Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
File:                     i_LUycasChgyjdPrbLWQRBc3zug.mft (raw, json)
Hash identifier:          O8yFOxI1oFz0Es+DssZZlHVPXY10WB7FEcpIbPFHe+U=
Subject key identifier:   CB:F3:D9:A0:54:9E:6B:45:BF:2D:5D:5A:98:DA:76:14:8E:A7:75:5D
Authority key identifier: 8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8
Certificate issuer:       /CN=F369442EAF/serialNumber=8BF2D4C9C6AC0A18328DD3EB6CB590441737CEE8
Certificate serial:       06CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
Manifest number:          06CC
Signing time:             Fri 04 Jul 2025 02:03:46 +0000
Manifest this update:     Fri 04 Jul 2025 02:03:46 +0000
Manifest next update:     Sun 06 Jul 2025 02:03:46 +0000
Files and hashes:         1: i_LUycasChgyjdPrbLWQRBc3zug.crl (hash: RaVGFt9Uj1aS++4aH07Pe4lJ7VxPNLDLhVjmE+1YQTo=)
                          2: CA4847F0260111EBACE81C12F8AEA228.roa (hash: wvHb/Kw9w+IZBIpt5st+Xz0N4A4tUwQJ6TE8L7LFn7U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369442EAF, serialNumber=8BF2D4C9C6AC0A18328DD3EB6CB590441737CEE8
        Validity
            Not Before: Jul  4 02:03:46 2025 GMT
            Not After : Jul  6 02:03:46 2025 GMT
        Subject: CN=68673682-84ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:d7:07:d5:2d:e8:dd:0a:88:cb:6d:07:7c:
                    ac:94:c5:1a:d3:39:70:f0:ea:7b:7b:12:87:9a:6a:
                    8d:dd:f9:f6:10:95:b3:de:2f:5e:48:d8:7d:93:d8:
                    20:7e:2a:7f:b4:40:96:9a:db:da:ff:ea:7a:6e:87:
                    b0:86:31:8c:6a:12:bf:d2:82:f5:75:ba:bb:cc:b2:
                    ae:4b:f6:14:86:7b:c4:e8:ed:f5:c7:ca:92:72:7e:
                    8d:cb:54:dd:61:83:6c:66:f1:22:51:2e:36:55:73:
                    23:aa:41:db:04:f1:ea:7d:81:bc:d6:fc:48:17:02:
                    e3:17:f0:c2:35:e6:5d:49:94:a5:d2:05:a6:a5:1a:
                    27:b7:3a:32:8c:d5:21:1b:f1:52:c6:3d:df:d9:65:
                    1e:98:5b:1c:e9:67:df:25:52:c8:bb:47:f5:c3:91:
                    b7:13:b7:0b:4e:fe:f3:19:5f:1d:14:e5:74:fc:76:
                    5d:cd:72:78:30:d3:f6:06:25:05:28:c7:ee:18:ff:
                    56:c8:d2:08:5f:7c:03:92:6a:76:4d:da:6c:1c:86:
                    aa:51:70:ad:29:5f:a2:12:4c:7e:57:57:1c:c1:04:
                    9e:12:73:86:e1:68:d0:a6:1b:e2:05:de:78:37:97:
                    fb:0c:83:d4:f8:f2:62:28:3e:41:95:e9:22:c5:72:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F3:D9:A0:54:9E:6B:45:BF:2D:5D:5A:98:DA:76:14:8E:A7:75:5D
            X509v3 Authority Key Identifier:
                keyid:8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9e:86:a3:93:b3:60:d2:3b:2d:ce:b4:f6:8a:26:b5:5d:f1:
         11:95:45:7e:f4:14:f5:3a:30:8c:31:d0:dc:69:49:79:bd:e5:
         88:5d:f1:70:41:06:5b:c5:b7:ad:f9:a9:07:df:5a:c6:01:22:
         e5:93:9f:df:55:10:a5:e7:73:3b:7c:f2:05:37:df:12:e0:7f:
         33:d6:64:ac:73:29:52:b6:c9:24:5a:b3:35:18:49:3c:39:c6:
         a7:20:b4:a4:a0:29:e6:e4:7f:fd:e5:e5:d7:16:21:07:7c:03:
         9d:49:f6:1a:06:b9:82:9b:8c:b2:ae:8c:3e:ec:19:68:76:5b:
         a7:c3:93:00:8c:a2:65:ca:b6:b5:30:62:4e:11:33:78:1e:8a:
         19:b3:ea:31:09:05:62:f1:9e:e3:23:42:42:1b:2e:62:8f:10:
         5a:d3:98:8b:31:a7:53:2b:d2:fc:17:fe:6a:84:25:ce:8b:20:
         ec:7c:c9:36:f6:f7:b6:ef:ed:9f:9a:b4:9e:87:a5:4b:ab:f6:
         18:9e:5b:ad:2b:70:75:dc:99:33:87:04:43:fc:56:22:45:2f:
         78:ec:97:cd:d6:a5:16:8a:7d:91:72:0a:93:97:51:7b:ee:b6:
         b1:9f:66:00:2e:50:77:d2:cd:12:ff:8d:0a:3c:49:88:3e:d5:
         e8:ed:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:55:56 2025 by rpki-client