Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
File:                     y4hYdSezg5FswLHYhmZTwzQx5F0.mft (raw, json)
Hash identifier:          4iUgEqz+xl0XyvMsVyZjsV0k2iexqv13RRC0JUQ3p8M=
Subject key identifier:   69:21:80:05:C4:50:F7:D2:0A:CC:88:21:2E:35:76:01:0A:FE:12:6F
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Certificate issuer:       /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial:       07A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
Manifest number:          07A0
Signing time:             Thu 03 Jul 2025 01:51:32 +0000
Manifest this update:     Thu 03 Jul 2025 01:51:31 +0000
Manifest next update:     Sat 05 Jul 2025 01:51:31 +0000
Files and hashes:         1: y4hYdSezg5FswLHYhmZTwzQx5F0.crl (hash: eQNEW2/7ccT8a+a4XnmZ/e0jvhCw9IxhuIWZIz9fSks=)
                          2: AE18FBD67CA911EEB6D3DD404AD9E6FC.roa (hash: EUXpIG95DQgNgpSPlS78r4ZPbIQJ7nP3j1DIht+45k0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 01:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1955 (0x7a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663CEEAF, serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
        Validity
            Not Before: Jul  3 01:51:31 2025 GMT
            Not After : Jul  5 01:51:31 2025 GMT
        Subject: CN=6865e224-525a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:50:bf:82:10:5c:43:cc:0d:d9:64:2b:a8:
                    ca:1f:ed:bb:09:52:69:9b:16:82:80:d8:2e:3e:55:
                    94:ea:8a:4f:92:91:d2:a3:dc:c8:b3:ba:f5:0b:8b:
                    af:6a:d4:6f:a1:89:67:a1:bc:30:83:eb:4f:8f:fd:
                    48:52:3b:da:b8:05:14:88:fe:cd:53:2b:85:9d:6c:
                    94:22:41:14:1d:f6:0c:05:b7:94:18:64:13:45:25:
                    99:c2:92:33:8a:7b:09:86:f9:cd:fb:b6:cb:2a:44:
                    a9:90:06:91:05:2d:71:c1:08:f2:30:7e:18:43:92:
                    8c:31:93:1e:3f:10:73:cb:52:9e:20:54:61:de:3b:
                    c8:a8:f5:70:2a:df:6f:8a:9a:3e:a7:e7:c2:78:d6:
                    95:07:97:53:56:0c:63:06:66:49:5a:0f:e1:9a:d2:
                    fe:e5:e7:97:6c:88:c5:b9:58:a1:b7:f3:fe:74:8e:
                    df:a2:13:c1:04:50:28:28:1a:15:4f:43:03:9a:6e:
                    2e:19:39:bb:af:55:35:81:7b:e4:c2:3f:54:62:ea:
                    6f:4c:9e:cf:82:50:81:d1:92:b2:fa:b5:4e:eb:3f:
                    8f:77:56:53:25:89:cc:af:01:c4:06:fe:cb:7a:34:
                    de:3a:7c:3a:88:30:b1:7e:e3:10:bd:c7:32:6d:94:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:21:80:05:C4:50:F7:D2:0A:CC:88:21:2E:35:76:01:0A:FE:12:6F
            X509v3 Authority Key Identifier:
                keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:95:08:bd:9d:88:6f:0e:d7:6b:6f:75:1a:56:ca:bc:ed:ff:
         e0:2e:8f:24:86:1d:1c:ed:7b:f3:0f:c7:6c:dc:f1:5e:c5:b8:
         94:ba:e6:3c:d6:e0:96:1a:69:39:f7:88:35:f5:a6:b0:e5:63:
         08:11:ed:54:96:67:d7:1a:ef:67:f1:9b:19:ed:d3:e7:3b:b7:
         ae:87:1c:6b:b3:8a:99:d7:c6:d8:4f:fa:9d:b7:50:9f:1a:0c:
         ad:ef:7e:8e:73:f0:ed:bf:fd:95:13:2c:5b:fb:f2:c2:bc:b4:
         7f:76:f1:2d:44:00:2d:35:17:5e:b2:c6:aa:0d:06:49:4f:70:
         ba:9d:61:51:ff:08:8a:bd:f9:8e:25:88:3c:21:2a:f9:61:70:
         e2:91:d1:78:2e:6a:d6:be:8c:bb:75:4e:90:43:c0:18:36:35:
         58:76:ce:eb:e1:ee:58:0b:61:93:be:97:ac:9f:7a:85:3e:90:
         2e:b7:92:2e:e6:51:f8:df:aa:1a:80:06:05:52:51:c5:92:11:
         d8:88:84:93:41:95:f9:b0:b0:27:3e:13:db:a9:54:db:85:9a:
         17:82:fb:d8:ac:1f:b0:54:30:12:ad:3a:b3:28:68:ba:e1:f8:
         ec:5e:52:0d:3c:79:d2:72:25:0e:ca:20:5f:25:ed:c8:2c:27:
         1e:cf:77:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:40:19 2025 by rpki-client