Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
File:                     wD_daU9RquOPBRRWEBYXxW_YnEo.mft (raw, json)
Hash identifier:          +itRwAkAUHdZZsynBVB99VqG1KhQBPRslFn7sSWXY5E=
Subject key identifier:   18:15:68:DD:06:C3:C4:DE:17:CA:75:43:85:1B:A0:DB:A5:29:B0:C9
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Certificate issuer:       /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial:       03FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
Manifest number:          03F3
Signing time:             Thu 03 Jul 2025 03:19:27 +0000
Manifest this update:     Thu 03 Jul 2025 03:19:26 +0000
Manifest next update:     Sat 05 Jul 2025 03:19:26 +0000
Files and hashes:         1: wD_daU9RquOPBRRWEBYXxW_YnEo.crl (hash: 5bCTSy4pUmNP9/CvUT2x7rlwYlZiDJPXyzfnqxLAvGY=)
                          2: 2258DA46D9E611ED9991A6FC2F6D8C1D.roa (hash: zJWQpnOJZG73raUB2XV36ffD+zWbugbvO1hLTY3gu00=)
                          3: F998A4B4A68111EF83490D8F762E951A.roa (hash: gRJbn7TUJdVqzLN1VGDb0fJr1Lg413PCOuxRtaJJTFU=)
                          4: 7E60CCBE817511EDBB60FBE8F1222468.roa (hash: 3botBW7CxliYrIkkF4AkSGZ+nyL0LTvgw3z56nnf7ps=)
                          5: 6069E9FA190611EFAAC79456017001B1.roa (hash: qaWE3oZP6UDJiJvSf/qTz0gA6Weypu8kgh11g/Q7Yjc=)
                          6: E621A12E190511EF8A909B51017001B1.roa (hash: /esz7AIhM5t30ub8s0aOAXHtnxsPkykRU/r4aTbVw0Y=)
                          7: 6DC5038018FE11EF8B80B516017001B1.roa (hash: prIb+/59lGAY5m7ee/w0QfgAEg0BFXE2ZtOJctQ1wsI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1022 (0x3fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698DD0AF, serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
        Validity
            Not Before: Jul  3 03:19:26 2025 GMT
            Not After : Jul  5 03:19:26 2025 GMT
        Subject: CN=6865f6bf-061a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cb:2d:a5:f0:3e:91:55:8f:66:87:1f:fa:98:
                    fc:1b:4a:59:73:fa:82:26:64:85:e6:8c:98:02:e6:
                    a8:0f:d5:17:a9:4a:78:a1:9b:da:95:a9:68:a8:94:
                    32:15:68:e1:31:33:43:ef:5a:4b:23:83:b7:c6:1d:
                    d2:80:df:88:51:03:2d:4e:a3:6f:04:2a:e7:4a:fd:
                    71:14:27:98:c4:51:bd:75:b3:eb:d3:08:46:cb:90:
                    8f:cd:a7:99:28:0b:bf:6f:e5:1f:8d:04:2f:02:69:
                    f4:f4:b6:b1:51:26:aa:14:68:7d:25:63:9f:87:75:
                    2b:0f:12:bc:5e:da:25:62:53:35:81:b0:59:f9:e9:
                    e9:fd:95:64:ef:b6:8b:e7:f6:a5:83:7c:cd:2f:06:
                    9d:16:c6:59:f5:6e:cf:1c:a5:c5:b6:99:6e:d0:2c:
                    74:01:72:37:a4:a5:fe:b6:11:71:7f:d6:ea:50:7c:
                    b8:b1:03:cc:e5:36:18:36:12:55:44:52:47:69:04:
                    ba:e2:fc:c0:46:a2:73:46:a5:67:39:2b:aa:5f:f2:
                    57:40:f9:b9:83:59:b1:41:43:1f:2e:c9:31:ac:ab:
                    46:ab:24:20:a1:f9:ee:2e:77:2e:ab:74:39:4e:bb:
                    76:13:29:51:64:30:51:26:76:8f:c6:45:37:8f:64:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:15:68:DD:06:C3:C4:DE:17:CA:75:43:85:1B:A0:DB:A5:29:B0:C9
            X509v3 Authority Key Identifier:
                keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:e2:f2:51:b7:3a:b5:77:1e:da:65:ce:dc:db:70:c6:f0:
         a3:b6:be:88:d1:8d:87:06:dc:7e:d4:e8:e2:f6:7b:5b:c2:07:
         60:78:e6:53:f5:c9:2a:f3:b3:a8:56:f1:a3:b4:f3:74:77:dd:
         76:88:eb:a9:a2:a7:92:e6:59:83:37:7d:f6:2f:e0:d6:a2:1b:
         49:6d:b3:8a:1b:23:45:68:dc:c0:68:d7:8d:8e:1b:1b:f9:8b:
         30:ce:c0:4d:93:e5:00:e9:b5:f0:ba:61:ed:4f:3b:fc:cd:ec:
         99:0a:cd:61:8b:2e:f6:5d:d0:bd:58:03:22:6d:7e:03:c1:20:
         9f:63:86:5d:b0:ce:c8:88:1e:1e:eb:7a:97:23:b2:0c:4a:19:
         88:d2:3c:fe:69:ba:12:ed:cb:ab:ce:c4:20:32:c3:c8:1d:de:
         12:65:22:4c:74:6b:7e:62:5d:e9:26:12:b4:dc:b1:0c:51:24:
         97:42:bb:a4:10:a1:09:04:9b:21:25:06:d2:8e:c6:38:75:be:
         3b:06:18:8c:9f:78:26:aa:9d:51:45:50:05:f9:10:8e:2a:08:
         3b:b7:49:30:1c:89:f2:53:95:e2:7c:10:10:7a:f6:06:f1:7b:
         ec:12:b6:57:2a:f5:e3:e1:cc:96:9c:77:57:8f:bc:1b:21:59:
         d8:13:59:51
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OThERDBBRjExMC8GA1UEBRMoQzAzRkRENjk0RjUxQUFFMzhGMDUxNDU2MTAxNjE3
QzU2RkQ4OUM0QTAeFw0yNTA3MDMwMzE5MjZaFw0yNTA3MDUwMzE5MjZaMBgxFjAU
BgNVBAMTDTY4NjVmNmJmLTA2MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSyy2l8D6RVY9mhx/6mPwbSllz+oImZIXmjJgC5qgP1RepSnihm9qVqWio
lDIVaOExM0PvWksjg7fGHdKA34hRAy1Oo28EKudK/XEUJ5jEUb11s+vTCEbLkI/N
p5koC79v5R+NBC8CafT0trFRJqoUaH0lY5+HdSsPErxe2iViUzWBsFn56en9lWTv
tovn9qWDfM0vBp0Wxln1bs8cpcW2mW7QLHQBcjekpf62EXF/1upQfLixA8zlNhg2
ElVEUkdpBLri/MBGonNGpWc5K6pf8ldA+bmDWbFBQx8uyTGsq0arJCCh+e4udy6r
dDlOu3YTKVFkMFEmdo/GRTePZFgXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGBVo
3QbDxN4XynVDhRug26UpsMkwHwYDVR0jBBgwFoAUwD/daU9RquOPBRRWEBYXxW/Y
nEowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4REQwLzU2QzhFQTRDNjY3NzExRUQ5NjdGQzBBMkYxMjIyNDY4L3dEX2Rh
VTlScXVPUEJSUldFQllYeFdfWW5Fby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dEX2RhVTlScXVPUEJSUldFQllYeFdfWW5Fby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OThERDAvNTZDOEVBNEM2Njc3MTFFRDk2N0ZDMEEyRjEy
MjI0Njgvd0RfZGFVOVJxdU9QQlJSV0VCWVh4V19ZbkVvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOC+LyUbc6tXce2mXO3NtwxvCjtr6I
0Y2HBtx+1Oji9ntbwgdgeOZT9ckq87OoVvGjtPN0d912iOupoqeS5lmDN332L+DW
ohtJbbOKGyNFaNzAaNeNjhsb+YswzsBNk+UA6bXwumHtTzv8zeyZCs1hiy72XdC9
WAMibX4DwSCfY4ZdsM7IiB4e63qXI7IMShmI0jz+aboS7curzsQgMsPIHd4SZSJM
dGt+Yl3pJhK03LEMUSSXQrukEKEJBJshJQbSjsY4db47BhiMn3gmqp1RRVAF+RCO
Kgg7t0kwHInyU5XifBAQevYG8XvsErZXKvXj4cyWnHdXj7wbIVnYE1lR
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:05:37 2025 by rpki-client