Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
File:                     MQnplyMPK5fGUZojAYDU77BY1Us.mft (raw, json)
Hash identifier:          Sgy+d4iiaDSXrHicUPSCRphBq/kRPFRh0snGO1CGGmU=
Subject key identifier:   3D:20:23:AD:0D:43:3C:C2:D7:22:E3:65:10:03:72:E1:00:AC:C3:BF
Authority key identifier: 31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B
Certificate issuer:       /CN=F36992ECAF/serialNumber=3109E997230F2B97C6519A230180D4EFB058D54B
Certificate serial:       024B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
Manifest number:          024A
Signing time:             Wed 02 Jul 2025 04:14:35 +0000
Manifest this update:     Wed 02 Jul 2025 04:14:34 +0000
Manifest next update:     Fri 04 Jul 2025 04:14:34 +0000
Files and hashes:         1: MQnplyMPK5fGUZojAYDU77BY1Us.crl (hash: 0vnHfNN/W5pVBR3f4ghmRCYUewnUkkU83H4awEUcGWk=)
                          2: 421E36CC9A8A11EE9A56173AD25BE465.roa (hash: 6btWgtEr5ZNoJrSB9pwHdhVF5zwvZr6M9WePfENj/6Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 04:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36992ECAF, serialNumber=3109E997230F2B97C6519A230180D4EFB058D54B
        Validity
            Not Before: Jul  2 04:14:34 2025 GMT
            Not After : Jul  4 04:14:34 2025 GMT
        Subject: CN=6864b22b-2406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:b6:e4:fe:f6:29:40:21:33:57:8f:80:5b:
                    b9:3c:c3:e5:6a:89:86:38:a9:7d:0b:ef:a7:bc:fe:
                    af:82:4d:ec:21:b2:21:cb:ae:3a:e8:1f:32:bd:27:
                    bc:d3:e1:82:84:2d:e3:89:6c:2f:52:38:9d:e9:ae:
                    ca:08:67:2d:ae:9a:93:70:d4:4c:41:71:27:c6:c2:
                    3b:d8:a3:5b:84:e6:c1:3f:cd:a5:35:7a:60:4a:df:
                    63:a5:b6:5e:65:24:7b:84:37:a9:16:e7:db:d1:2a:
                    79:d5:dd:15:cf:ff:03:75:b3:38:b4:c8:38:85:e2:
                    3f:48:df:84:b0:66:cb:33:30:ce:ba:d0:ad:58:9c:
                    de:06:10:1f:21:46:43:d4:0d:b3:74:28:7b:3d:e3:
                    82:8e:d4:34:1c:18:6b:57:a9:93:4f:36:aa:e5:bb:
                    3d:9d:db:fd:76:da:99:b2:1d:00:34:5b:40:f0:4d:
                    2e:63:70:c1:1a:24:5c:7e:e7:d7:b3:58:31:7a:c1:
                    ab:c5:43:8d:c7:8a:29:63:4f:61:b7:7b:b9:ae:11:
                    91:ea:77:29:d0:09:26:ba:c0:a1:88:dc:ac:11:f8:
                    d6:56:a2:94:e3:24:79:34:61:40:e6:28:2c:8e:d6:
                    99:a7:2a:91:2f:aa:5e:d7:d1:70:f5:73:45:28:1f:
                    ff:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:20:23:AD:0D:43:3C:C2:D7:22:E3:65:10:03:72:E1:00:AC:C3:BF
            X509v3 Authority Key Identifier:
                keyid:31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1a:f3:5f:b2:2e:3e:17:d1:4c:e4:06:4b:c9:70:1e:0d:1b:
         36:8a:16:44:b3:21:09:aa:bf:b5:1c:b2:66:11:39:96:c6:19:
         ee:33:5a:a0:df:73:37:1a:37:d8:cf:09:97:c7:1a:ba:06:23:
         09:a2:4e:5d:e1:d8:20:42:c0:bf:40:22:99:26:dd:93:5a:63:
         ba:74:a5:a5:bf:ea:f0:ed:a7:a8:5e:64:6d:58:59:e7:59:15:
         8b:76:c6:fb:8a:fa:8a:b7:d3:09:e0:d2:e8:25:6a:eb:42:2b:
         7d:52:40:b4:33:f6:30:d4:1c:db:06:57:24:3d:85:20:e6:79:
         1f:ef:9c:c5:0b:e8:32:31:df:25:6c:09:8b:12:f5:79:45:2c:
         36:4b:93:26:ac:eb:0b:54:50:f4:60:74:aa:ca:5b:ae:16:a1:
         c2:40:d3:70:ad:c5:18:16:52:b5:4e:b4:ac:46:de:d0:aa:c7:
         17:36:1a:80:e3:08:16:d2:6d:9c:6a:1c:8e:81:12:22:49:a1:
         95:3e:d2:4c:e6:c0:d6:a5:82:5b:a7:71:13:92:21:84:b8:04:
         87:63:6d:e1:9b:30:21:14:11:4d:8c:72:4a:97:ba:3d:c0:66:
         3a:bc:f1:15:37:9b:30:53:26:c9:f0:fd:71:11:3a:32:1b:c8:
         23:fe:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:46:46 2025 by rpki-client