Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
File:                     I78EX4uOm-g4553TEsyV7LjMYQs.mft (raw, json)
Hash identifier:          xPref3U9GJp+9fizRzSRCpzgA4y0ou3LVSOjfoFFbJQ=
Subject key identifier:   BF:9E:1B:65:9F:8D:1D:67:DA:C7:B2:C2:92:D7:DF:4A:32:D3:12:E7
Authority key identifier: 23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
Certificate issuer:       /CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Certificate serial:       0919
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
Manifest number:          090B
Signing time:             Tue 01 Jul 2025 01:25:47 +0000
Manifest this update:     Tue 01 Jul 2025 01:25:46 +0000
Manifest next update:     Thu 03 Jul 2025 01:25:46 +0000
Files and hashes:         1: I78EX4uOm-g4553TEsyV7LjMYQs.crl (hash: /xsonEtus+8MN96tjA+nVC26YKZuiXHrFRClihrTsy0=)
                          2: E0AED0C023E811EF9BBAC6FC7CDC24C2.roa (hash: iuXA2clKKN5IZryEGcnlHcWmmUdsp1OKN5dda7PrN1E=)
                          3: C16E6C76800111ECA185F1CE5A40D577.roa (hash: UWu2+KyBdfbVxloILheOAfGMR6u105H4ohFmI54Kn8M=)
                          4: F4DB8EC21A7711EBA6C83114F8AEA228.roa (hash: HOWUHYgIp9NjG+v0etjGnf7fCHuL5VvSq3InUm8ztJs=)
                          5: 18B4BBA0F47F11EDA5C6BB1F4AD9E6FC.roa (hash: iDaSXL8GvSL3wsz+WOCDWrs8l092ib+Jl/G3Copfih4=)
                          6: 372EFCA0A25A11EFAAD33E6C762E951A.roa (hash: jXcMwEZ6x+PNlXsc2vxqRd61fU6PmUJ6NzBab4lercs=)
                          7: 9733E512800111EC9CF061CE5A40D577.roa (hash: 7aNJhpbTziBeolDWt7IVZWfYO33jTKfJsXRXn6F4rZU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 01:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369671EAF, serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
        Validity
            Not Before: Jul  1 01:25:46 2025 GMT
            Not After : Jul  3 01:25:46 2025 GMT
        Subject: CN=6863391a-dc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:fc:2a:61:26:45:41:4a:06:9b:57:8d:bd:
                    e6:54:67:dd:ff:1c:f4:81:08:fe:04:cf:8d:aa:9f:
                    62:15:f6:80:78:e2:54:bc:53:8c:77:6c:32:cf:43:
                    89:9c:e5:b6:5b:19:7c:b7:a0:ea:b8:7f:60:7f:fd:
                    3f:b4:ee:74:bb:cb:77:6c:f3:75:24:a6:fe:5d:9b:
                    68:18:e0:97:27:76:99:1c:84:55:6e:98:a5:15:ae:
                    71:3d:b3:d0:ed:9d:90:5a:76:1c:73:d8:53:12:d5:
                    91:cb:2a:cf:7d:a5:06:75:61:f7:b5:32:05:96:c3:
                    d5:97:e5:ef:26:20:60:b1:89:07:b5:e2:d2:1f:a7:
                    44:1c:e9:3b:93:cd:79:df:fa:99:f7:6d:01:70:7d:
                    39:f0:e6:b9:64:c7:29:de:d7:2d:20:fa:07:f0:e8:
                    22:b3:1a:cb:41:0d:da:b3:64:ef:26:5f:79:7b:42:
                    3c:35:38:27:4d:6e:a3:f1:73:cb:e9:f5:66:2e:90:
                    16:70:78:33:ee:d8:e3:a1:2a:eb:4a:f7:a8:b2:62:
                    66:3b:24:46:8b:68:9d:aa:e5:dc:24:93:b5:a5:3b:
                    51:42:16:99:d4:8a:71:90:ca:de:2b:c0:c6:ec:1c:
                    57:de:77:ff:c3:7c:c9:43:31:43:f5:ec:70:4c:55:
                    30:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9E:1B:65:9F:8D:1D:67:DA:C7:B2:C2:92:D7:DF:4A:32:D3:12:E7
            X509v3 Authority Key Identifier:
                keyid:23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:54:cf:ab:89:72:47:0b:ef:b7:4b:62:d9:0c:34:cd:da:98:
         46:bb:83:8a:b2:83:67:34:49:2d:43:a0:c1:ae:12:d7:07:83:
         72:fe:97:30:28:08:20:1a:48:ce:42:89:20:e2:22:0b:90:3f:
         b1:4b:80:2f:91:a4:c8:b6:42:c9:15:ad:f8:b9:f3:7b:67:ac:
         94:f8:d9:ad:7d:c7:2f:95:44:8a:e1:e8:16:cb:72:a1:13:40:
         8c:d9:4b:e6:25:3b:50:3c:a5:71:58:ae:df:ee:7a:e6:2e:8b:
         00:d1:d5:6d:1f:fd:20:24:f4:b0:e4:2b:74:fc:ef:08:19:6a:
         42:53:56:ce:2f:e9:d2:88:20:1d:cb:8d:40:79:73:41:3d:dc:
         91:6f:07:51:79:a2:26:3c:41:e2:10:72:3d:4a:70:7e:e7:9b:
         7a:e5:c4:37:39:96:87:e8:8e:74:18:28:8c:0b:08:e2:b9:73:
         e6:69:d6:6e:f3:3f:94:3f:28:87:2d:91:0c:d0:d4:ed:4d:51:
         da:47:64:83:e6:e2:ee:65:24:94:b4:9b:5e:a0:51:b0:75:f3:
         85:25:21:f7:8f:91:71:8a:75:f0:32:e5:34:5e:61:a7:1c:44:
         09:f8:0d:39:93:97:1e:53:ed:b4:0b:41:44:9e:0f:f3:60:8e:
         02:0b:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:25:54 2025 by rpki-client