Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
File:                     kXMyk_xjUK7funWpFv_0G1Fez0w.mft (raw, json)
Hash identifier:          blU1GyNtQDV7uNLBkIhkGZqnrGyu1mrLD7fdTT1WofA=
Subject key identifier:   D4:70:E0:B7:0F:CE:AC:93:67:54:42:66:97:76:A2:38:68:D8:99:C9
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       058C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
Manifest number:          0589
Signing time:             Thu 03 Jul 2025 02:35:07 +0000
Manifest this update:     Thu 03 Jul 2025 02:35:07 +0000
Manifest next update:     Sat 05 Jul 2025 02:35:07 +0000
Files and hashes:         1: kXMyk_xjUK7funWpFv_0G1Fez0w.crl (hash: NQZ2er8MohRcoXKSNDEy1BLauGisWMBVSfNqse/AT3U=)
                          2: 951EA1701F7811ECB1D1961AD8A014CE.roa (hash: 1vZMKT9K0+T6pwn8OE0g59G7GIGSdRRo7NEdcXkRfVc=)
                          3: 7EE185A6B21611EFA9BDF294762E951A.roa (hash: G6244Azl/uqe8/mj3zsQM21nztQl1zF4+5qvnRVhw/Q=)
                          4: E739D1BE1F7811ECBE14071BD8A014CE.roa (hash: XvzpJAf5CAfqUsf2t3F2RGOpHSqxkl68xqf6tTZaymg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 02:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
        Validity
            Not Before: Jul  3 02:35:07 2025 GMT
            Not After : Jul  5 02:35:07 2025 GMT
        Subject: CN=6865ec5b-c5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:77:36:60:af:67:8e:0d:e4:14:23:46:23:
                    26:9a:71:da:77:b4:a3:16:6f:46:c6:0e:3f:19:42:
                    8e:61:bb:e3:31:65:32:a6:a7:49:ed:f2:43:01:1a:
                    e4:e5:ae:4c:34:45:5d:ef:5d:e5:21:e3:56:9c:20:
                    e5:74:a8:58:53:d1:af:9a:25:d2:32:b9:5d:d4:bd:
                    59:aa:57:e7:5b:67:6a:bf:35:ee:be:66:b0:21:16:
                    70:14:c6:7f:88:ae:1e:eb:5e:b0:da:ed:f1:7e:2d:
                    f5:95:06:71:8b:12:2c:16:98:cc:2d:7d:22:24:89:
                    86:ed:ed:42:97:47:bb:a6:aa:39:f9:de:c6:f6:02:
                    44:3c:a2:03:85:1e:61:96:ab:97:58:57:4e:77:0d:
                    a1:cb:a2:c3:ab:8c:f2:6b:8c:f5:25:6e:b3:08:e9:
                    0a:10:f8:76:d7:4a:d3:0e:29:c1:d4:06:e6:f9:c9:
                    c9:64:77:aa:51:e2:0f:74:4c:3f:97:34:6b:0d:e3:
                    2b:a6:87:d5:25:75:7b:30:da:de:a7:f0:0f:bd:31:
                    c3:d6:06:b9:ca:29:f2:86:cf:98:6b:bc:4a:52:c7:
                    38:dc:2c:2e:18:e2:7e:cb:e3:88:fd:2a:24:6f:95:
                    90:e7:b3:96:20:e8:34:33:ce:b0:40:77:1a:d5:bd:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:70:E0:B7:0F:CE:AC:93:67:54:42:66:97:76:A2:38:68:D8:99:C9
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:ae:43:4a:79:9f:ff:d8:1d:f5:be:2b:05:c7:ae:71:bc:0b:
         3d:46:17:2e:c8:02:d9:3e:3c:7e:5d:f1:0a:19:39:49:35:13:
         04:fa:86:79:10:99:a6:53:50:e0:96:08:9f:95:a8:6d:9e:40:
         b7:f6:d8:91:4c:cd:be:2f:9d:60:7e:ca:40:b6:fc:25:0a:9e:
         59:9f:3c:ea:e8:ec:82:2b:d4:9d:1f:2a:fc:5f:ac:0c:72:75:
         bc:78:4b:ca:ff:52:ea:3a:b1:cd:bf:8b:ee:fa:20:5a:a6:e5:
         24:cf:54:f4:82:b3:d6:fc:ca:ac:df:0a:14:9f:ab:98:bd:74:
         06:4d:8f:d2:7f:b6:ff:ad:26:fe:86:ad:7e:8c:13:dc:d4:e4:
         ba:48:96:97:17:92:a6:31:cf:b4:52:22:86:48:9e:9a:b2:1d:
         19:8f:5b:08:7a:c5:53:11:73:93:3b:11:54:e4:45:00:9b:9d:
         c8:16:0f:f5:3e:3e:aa:28:f9:e8:29:3f:a0:cd:63:97:f7:32:
         f0:8b:1d:d4:4a:a8:a1:07:29:01:c9:97:bd:85:37:f5:d7:21:
         fe:dc:05:f8:a0:55:f6:7b:9c:a6:19:2b:72:d1:25:a7:68:ce:
         e6:66:5f:7f:2b:ad:d3:d3:b7:e4:24:32:90:0f:52:50:d6:d6:
         4c:91:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:31:00 2025 by rpki-client