Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.mft
File:                     q_pChsdioMCKr3ukYyEsmmY3wE4.mft (raw, json)
Hash identifier:          V+/s1GPijyj/adm3+AjNUgqjEdVFbZsS3an4Imcz/pQ=
Subject key identifier:   1D:11:D1:B6:C2:CC:D1:E2:EA:B9:5F:55:B3:A6:B1:64:C5:0B:D7:76
Authority key identifier: AB:FA:42:86:C7:62:A0:C0:8A:AF:7B:A4:63:21:2C:9A:66:37:C0:4E
Certificate issuer:       /CN=F368C55FAF/serialNumber=ABFA4286C762A0C08AAF7BA463212C9A6637C04E
Certificate serial:       1C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/q_pChsdioMCKr3ukYyEsmmY3wE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.mft
Manifest number:          1B
Signing time:             Mon 30 Jun 2025 05:25:02 +0000
Manifest this update:     Mon 30 Jun 2025 05:25:01 +0000
Manifest next update:     Wed 02 Jul 2025 05:25:01 +0000
Files and hashes:         1: q_pChsdioMCKr3ukYyEsmmY3wE4.crl (hash: qtRJSInV8LDcprJhER+nE+tPNrdoygm+H3jl03x5vdU=)
                          2: 3F755F0C437811F09C3F948DDAE4EC9C.roa (hash: X2EhS8z1wgEQ+6T/04a8A/gg1zUkJce6ytcXDk39BOQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/q_pChsdioMCKr3ukYyEsmmY3wE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 05:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368C55FAF, serialNumber=ABFA4286C762A0C08AAF7BA463212C9A6637C04E
        Validity
            Not Before: Jun 30 05:25:01 2025 GMT
            Not After : Jul  2 05:25:01 2025 GMT
        Subject: CN=68621fae-2896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:80:fb:ae:62:a7:85:50:2e:0b:10:4a:48:
                    e7:c8:fe:04:23:25:f9:41:e5:7b:c9:7f:b9:5e:4d:
                    84:56:28:36:56:86:58:05:a6:a6:da:2f:cf:ad:ba:
                    27:3c:2f:f0:f9:1c:4e:e5:ca:a0:b9:0f:1c:7d:f4:
                    5b:f6:d0:2e:07:b5:a3:e8:cd:76:9b:76:b0:63:56:
                    77:8a:f8:d2:00:9c:8a:8e:ba:2d:7a:b7:0e:b9:7a:
                    bb:7e:d2:d9:b8:5d:4a:06:1e:83:e6:3d:9e:37:15:
                    a5:e9:09:7e:c3:e1:28:8d:c7:1e:dc:e0:6b:b4:82:
                    27:df:bb:c7:6c:ea:21:05:e6:86:6e:89:24:b2:99:
                    25:73:2b:d2:13:f3:6a:90:d0:ff:43:ad:08:96:53:
                    b2:a2:eb:da:f8:c0:30:3e:4b:78:6d:cd:d6:9a:0e:
                    ea:ff:bf:fb:91:b4:14:42:83:2a:f9:7e:02:19:05:
                    98:14:b7:b0:6f:d3:13:ae:7f:bc:53:1c:49:88:93:
                    6e:03:f2:c5:b1:1a:b7:49:71:67:7c:55:1a:5b:0c:
                    48:47:89:87:25:02:09:92:8e:39:70:76:32:b4:38:
                    51:4c:cc:ad:a7:78:0c:e1:e2:b9:c2:25:58:a9:37:
                    c3:f0:f7:61:f1:3e:d7:10:07:20:87:bc:78:7b:16:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:11:D1:B6:C2:CC:D1:E2:EA:B9:5F:55:B3:A6:B1:64:C5:0B:D7:76
            X509v3 Authority Key Identifier:
                keyid:AB:FA:42:86:C7:62:A0:C0:8A:AF:7B:A4:63:21:2C:9A:66:37:C0:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q_pChsdioMCKr3ukYyEsmmY3wE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f8:50:e8:05:3b:2e:8f:5f:13:06:90:05:a9:ff:7d:d9:18:
         f4:5f:bf:b9:ab:cf:a7:a0:67:58:18:a9:db:49:34:e2:0f:a5:
         dd:44:b7:2c:52:1b:60:d0:09:dc:63:85:7d:e1:89:b1:63:7d:
         dc:98:c8:cf:2e:28:91:33:9f:f6:6a:25:1b:0c:f2:35:be:31:
         2e:6f:4d:b9:23:8e:0b:85:71:6b:27:dc:ee:ab:30:85:0e:33:
         07:7c:51:2b:63:05:be:81:76:16:3c:cb:e1:1a:f9:b2:4c:77:
         d2:d8:ae:d3:f0:29:df:dd:9a:99:0c:8c:7e:c3:d6:f6:63:f2:
         66:8d:94:6b:2c:01:3f:6c:d4:7c:fb:57:39:31:03:97:98:44:
         85:f6:b9:19:5d:3c:da:b3:f6:86:55:b3:d2:5b:74:72:f5:4e:
         f5:01:26:78:23:ff:7e:ca:b2:b8:53:d8:6d:33:c7:ca:82:7a:
         a4:0d:d7:68:d5:d6:e7:ca:79:56:56:bd:be:bd:fd:f5:60:2e:
         86:1a:cd:5a:9d:e9:6c:c7:70:f0:06:8e:02:2d:3a:59:bd:80:
         f7:6c:45:3b:dd:c0:cc:b6:4a:35:eb:00:70:1c:e6:36:13:04:
         6f:ce:a8:e4:77:30:32:27:03:4b:ad:2f:20:6d:3a:34:2b:c0:
         bf:b7:94:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:50:33 2025 by rpki-client