Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
File:                     JLXuZ0cVou7uiGTqX17kcyPPdmw.mft (raw, json)
Hash identifier:          dQoZMvi5SdrB2BlzzuoMkZOR3/MMkFS3i7nyAkYmR/8=
Subject key identifier:   6F:7A:FA:76:BA:4D:B7:E7:94:1B:E6:AC:2A:6D:EE:FB:C4:D3:FF:15
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       014B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
Manifest number:          0146
Signing time:             Thu 03 Jul 2025 04:48:42 +0000
Manifest this update:     Thu 03 Jul 2025 04:48:41 +0000
Manifest next update:     Sat 05 Jul 2025 04:48:41 +0000
Files and hashes:         1: JLXuZ0cVou7uiGTqX17kcyPPdmw.crl (hash: ziMdHpftiFao7wJri2yT+h+VItxvKrWQEw/1EbyNSKg=)
                          2: C8C3F9C2B0B511EF88E1CA4C762E951A.roa (hash: Mh36UH7NwuelUC3NMhOTPwUhu32iweIo8TXpZWT/LM0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 04:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Jul  3 04:48:41 2025 GMT
            Not After : Jul  5 04:48:41 2025 GMT
        Subject: CN=68660baa-febf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:0f:a0:0e:b5:70:99:13:50:0e:35:e7:42:
                    3d:1c:30:d8:dc:d7:63:12:83:96:08:21:d5:d8:fa:
                    60:23:4d:3f:50:4e:bf:ff:4e:1a:a2:00:d6:56:cd:
                    75:b7:9c:a8:2d:27:3d:dc:03:53:c9:3e:ec:ee:ec:
                    3a:51:12:c9:97:05:9f:1e:50:ad:b2:3a:5d:30:d4:
                    bc:cb:06:20:65:e8:45:5f:12:20:a8:fa:14:17:e5:
                    ab:66:01:66:70:d1:ed:5b:47:66:92:64:fb:0f:20:
                    5f:4d:22:14:9e:a9:27:96:37:b5:56:5d:66:da:b2:
                    6a:ee:67:9a:83:0d:1a:4d:ae:ca:fe:c2:b1:3d:ef:
                    3f:ba:8d:6a:fc:81:a9:c9:31:25:56:dd:45:27:48:
                    a7:ba:10:96:1c:45:1b:a9:c9:73:d9:f9:44:17:5f:
                    d5:6d:0e:6b:7f:5a:68:fa:8a:78:e2:45:20:68:79:
                    95:62:b9:45:c2:dc:fd:88:35:ce:e5:57:15:c1:b4:
                    ca:74:60:2d:2c:2a:d7:4f:95:a1:f6:37:14:ae:d4:
                    5a:77:42:0c:44:47:ae:b8:6b:b8:85:69:44:6d:b2:
                    f4:e8:ae:64:11:31:40:83:85:de:22:39:b3:f5:e7:
                    db:7e:e4:d3:25:66:c5:65:45:3a:41:34:c9:b1:01:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:FA:76:BA:4D:B7:E7:94:1B:E6:AC:2A:6D:EE:FB:C4:D3:FF:15
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ea:d1:ef:9c:8b:5b:37:2a:1a:e1:b7:66:71:44:f6:83:0c:
         28:a9:bc:76:18:0d:77:7d:eb:01:63:e3:e4:fe:82:6a:31:7e:
         ea:6d:64:99:0e:4b:d0:d5:08:94:22:65:7f:6a:2c:2a:b5:72:
         f5:f2:cb:c9:cd:1e:25:94:30:26:46:45:f2:34:6d:be:a4:9d:
         9c:28:b9:84:6d:5a:2d:9c:b0:02:7f:65:53:99:9d:30:da:5a:
         fb:d2:69:fa:48:45:f4:c9:22:e1:fb:4d:09:8e:d0:e8:4b:0f:
         c3:6a:44:25:ed:1b:c4:5f:a8:35:51:98:7a:1e:1c:e9:aa:79:
         e6:07:5c:7e:2b:3a:3c:2d:ca:e2:71:b6:d8:b0:4f:be:8f:04:
         c4:53:e4:a5:fd:32:6a:9d:d0:a2:82:f4:0e:56:0e:51:8f:be:
         6e:a8:6d:28:ab:60:0e:f3:a9:31:4f:f7:6d:c7:d1:5b:93:75:
         2f:bf:a8:1a:52:05:51:00:0c:f3:c7:bd:8f:59:ff:df:b2:95:
         2b:d8:4f:da:50:d1:a9:09:b2:60:57:ee:f3:14:66:98:03:5f:
         3a:da:b2:96:13:5b:75:9b:c7:8a:5b:b8:25:e7:52:a8:8d:cc:
         51:eb:9f:bf:4c:95:3f:44:cc:9d:e6:c3:d0:b8:23:07:64:13:
         47:f1:14:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:17:35 2025 by rpki-client