Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
File:                     a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft (raw, json)
Hash identifier:          z88x584KuMtMg25gZ4KS+BZqjb7y98Jw3yBCMLcsT9k=
Subject key identifier:   82:73:1B:57:D3:FA:50:2E:3E:FD:03:36:AE:9E:6B:33:A8:A7:70:FD
Authority key identifier: 6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
Certificate issuer:       /CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Certificate serial:       0728
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
Manifest number:          0722
Signing time:             Mon 30 Jun 2025 02:02:02 +0000
Manifest this update:     Mon 30 Jun 2025 02:02:01 +0000
Manifest next update:     Wed 02 Jul 2025 02:02:01 +0000
Files and hashes:         1: a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl (hash: 1qs1iWfKboLk9V0Gs86IfqQerCCexTHITQggSVXKu9Y=)
                          2: E24D05EEE25311EA92AD155EF8AEA228.roa (hash: NhNBSTEDSsS8nv1gPk35pYlSA/j54gCUeglNVOfp5Jk=)
                          3: 8B23E96CE25411EAABDED95EF8AEA228.roa (hash: G1N7VCX3quzWOxjZ6v2ZRD1s53UOL4I3nt3IbyrQuyg=)
                          4: 10D082ECE25411EAB7E7505EF8AEA228.roa (hash: HCeS+ur8bLRwVYC7j4CEZcmf2zW7Wq0HlwhQZaJebjk=)
                          5: 8DA134B6E25311EA83A9A55DF8AEA228.roa (hash: FZLhMJ//MfWJptrE3zcXjMsUeDRso3qHvO1+H5qU2Z0=)
                          6: B193AAD8E25411EAACEFFA5EF8AEA228.roa (hash: 6msQDGgz9SoLw2neOnUxuPHAYOAC1PdRzeLr4+FvrcI=)
                          7: 57CB6630E25411EA8C85A55EF8AEA228.roa (hash: zokPSNjx8r4IpsyxRDDLa5MvDTlpaKfogK8lEwUhKrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1832 (0x728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697F9BAF, serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
        Validity
            Not Before: Jun 30 02:02:01 2025 GMT
            Not After : Jul  2 02:02:01 2025 GMT
        Subject: CN=6861f01a-e434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e5:a2:2e:74:64:3f:d2:8e:d2:85:ab:0e:88:
                    01:16:ac:3e:04:08:81:f2:b1:e1:37:1f:f9:23:64:
                    f1:c7:84:3e:26:8f:8e:96:f7:bd:55:c5:9c:40:5b:
                    db:c4:79:af:a9:57:fe:76:0d:53:d6:1b:68:10:db:
                    be:db:f4:e8:a4:16:8a:17:eb:f7:61:f0:19:fe:8b:
                    ef:7c:b7:17:84:d4:80:4e:09:ef:7e:a5:73:41:94:
                    2f:a2:a1:0f:b9:7b:04:da:05:85:19:b9:b4:59:87:
                    1a:13:16:7e:11:de:f9:ae:23:84:43:4d:07:90:3d:
                    a1:36:e2:20:57:b9:1f:c6:59:86:45:c9:0a:aa:2c:
                    19:29:27:97:17:af:9c:02:4f:38:a8:c3:99:ba:e6:
                    1f:79:78:90:71:7e:1a:4c:74:2b:e6:9a:48:cc:d3:
                    76:e7:56:7f:fb:fd:37:fa:74:e9:87:b5:1b:24:75:
                    35:9e:1d:06:a7:fa:28:d7:5e:e5:5b:0e:4e:e8:49:
                    a5:75:e6:4d:8c:1a:88:bb:90:e4:af:49:e0:8b:10:
                    ed:34:7f:66:c5:f8:6e:fa:d3:f7:d4:ee:39:a1:85:
                    7b:77:0a:0c:e5:1c:b6:f1:7c:dc:7c:f2:0f:96:15:
                    25:d0:d3:da:f0:bf:64:ad:2e:d2:10:87:d0:c3:dc:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:73:1B:57:D3:FA:50:2E:3E:FD:03:36:AE:9E:6B:33:A8:A7:70:FD
            X509v3 Authority Key Identifier:
                keyid:6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c0:d5:7f:e3:35:03:ad:ad:d8:dd:06:87:33:cd:ca:42:b6:
         e9:2d:bd:a8:83:2c:f2:6c:41:84:2a:2e:8c:a7:57:0e:0a:ac:
         f0:f8:d3:80:7a:bb:a7:2a:88:99:c9:0f:b8:ca:b9:31:75:bf:
         a9:6b:c8:84:69:6c:c6:4a:5b:72:41:0a:76:23:f4:c7:c5:a8:
         c2:53:82:a5:d4:ee:34:0b:83:43:95:13:a1:06:a0:5a:c9:b7:
         36:d6:54:10:52:69:a6:10:d4:8a:a6:4e:7d:99:26:30:dd:36:
         64:46:0d:5c:35:a2:2c:9a:23:e9:62:72:17:8b:df:67:20:4e:
         68:3b:e9:66:f3:0b:f5:88:79:8c:3d:06:6d:93:26:6e:e4:3a:
         a7:6b:4a:f8:39:58:88:f4:34:d2:77:0e:4f:23:6d:04:b9:27:
         7f:c7:29:10:40:77:c3:dc:4a:7b:a9:9f:fe:59:b8:a6:b7:c9:
         8d:6b:33:43:e1:79:1d:c9:0a:70:bf:2d:3a:86:5d:ba:cd:46:
         f4:7a:b8:1e:07:1d:06:e1:b2:f8:dd:fc:eb:cf:78:54:55:bd:
         f2:3c:ce:f0:69:43:0b:32:b7:e6:c8:47:03:e7:c2:fb:b8:a7:
         7a:6c:5d:a0:66:4d:dc:53:b5:fe:01:6b:74:05:9a:a7:62:9b:
         91:ad:14:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:43:27 2025 by rpki-client