9:e5:cb:c7:42:3b:
         47:03:8d:e2:8c:89:dc:f2:74:df:80:08:ac:6f:60:d6:21:ed:
         22:f5:35:c6:b9:9d:4f:a9:a3:e3:5a:7e:bb:98:c2:51:ef:84:
         52:ae:19:ef:b9:fd:b3:86:8f:b2:82:93:ce:0e:09:f7:1f:48:
         18:0b:39:c4:ea:af:a7:b8:3c:61:4e:81:6f:97:d2:4e:3a:3e:
         77:f7:b7:88:b0:6b:b5:60:08:a0:21:55:f2:77:ad:5e:fe:62:
         95:5f:37:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:49:33 2025 by rpki-client