Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
File:                     9HOLangCORiAdDf6GQfEytcpPvk.mft (raw, json)
Hash identifier:          UDIM7g1eXrCDRb5pTwwR4H11w6X9dGSLkkkR+nFI2kQ=
Subject key identifier:   D2:53:B7:86:9B:DF:7C:0C:C1:AA:EE:78:94:C3:E5:32:C6:C5:EA:0B
Authority key identifier: F4:73:8B:6A:78:02:39:18:80:74:37:FA:19:07:C4:CA:D7:29:3E:F9
Certificate issuer:       /CN=F3672E90AF/serialNumber=F4738B6A78023918807437FA1907C4CAD7293EF9
Certificate serial:       051C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9HOLangCORiAdDf6GQfEytcpPvk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
Manifest number:          051A
Signing time:             Wed 02 Jul 2025 02:46:09 +0000
Manifest this update:     Wed 02 Jul 2025 02:46:09 +0000
Manifest next update:     Fri 04 Jul 2025 02:46:09 +0000
Files and hashes:         1: 9HOLangCORiAdDf6GQfEytcpPvk.crl (hash: 7Rwtwfk9yYcKPBX4wrKjZ4q/OlinxXTwxy5axWWOCgY=)
                          2: 6A99DE584E7011F08BE3C38ADAE4EC9C.roa (hash: XsWgln8vG4e/xqc9ncPsPEMbepHsGpN9yBMj9MFLOwI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9HOLangCORiAdDf6GQfEytcpPvk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 11:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308 (0x51c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672E90AF, serialNumber=F4738B6A78023918807437FA1907C4CAD7293EF9
        Validity
            Not Before: Jul  2 02:46:09 2025 GMT
            Not After : Jul  4 02:46:09 2025 GMT
        Subject: CN=68649d71-edee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4c:68:4f:ad:8f:88:70:17:b9:24:6a:ed:3a:
                    2d:63:0c:c0:df:bc:d5:8f:35:9b:10:63:d9:bf:74:
                    de:5c:31:9d:18:31:eb:0f:01:f8:58:33:bf:0c:d1:
                    a4:bc:65:68:7a:a2:e8:f2:ca:2e:0b:c5:9c:db:78:
                    f7:f1:10:a4:0d:f6:28:53:72:2f:51:2c:79:8a:60:
                    33:fa:cd:d5:3a:24:ae:c5:85:a6:e6:8e:f2:89:4c:
                    6a:d1:62:b4:43:6b:64:ab:d7:88:30:97:c3:fd:ac:
                    d7:9b:b4:2a:5a:7e:da:f9:dc:dc:d5:e0:48:2e:eb:
                    86:4a:a3:e9:34:f3:d4:36:d8:58:3c:8e:76:8d:a9:
                    2d:27:2d:f4:4f:ac:d2:cc:dc:6b:49:a9:2a:b7:a8:
                    6b:c4:93:0a:7c:33:bd:04:84:26:60:be:db:69:98:
                    3a:20:4d:17:c2:9b:6f:ab:57:3f:53:a1:53:17:6c:
                    0e:54:84:21:30:4f:e3:67:a8:cd:83:66:9b:1e:b5:
                    1b:53:1e:16:be:de:87:b8:31:47:96:c1:ec:ae:06:
                    f9:f3:3b:74:be:9c:f9:09:56:fd:70:05:70:7b:ef:
                    0a:28:98:76:77:cd:0b:df:7e:84:20:e6:4d:49:01:
                    ad:e9:a9:f0:ac:a7:d6:a4:29:51:ce:62:82:28:c0:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:53:B7:86:9B:DF:7C:0C:C1:AA:EE:78:94:C3:E5:32:C6:C5:EA:0B
            X509v3 Authority Key Identifier:
                keyid:F4:73:8B:6A:78:02:39:18:80:74:37:FA:19:07:C4:CA:D7:29:3E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9HOLangCORiAdDf6GQfEytcpPvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ec:04:d5:1a:5c:a3:b7:80:82:96:2f:fa:55:d4:a9:59:6d:
         8b:3f:c7:1e:20:8f:f1:67:fc:53:4b:d6:3b:f3:39:e9:58:45:
         9f:83:10:02:48:57:b7:3a:bf:b7:9d:e4:5c:24:61:26:cb:e9:
         8e:36:48:e6:be:6f:42:d3:c0:b3:2a:8f:cf:45:fe:61:e0:e2:
         ca:e9:fe:e5:2e:a7:b0:9a:ec:25:ab:d5:aa:7a:fc:4c:84:35:
         6a:1b:d6:3a:59:cb:aa:af:4e:08:b8:c3:d4:f3:d6:b1:a7:cf:
         b7:9d:0c:46:e7:fe:68:aa:7a:0d:be:64:6f:00:5d:d9:53:58:
         6d:ab:8b:ae:e7:c5:69:10:09:33:b1:a5:93:5d:c6:e5:45:cb:
         a4:19:ce:a3:3d:d4:b3:93:dd:73:8b:77:bd:1c:12:b3:35:52:
         dc:42:b2:a2:b3:b0:d3:f5:13:da:99:73:ab:13:30:98:b2:50:
         5a:95:4b:46:9c:85:d8:2b:cd:d0:d2:56:45:8f:b8:47:f0:1e:
         f9:07:8f:93:3d:cf:da:fc:26:ef:c0:7e:99:2a:28:e9:5c:f7:
         c3:2d:c1:b7:f0:b4:f6:ca:01:fe:5c:2b:0c:21:72:2e:f0:86:
         c2:0e:49:5e:0a:d5:f7:de:06:74:15:0a:d0:cb:c1:7b:d2:b3:
         88:63:2f:a2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBRwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzJFOTBBRjExMC8GA1UEBRMoRjQ3MzhCNkE3ODAyMzkxODgwNzQzN0ZBMTkwN0M0
Q0FENzI5M0VGOTAeFw0yNTA3MDIwMjQ2MDlaFw0yNTA3MDQwMjQ2MDlaMBgxFjAU
BgNVBAMTDTY4NjQ5ZDcxLWVkZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjTGhPrY+IcBe5JGrtOi1jDMDfvNWPNZsQY9m/dN5cMZ0YMesPAfhYM78M
0aS8ZWh6oujyyi4LxZzbePfxEKQN9ihTci9RLHmKYDP6zdU6JK7FhabmjvKJTGrR
YrRDa2Sr14gwl8P9rNebtCpaftr53NzV4Egu64ZKo+k089Q22Fg8jnaNqS0nLfRP
rNLM3GtJqSq3qGvEkwp8M70EhCZgvttpmDogTRfCm2+rVz9ToVMXbA5UhCEwT+Nn
qM2DZpsetRtTHha+3oe4MUeWweyuBvnzO3S+nPkJVv1wBXB77woomHZ3zQvffoQg
5k1JAa3pqfCsp9akKVHOYoIowE4rAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0lO3
hpvffAzBqu54lMPlMsbF6gswHwYDVR0jBBgwFoAU9HOLangCORiAdDf6GQfEytcp
PvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcyRTkwL0Q3NzlDMDMyNzNBNTExRUNBNTc0Njk5ODVBNDBENTc3LzlIT0xh
bmdDT1JpQWREZjZHUWZFeXRjcFB2ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlIT0xhbmdDT1JpQWREZjZHUWZFeXRjcFB2ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzJFOTAvRDc3OUMwMzI3M0E1MTFFQ0E1NzQ2OTk4NUE0
MEQ1NzcvOUhPTGFuZ0NPUmlBZERmNkdRZkV5dGNwUHZrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAw7ATVGlyjt4CCli/6VdSpWW2LP8ce
II/xZ/xTS9Y78znpWEWfgxACSFe3Or+3neRcJGEmy+mONkjmvm9C08CzKo/PRf5h
4OLK6f7lLqewmuwlq9WqevxMhDVqG9Y6Wcuqr04IuMPU89axp8+3nQxG5/5oqnoN
vmRvAF3ZU1htq4uu58VpEAkzsaWTXcblRcukGc6jPdSzk91zi3e9HBKzNVLcQrKi
s7DT9RPamXOrEzCYslBalUtGnIXYK83Q0lZFj7hH8B75B4+TPc/a/CbvwH6ZKijp
XPfDLcG38LT2ygH+XCsMIXIu8IbCDkleCtX33gZ0FQrQy8F70rOIYy+i
-----END CERTIFICATE-----
Generated at Wed Jul 2 11:29:47 2025 by rpki-client