Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          2eG7SG7rS54iPEs7uTd+wWFgAYdViJBG9DA+yD7awoQ=
Subject key identifier:   CB:08:54:4D:59:48:26:4E:CB:80:7F:01:72:26:59:4C:F0:12:50:64
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       01EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          01E8
Signing time:             Mon 30 Jun 2025 04:29:47 +0000
Manifest this update:     Mon 30 Jun 2025 04:29:47 +0000
Manifest next update:     Wed 02 Jul 2025 04:29:47 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: CXN+AWF4+MzCVqeCIiT1yuTS0awJ7gfCrkg2jOm6j9I=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 04:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Validity
            Not Before: Jun 30 04:29:47 2025 GMT
            Not After : Jul  2 04:29:47 2025 GMT
        Subject: CN=686212bb-0974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:4e:53:5d:bf:0d:a5:88:0f:65:11:a4:30:
                    71:46:ae:b2:7f:8f:11:4f:b0:99:85:fb:47:c8:31:
                    9a:b8:b1:61:9c:1c:9e:ab:05:a5:19:87:5e:2e:2d:
                    3d:e2:76:92:65:6a:66:98:03:19:a3:7f:96:5d:12:
                    7d:5e:b9:ea:72:d0:35:2f:2a:8c:db:8f:a5:d4:bb:
                    9b:8d:37:95:16:fe:06:62:e1:ef:9d:03:af:b3:82:
                    fb:dd:c2:41:d3:5b:2e:03:14:cc:77:e6:01:b8:ac:
                    02:7c:03:73:fb:53:78:1b:78:d4:90:79:f2:89:3f:
                    a5:0e:ac:41:46:aa:17:ae:c3:14:b6:66:88:f7:75:
                    1d:6e:18:0a:c9:28:82:b5:31:59:30:f2:84:06:0c:
                    9b:99:19:7c:62:e0:8d:9b:a6:be:6a:56:cf:25:4c:
                    45:e2:bd:a4:bf:86:37:b5:5a:4e:0d:e3:8f:1f:e5:
                    96:ff:0b:63:c4:0b:b7:a5:8d:fc:84:20:64:4b:bb:
                    7c:86:9d:4c:4a:48:ca:f1:52:6e:e7:df:59:b0:a4:
                    05:ff:ce:bd:70:e1:a7:2f:14:fc:3c:32:de:c7:f8:
                    c0:fe:b8:3d:dc:86:c0:38:ee:39:1e:88:51:ba:5a:
                    24:43:a4:e8:04:1e:3f:2d:2a:e6:21:56:fd:a3:af:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:08:54:4D:59:48:26:4E:CB:80:7F:01:72:26:59:4C:F0:12:50:64
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7f:3f:df:7d:ec:43:92:a8:e4:ea:73:b5:61:85:8a:f7:7f:
         49:9f:79:a0:2d:66:b4:f6:4e:f5:2f:d4:cf:70:b9:02:6d:72:
         41:b5:f4:b2:ec:93:97:a4:ec:5d:f3:ff:c1:51:7b:10:04:82:
         48:34:b1:10:54:64:40:a0:4b:8a:65:69:a7:da:e2:a5:b1:37:
         e6:1a:6c:1b:7b:c5:87:e9:0e:7d:c0:52:94:5b:93:d3:45:ed:
         ca:c2:06:0c:62:45:27:2c:da:0a:f0:6f:0f:e8:6e:51:24:09:
         52:f2:dd:92:f8:93:eb:12:53:b1:88:76:d0:44:93:24:be:4f:
         15:55:7c:84:f2:6a:29:d1:ed:f8:21:ea:ec:5d:84:c2:28:d1:
         41:f9:f5:ee:0d:7f:48:31:04:13:19:4c:ae:d3:7c:ac:e1:52:
         40:5c:a1:84:ce:1e:86:6f:a4:33:c2:1a:f9:ea:6f:f1:1f:5f:
         d0:ba:f1:af:0d:9f:76:13:8c:de:be:7c:50:08:53:dc:80:49:
         f6:8f:35:a1:29:67:10:f1:0e:e0:8e:b6:46:99:7c:5c:57:e5:
         ef:8a:06:d8:a4:ed:74:0a:5f:6a:49:97:61:cf:99:d5:fa:2e:
         2b:3f:3d:cd:50:e7:86:71:98:32:f8:c8:08:6e:32:c2:43:49:
         cd:63:bd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:45:53 2025 by rpki-client