Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
File:                     SGm5dfSdmA_lFc7dSaDEDruBrKI.mft (raw, json)
Hash identifier:          +2nPo6tIOAMwqI3wxnxTt0x52TpdRS8OrKftdI4WKzk=
Subject key identifier:   7D:EE:E7:D1:56:4E:CB:01:52:DC:0D:06:4E:82:FB:E9:CC:E3:B3:4D
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Certificate issuer:       /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial:       03B3
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
Manifest number:          03B1
Signing time:             Fri 04 Jul 2025 03:24:12 +0000
Manifest this update:     Fri 04 Jul 2025 03:24:11 +0000
Manifest next update:     Sun 06 Jul 2025 03:24:11 +0000
Files and hashes:         1: SGm5dfSdmA_lFc7dSaDEDruBrKI.crl (hash: FKV4t11JB5hZvP+yCeXakf9DtkdbVYEMEiST2fbEiyw=)
                          2: D17F6EEC902411ED9E7767D2F1222468.roa (hash: JO/7laMxt+UsHBnYsLId8OjP3XjZJzj6vEh7zTGEoAg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                          rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947 (0x3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
        Validity
            Not Before: Jul  4 03:24:11 2025 GMT
            Not After : Jul  6 03:24:11 2025 GMT
        Subject: CN=6867495c-cc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e3:91:a5:3a:3d:c2:bf:34:13:93:eb:f3:37:
                    b2:11:1f:82:9c:40:4b:76:1c:0e:71:33:bf:ca:36:
                    dd:4d:86:a7:6c:a8:68:df:71:77:6a:4e:b9:21:e4:
                    76:93:7d:ef:88:95:ad:c6:42:ae:9f:70:e5:2a:9f:
                    84:dd:69:b6:56:d0:48:18:ac:93:bf:bf:b8:72:e5:
                    72:e3:26:f6:95:3a:b5:b5:62:65:a6:ed:41:14:4b:
                    65:71:64:1a:53:d8:7d:9a:d1:3e:e3:e3:8b:4b:3e:
                    1c:3f:20:a1:1b:63:34:da:32:83:86:31:f0:9e:63:
                    9e:40:28:f1:30:31:a6:84:37:df:b6:6a:d1:2d:1b:
                    7d:df:9c:26:14:81:42:f0:44:9a:b0:e1:8f:a1:ae:
                    0c:07:db:18:1f:af:cf:de:6c:fb:1b:68:c0:d9:0b:
                    1a:ae:19:9e:aa:f8:9b:e1:d0:af:14:88:a5:58:ec:
                    92:75:46:14:9e:c1:7d:fc:f2:d1:5b:13:fb:dd:aa:
                    46:a0:b9:31:1d:e7:c3:58:2d:fb:a9:25:fd:55:f9:
                    9b:b5:c2:71:1e:f6:cf:ca:20:9c:87:17:14:6c:75:
                    bd:ec:e9:8b:9d:df:29:01:3f:a9:9c:43:14:e1:a3:
                    e5:19:8d:88:fc:bf:48:f6:cd:13:5d:04:26:87:87:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EE:E7:D1:56:4E:CB:01:52:DC:0D:06:4E:82:FB:E9:CC:E3:B3:4D
            X509v3 Authority Key Identifier:
                keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0e:f0:c1:6a:1b:d7:96:f7:91:17:c7:a3:c4:2b:32:46:fc:
         c1:0c:01:9c:36:96:95:33:16:d0:16:c0:55:40:59:d2:a5:28:
         85:4a:bd:06:87:d1:31:8c:26:0d:dd:82:28:47:49:46:8f:05:
         b7:48:fa:8f:b0:be:86:4e:17:0b:49:ea:e3:2d:1a:8b:d4:45:
         b5:61:28:f0:67:83:65:b1:8c:01:d6:74:9f:ab:2b:53:fa:5a:
         41:b5:2c:52:b7:be:62:66:8c:0a:3a:cd:12:b0:3c:6a:08:d5:
         05:f7:2c:a6:70:0d:7b:05:78:5f:2f:12:62:5b:d1:8c:a7:32:
         93:d0:0f:a6:b7:8b:4d:16:c0:84:30:d7:8b:2a:87:89:ee:d2:
         e6:62:87:66:d6:43:d2:e2:a0:84:52:a0:9e:20:d9:73:71:56:
         a9:e9:a3:51:32:ca:3b:12:4e:5f:9f:a4:4d:40:30:8e:d2:2b:
         e4:42:4d:1e:fc:71:c4:8e:11:e5:fa:ce:01:b2:41:8f:23:0f:
         9b:7f:04:85:18:bb:74:72:eb:27:53:06:03:94:3d:54:87:38:
         98:90:a0:1d:8a:da:44:6e:ba:73:74:4f:a8:9a:84:04:c5:5a:
         46:04:e5:f9:69:18:49:7b:dd:70:06:4e:21:c2:86:db:5f:56:
         9d:d6:a5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:16:52 2025 by rpki-client