Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
File:                     TwSz--IMFQm6-aos_oN2Xy6WnK4.mft (raw, json)
Hash identifier:          Ydmpdmgv5NV6t+FIUoEcxchYAVEtfluehpFRNcwo+nQ=
Subject key identifier:   9C:6A:6E:8C:7A:CC:C5:05:9D:93:C3:C2:FF:BF:0D:29:C9:73:61:FE
Authority key identifier: 4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE
Certificate issuer:       /CN=F368BE0BAF/serialNumber=4F04B3FBE20C1509BAF9AA2CFE83765F2E969CAE
Certificate serial:       012C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
Manifest number:          012B
Signing time:             Wed 02 Jul 2025 04:55:27 +0000
Manifest this update:     Wed 02 Jul 2025 04:55:26 +0000
Manifest next update:     Fri 04 Jul 2025 04:55:26 +0000
Files and hashes:         1: TwSz--IMFQm6-aos_oN2Xy6WnK4.crl (hash: 3Cpycw6/NrzGEwhUYARpGTVX6DV+MSuWQT2l3C+S9oo=)
                          2: 60B3D914750111EFA5E0E087762E951A.roa (hash: UtfppmUEN5RqKXCtw1VeKzrsyq6Tj8yeIDmUGAHWijE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 04:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BE0BAF, serialNumber=4F04B3FBE20C1509BAF9AA2CFE83765F2E969CAE
        Validity
            Not Before: Jul  2 04:55:26 2025 GMT
            Not After : Jul  4 04:55:26 2025 GMT
        Subject: CN=6864bbbf-c630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:9e:8f:29:05:0f:95:0f:91:3c:35:7e:af:
                    e5:15:99:5f:3b:b1:78:2b:ea:2c:33:dd:5d:6f:83:
                    8b:ec:82:f9:32:9b:e7:29:bc:4b:1f:d1:80:2c:54:
                    eb:48:7a:d6:1a:38:b8:14:b9:7b:94:e3:3c:e2:d6:
                    7b:4e:6e:e5:d9:e7:54:20:1c:fe:8d:50:b8:c6:cd:
                    11:3a:70:d4:0a:d7:14:d0:cb:10:5f:26:07:f8:ea:
                    63:69:2e:d5:3f:4f:da:c0:d7:20:c6:00:6f:e9:a1:
                    8d:1c:74:80:6a:3a:3b:24:9d:1a:8f:14:02:e7:7f:
                    04:ad:07:1d:a0:0d:ec:e2:76:b2:ca:0a:e6:e6:d1:
                    7c:1f:ba:3f:b2:26:8b:70:9d:4e:68:92:08:98:4f:
                    f3:33:e2:22:05:53:4b:18:99:05:bf:1c:18:ab:0e:
                    d9:b8:83:c3:21:9e:af:1b:1d:f6:a4:1c:b8:80:c9:
                    31:7c:5b:6c:f1:d9:6b:79:29:a6:5c:0a:6e:b0:8a:
                    96:00:a7:08:fe:a9:e3:bf:45:c1:fb:d0:f2:a9:3c:
                    97:fa:7d:cc:ad:de:aa:d5:73:6e:9b:2e:2d:ca:65:
                    6e:42:d1:44:6b:a3:f5:12:81:4d:74:c4:0d:01:ea:
                    bd:96:0d:e8:53:a3:47:cb:b0:6a:f1:ac:ef:32:28:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6A:6E:8C:7A:CC:C5:05:9D:93:C3:C2:FF:BF:0D:29:C9:73:61:FE
            X509v3 Authority Key Identifier:
                keyid:4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ae:f4:8e:6c:d0:ca:0f:36:1a:4a:d2:8f:fc:47:00:36:03:
         55:8b:49:ca:a4:72:f3:a7:e9:0b:b7:f9:d9:71:c4:72:f3:57:
         16:fe:ea:fe:9e:7a:04:39:9e:e5:7d:d6:f0:3d:7c:44:cc:b5:
         00:6c:2b:e1:a4:db:79:a0:0a:23:67:e0:c1:bb:e0:46:4f:34:
         c4:e1:c9:8e:3b:89:c7:1c:15:87:cf:3d:45:d7:ab:69:d6:10:
         a8:02:e3:0a:8a:22:68:a6:25:3e:70:72:0d:80:51:fd:cd:32:
         9d:c1:09:4a:a7:80:25:ba:d7:a7:1b:99:ef:d2:4e:2c:c9:d7:
         6a:a6:de:e9:c5:12:5d:06:f1:48:76:b6:0f:10:57:56:1d:4f:
         2c:d4:05:a4:71:c5:fd:3f:de:8e:3f:dd:6c:ba:1f:fb:ac:fe:
         ec:94:39:79:d3:fe:cb:33:fb:cb:68:85:d5:d3:ba:d0:71:14:
         6e:ac:a0:2c:ac:c2:04:0e:17:b2:2b:d3:a6:ce:88:8c:48:0b:
         e0:03:1a:dc:5e:ae:57:78:46:e6:d5:0b:52:4d:74:46:6b:f4:
         51:a0:df:cc:e6:b2:a8:8e:d7:d9:c0:4a:10:a5:51:70:15:43:
         ed:f0:69:b3:b2:0c:0d:a4:9d:43:df:0a:73:07:a4:f6:f6:97:
         eb:0c:f3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:19:42 2025 by rpki-client