Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
File:                     xlOxWlDuQwH_JY2KKnwYY4PFDro.mft (raw, json)
Hash identifier:          D1RW84kHs4qsxhTgM/GUDJsz14bn5g2DnIGN/gtSV9E=
Subject key identifier:   3E:91:47:38:68:F7:F5:31:B6:5C:92:44:4C:DF:E1:C0:0B:19:46:29
Authority key identifier: C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA
Certificate issuer:       /CN=F367D68CAF/serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
Certificate serial:       0642
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
Manifest number:          0641
Signing time:             Sat 05 Jul 2025 02:12:08 +0000
Manifest this update:     Sat 05 Jul 2025 02:12:07 +0000
Manifest next update:     Mon 07 Jul 2025 02:12:07 +0000
Files and hashes:         1: xlOxWlDuQwH_JY2KKnwYY4PFDro.crl (hash: 8M/BqwDEphPUqLRcSk663fXIk12oa53CTvCXdRLHhXw=)
                          2: 69EE67B4920711EBA4D68A7DF8AEA228.roa (hash: PWOhXQJ0fibjAAccGAeAnloClqV+BwPlt2KmVpD849M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Jul 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D68CAF, serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
        Validity
            Not Before: Jul  5 02:12:07 2025 GMT
            Not After : Jul  7 02:12:07 2025 GMT
        Subject: CN=686889f8-05ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:f5:d1:73:6d:bc:11:b9:54:65:b1:3b:98:
                    18:3b:b0:a9:cb:77:d3:6c:bd:99:2d:54:36:51:c9:
                    73:56:d3:a4:a1:dc:eb:e3:08:8c:69:2f:66:26:c3:
                    20:95:f4:3c:db:90:73:90:e3:62:0d:21:b6:45:52:
                    9b:39:32:35:c5:61:a6:0f:82:e1:c4:d9:8c:91:2f:
                    8d:f4:5d:40:be:18:4a:99:60:b6:21:c8:e1:f8:c7:
                    dc:db:19:de:6c:30:6b:17:68:68:5e:58:85:8a:b3:
                    81:8d:68:de:aa:d7:4e:46:61:54:22:52:fa:0f:70:
                    9b:8b:ef:25:e6:3e:98:e1:b4:46:77:41:1d:5e:36:
                    b5:87:06:db:e4:dd:81:95:c9:b3:5d:c4:1d:de:51:
                    f8:86:47:f2:56:3f:7b:72:ff:bc:79:71:37:2a:c2:
                    6b:b0:68:ce:89:75:b9:97:b9:dd:bc:f4:d9:34:66:
                    6b:c1:47:d4:98:41:7c:9b:10:8a:41:72:44:74:4a:
                    47:5b:ef:8a:16:77:e3:9d:d2:33:2c:52:6a:51:3c:
                    9b:69:83:50:87:cf:74:1c:da:ca:39:45:e0:f0:fd:
                    ac:ad:7a:54:02:a5:53:be:86:75:e0:64:b0:23:c3:
                    6d:ac:fc:ca:09:df:0b:ae:51:d8:25:9d:b6:b2:7b:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:91:47:38:68:F7:F5:31:B6:5C:92:44:4C:DF:E1:C0:0B:19:46:29
            X509v3 Authority Key Identifier:
                keyid:C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6d:39:f8:84:b3:09:a3:a4:4e:45:9c:76:f2:f9:4e:24:f8:
         f1:00:5b:b1:de:0e:25:68:1c:59:8c:a2:d2:c0:d5:04:07:39:
         20:af:bb:70:da:d4:f6:a4:57:25:11:b5:af:e8:e5:e7:90:58:
         7d:77:f3:c2:3d:a9:02:ae:8c:f2:0a:8d:9d:93:85:9b:b7:f5:
         04:ae:c7:d2:f1:5b:02:0c:1b:a9:f6:5c:ef:2c:ad:b9:8f:28:
         54:30:32:bf:5b:76:11:d1:53:5f:bb:64:ff:d8:0f:ec:ae:36:
         79:7e:c8:cb:9e:0b:02:b2:7b:ef:9e:6e:0f:a8:3a:65:02:04:
         88:0f:e5:86:56:ef:06:04:21:80:48:61:80:c0:40:57:52:13:
         80:1a:1b:a9:8d:1b:5d:d0:4c:a4:c9:89:dd:9a:a4:56:4e:66:
         79:64:93:b7:9d:c5:68:e8:ab:90:7a:98:81:c0:2b:02:13:5c:
         7b:d8:1e:2e:42:bc:bb:29:03:76:33:80:ec:0b:e4:f9:37:9f:
         e1:ce:13:43:15:74:fe:4f:f0:82:bf:10:90:48:07:cc:46:21:
         fa:4e:d3:c8:78:5a:a0:de:32:ef:b3:35:5f:22:fc:51:b1:4f:
         a5:43:30:ae:15:3b:59:e9:82:0d:1a:6e:1b:41:d6:7a:3b:1f:
         21:43:c3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 07:45:17 2025 by rpki-client