Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File:                     XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier:          VXAKPNnjyFdUx2s2Va5QAPPO/KEhTQVa0X5oEcLcP+M=
Subject key identifier:   D3:2C:B3:DF:AC:19:8B:A4:F0:00:F1:97:79:14:A1:FB:C4:C2:7C:4F
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer:       /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial:       086F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number:          0863
Signing time:             Mon 05 May 2025 01:39:23 +0000
Manifest this update:     Mon 05 May 2025 01:39:23 +0000
Manifest next update:     Wed 07 May 2025 01:39:23 +0000
Files and hashes:         1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: JPI3ioB6aIqUgFO5MkWqaXyrEHnltqZk+GCJ8OWnULw=)
                          2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
                          3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
                          4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
                          5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
                          6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
                          7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
                          8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 01:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159 (0x86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
        Validity
            Not Before: May  5 01:39:23 2025 GMT
            Not After : May  7 01:39:23 2025 GMT
        Subject: CN=681816cb-7138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:62:29:e6:d7:7b:4a:80:48:81:38:43:4b:
                    2b:7a:a0:08:96:e8:a3:9e:42:95:b4:e8:cc:75:99:
                    6c:e1:ce:e1:4c:a3:2e:bd:29:17:3d:fd:b1:67:af:
                    33:6c:ca:ca:cc:66:ae:ba:e7:8f:9f:e0:9d:59:6d:
                    3f:66:9b:4e:81:7f:e5:b0:a4:d7:e1:34:f9:e4:d0:
                    08:7e:80:93:38:9c:58:f7:52:9e:e2:3c:0d:b4:87:
                    60:e3:67:b5:be:ac:15:90:7e:4e:af:5b:65:11:17:
                    b7:08:69:ed:8c:75:2f:c0:c0:c1:b9:fe:8e:71:20:
                    db:c7:52:11:53:03:a5:bd:6d:2e:d9:aa:ff:63:b0:
                    8e:16:fa:b4:4f:71:66:a7:1e:d8:62:9b:a6:4a:00:
                    b1:38:4b:be:da:a8:d2:c1:cc:2e:fe:5c:6a:c8:c0:
                    b2:79:88:c8:e5:28:bd:d7:b8:56:fe:80:38:09:d8:
                    ba:21:38:e9:53:4a:ac:e7:17:45:98:dc:54:7b:0d:
                    ca:0a:b5:68:7a:fe:ef:c8:16:37:12:18:89:81:0a:
                    d3:87:61:cd:9c:7b:24:f8:29:d7:43:a9:23:65:36:
                    84:3a:a0:42:3c:db:61:85:59:6b:5e:5b:f7:8e:28:
                    86:99:c9:99:91:15:16:15:2b:8a:94:02:bf:45:d9:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:B3:DF:AC:19:8B:A4:F0:00:F1:97:79:14:A1:FB:C4:C2:7C:4F
            X509v3 Authority Key Identifier:
                keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8a:45:60:b3:4b:04:2d:2c:85:d9:40:f1:af:8d:49:d6:8c:
         b8:ac:c5:ea:d3:1b:d2:58:a1:12:76:e7:97:9e:74:68:ea:e9:
         9b:b4:6c:7c:a5:56:f4:f8:03:c7:e6:68:d4:d3:d1:77:46:1b:
         bb:42:bf:8e:2b:82:eb:5c:3d:9b:c5:8d:c6:6e:28:0b:8b:8d:
         7f:c5:d5:e2:0e:b3:b5:b0:ed:d8:bd:64:94:08:c5:76:ca:8e:
         8b:75:8c:49:ee:3b:61:5f:2a:e1:48:67:ed:3c:9c:ca:1a:10:
         4b:82:27:9e:4e:da:44:51:03:f9:01:ae:40:bb:39:26:b5:6f:
         b1:95:7c:2d:0e:eb:41:17:30:de:0a:27:58:89:49:0b:bc:3b:
         1a:30:13:4c:9b:46:99:fa:d5:2f:14:e2:1e:d8:42:7d:06:b9:
         f7:22:9a:22:92:af:6a:05:36:7d:0e:37:29:ff:2a:80:a1:72:
         ed:f7:fb:7d:7d:b5:e8:d0:76:5d:4c:83:df:cf:f9:4f:db:c0:
         28:bd:e8:c8:a6:7b:6d:d7:49:ed:d0:3e:a2:e2:81:91:b0:95:
         87:74:55:62:84:72:02:a2:a0:5a:4d:bc:9c:a2:6e:7e:eb:f0:
         ff:f1:44:f7:7a:01:5d:50:d5:22:06:d9:75:9d:25:53:c2:22:
         ba:76:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:02:31 2025 by rpki-client