Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
File:                     hXm8J-c9eykQjr_zl_ts_VxrAkc.mft (raw, json)
Hash identifier:          nflR6cVax+YajHbpPvzAdD7yxxYdDmiwTMn2EXpBiCg=
Subject key identifier:   D2:14:B9:35:83:72:A8:28:6B:06:FB:64:76:32:6D:3E:09:01:96:AF
Authority key identifier: 85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47
Certificate issuer:       /CN=F3675292AF/serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
Certificate serial:       021E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
Manifest number:          0219
Signing time:             Mon 30 Jun 2025 04:21:27 +0000
Manifest this update:     Mon 30 Jun 2025 04:21:26 +0000
Manifest next update:     Wed 02 Jul 2025 04:21:26 +0000
Files and hashes:         1: hXm8J-c9eykQjr_zl_ts_VxrAkc.crl (hash: HeYQt73hnZEv6dq9gBsEDilQVbdWYDWXH74XFLnBk9Q=)
                          2: 0145205ABE9F11EEAB4694AB775412E6.roa (hash: nCtysz82HWpQKRVxjrkp1CPdrS4qO3BX0cqzzKNO/pQ=)
                          3: AC3D4D08BE9E11EEA64FBFAA775412E6.roa (hash: WfYokYZnTAkyut9ZfwPk7g8ZUxso2I/ndS+zQRque/A=)
                          4: 6CE0579ABE9E11EEBC7C69AA775412E6.roa (hash: kSDEs7oP+jey7M4wMBUDf1oTjGdLGimVQ2c+G5EoTkc=)
                          5: D3C327DABE9E11EE993106AB775412E6.roa (hash: JBKixCSDBI+8M+eUfX+NbM+TcRDwKlbGQLGKTvvPJkw=)
                          6: 8F2451D0BE9E11EEBA8196AA775412E6.roa (hash: 4AAd/b+kE9JKp63Wlhwua7XjTGFImGjuMiypLHiKkR8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 04:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675292AF, serialNumber=8579BC27E73D7B29108EBFF397FB6CFD5C6B0247
        Validity
            Not Before: Jun 30 04:21:26 2025 GMT
            Not After : Jul  2 04:21:26 2025 GMT
        Subject: CN=686210c7-7c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:66:53:d2:be:23:77:64:3f:5c:ae:d2:d7:
                    ab:95:94:80:66:aa:6d:f7:39:73:14:9f:78:6f:9a:
                    a2:02:72:53:e0:65:02:8e:97:c7:8d:e9:48:a9:84:
                    e1:be:5d:15:96:86:9e:08:92:1d:1d:eb:6b:cb:1c:
                    bb:7c:7f:a7:d7:cf:16:65:76:31:16:9c:1e:9c:93:
                    0e:bb:da:f5:49:e0:26:ca:cc:13:2d:1b:ed:ce:e1:
                    1f:2f:74:1c:ac:43:a6:8d:3e:b0:f8:fa:2b:0f:78:
                    b6:c7:36:ff:82:99:d9:0f:e5:f6:a9:45:48:8b:e4:
                    da:13:ef:b4:e7:f5:d1:ff:6e:01:e3:b0:ec:ce:25:
                    f5:bf:2f:c7:df:f5:35:1e:df:b1:07:96:fb:5f:6b:
                    33:b6:bb:c5:e1:f7:10:a6:ec:31:58:df:8f:0d:21:
                    c1:87:69:ff:a5:c5:bb:21:de:7f:86:fc:1a:a7:eb:
                    33:cc:e8:a4:a1:23:6d:e8:22:92:30:a1:76:63:6c:
                    b7:e9:45:15:8b:bd:8f:56:0d:d4:d3:15:1b:5d:f7:
                    96:d8:03:43:34:b8:81:f3:a6:12:c6:34:ed:af:21:
                    f6:b5:43:45:37:84:35:25:13:e0:92:2d:16:99:0a:
                    cd:98:4e:46:5f:73:c7:ca:a1:06:32:75:81:c6:32:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:14:B9:35:83:72:A8:28:6B:06:FB:64:76:32:6D:3E:09:01:96:AF
            X509v3 Authority Key Identifier:
                keyid:85:79:BC:27:E7:3D:7B:29:10:8E:BF:F3:97:FB:6C:FD:5C:6B:02:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hXm8J-c9eykQjr_zl_ts_VxrAkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675292/264D17FEBDDC11EEB41E414D775412E6/hXm8J-c9eykQjr_zl_ts_VxrAkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e1:89:a1:76:86:4e:1f:e0:85:28:f5:b9:6a:34:c4:82:7e:
         44:64:c3:3e:d1:e5:1d:6e:d3:30:d3:03:d1:f0:b9:4e:5d:72:
         f8:cc:55:25:8c:36:8c:64:fb:4a:ed:5a:0f:d9:8e:9d:1a:65:
         14:3a:c9:82:ba:17:c6:f2:96:6a:19:84:16:05:62:91:87:be:
         c6:2c:3e:de:2b:b2:20:40:b3:1b:89:6a:25:78:a0:aa:e3:d8:
         24:ce:7a:61:3a:aa:33:57:33:b9:59:48:ed:9f:b4:0f:3f:3b:
         1f:c3:7f:7b:35:c4:1b:7d:ae:97:45:bb:0c:86:41:df:92:98:
         d8:c6:1f:53:a7:8a:ec:2a:69:c1:4f:e2:90:2e:47:b9:9e:fb:
         33:22:23:38:86:28:77:9e:32:29:ec:55:8f:32:96:33:f3:b6:
         bd:b2:e5:00:1d:f8:ef:a7:d5:f5:58:aa:df:c1:6f:d7:2b:7f:
         16:39:c0:e5:f0:c3:b2:af:a5:ce:e2:6b:7d:b1:8b:8b:87:d3:
         51:08:4d:73:f6:85:56:81:fa:3e:4d:38:70:8c:69:84:f9:a8:
         e2:0a:a6:f0:20:b3:1a:d2:19:ba:da:5f:8d:64:2b:5c:0e:d5:
         9a:da:94:0d:4a:0e:a9:7a:42:4d:9c:49:dc:32:ca:d1:fc:84:
         9a:cd:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:37:08 2025 by rpki-client