Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
File:                     LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft (raw, json)
Hash identifier:          cTaCYEqsr3P7AA1uLJ1oKWGVOxuEl8JrTSCD/k5OzNQ=
Subject key identifier:   51:2D:BD:9E:25:C0:2A:1C:DB:A0:1F:1D:F5:A8:D0:11:A0:17:CE:DA
Authority key identifier: 2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
Certificate issuer:       /CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
Certificate serial:       0379
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
Manifest number:          0378
Signing time:             Sat 05 Jul 2025 03:33:03 +0000
Manifest this update:     Sat 05 Jul 2025 03:33:02 +0000
Manifest next update:     Mon 07 Jul 2025 03:33:02 +0000
Files and hashes:         1: LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl (hash: Sc59esw1L1EuAQQtuxb0a2cpERQ4Wn0YyPHcqtwQgLg=)
                          2: 9AA2C8F4A72111EFAFB5507D762E951A.roa (hash: BkVr0GywD5ne77AbuN3SlJGoFofC7j3OIJUx5FhoLhs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Jul 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
        Validity
            Not Before: Jul  5 03:33:02 2025 GMT
            Not After : Jul  7 03:33:02 2025 GMT
        Subject: CN=68689cef-020b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:3f:5d:46:34:76:31:ec:78:3b:eb:07:a7:
                    e5:bf:eb:a3:86:8b:0c:95:50:ac:45:5e:cf:3c:94:
                    74:82:89:92:34:31:6c:45:87:d0:21:e8:44:79:f9:
                    07:8e:f8:f8:2b:c3:44:ae:81:43:fc:75:0f:a4:26:
                    66:e3:4d:df:df:24:6f:75:36:b9:73:53:3d:41:6c:
                    50:f1:7b:35:83:7e:0f:6e:d4:6e:ab:cf:fe:84:9c:
                    af:bc:78:e1:95:2b:f8:d3:59:58:7b:91:8d:6b:aa:
                    19:a6:a1:3b:ff:b8:56:e2:ab:cd:32:d4:90:86:91:
                    54:53:4d:1c:17:8b:72:9f:a9:c1:94:3d:e4:fb:c0:
                    e0:fa:30:95:e4:4e:9f:0e:98:75:bd:f5:bc:88:96:
                    81:d2:a0:44:c9:64:1a:50:5c:d4:28:62:c9:34:25:
                    7f:c7:c6:64:39:d9:09:5d:7f:7c:11:fc:3d:66:e4:
                    55:ef:e2:6a:85:b6:f3:3a:ba:cd:16:68:a2:10:1d:
                    67:4c:e9:f2:2a:7e:5b:82:38:9e:97:ba:2b:a3:d4:
                    19:9d:e5:f1:26:03:61:69:1e:9a:0f:bb:b0:c6:8e:
                    ea:78:a5:e7:f6:06:15:89:2c:b0:8a:81:55:69:57:
                    47:44:9d:de:7e:3c:46:44:30:00:e6:51:64:c5:ab:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:BD:9E:25:C0:2A:1C:DB:A0:1F:1D:F5:A8:D0:11:A0:17:CE:DA
            X509v3 Authority Key Identifier:
                keyid:2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:96:a9:d6:72:ec:d6:55:f4:9b:51:33:26:11:e8:50:43:cb:
         e3:1e:d6:2a:07:e6:af:1f:e2:7e:9d:e4:60:07:53:d1:98:85:
         11:ae:b8:a3:a2:5c:49:47:5e:7c:ae:c4:91:4e:0a:54:3b:2f:
         3d:90:6d:89:da:2b:00:ed:02:38:10:15:d3:a1:11:26:69:f4:
         68:53:4d:ba:83:5a:68:d3:38:fb:f4:5f:86:c4:d3:a8:dd:a4:
         90:19:ee:ca:0e:82:45:3c:7d:a7:a8:ef:ea:a6:39:8f:52:56:
         df:3c:2d:f8:72:fc:08:cf:4f:24:4b:b7:15:7c:78:f2:7a:6e:
         3b:2b:4a:3a:b5:ce:25:a8:db:dd:23:39:60:71:89:6c:c8:84:
         e2:f1:f0:cb:4b:02:f8:01:eb:20:08:12:91:8f:ae:c0:a9:63:
         25:9f:6e:69:41:75:58:4a:19:ac:8f:b6:3a:76:93:e4:83:51:
         0e:a7:84:71:e0:7b:d8:a5:7f:85:56:4b:64:0b:8e:74:4c:e5:
         bb:35:59:13:af:d3:63:bd:43:52:b2:14:59:cc:99:2b:5f:dd:
         cf:78:90:da:ac:cd:a2:f0:5d:c1:ab:08:3d:af:f3:a2:a0:b5:
         12:e9:8b:80:b5:9e:1e:33:01:f0:20:6e:de:cb:68:96:1e:72:
         2a:6a:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:03:34 2025 by rpki-client