Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
File:                     zXRmXLHPyFlppqWrpHLD6irSVc4.mft (raw, json)
Hash identifier:          ui2ifwrVUrRoBPg8Mbo73e5Zz2FV3LyQyeWTtDFivM0=
Subject key identifier:   DD:6E:D1:CA:1B:01:73:5F:E5:DE:73:90:05:6D:C2:09:37:88:B8:B1
Authority key identifier: CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE
Certificate issuer:       /CN=F369BFA8AF/serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
Certificate serial:       DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
Manifest number:          DB
Signing time:             Thu 03 Jul 2025 05:05:39 +0000
Manifest this update:     Thu 03 Jul 2025 05:05:38 +0000
Manifest next update:     Sat 05 Jul 2025 05:05:38 +0000
Files and hashes:         1: zXRmXLHPyFlppqWrpHLD6irSVc4.crl (hash: up3C7OEJNRquJ6Td5VVuhc3c+snEX4lHT/vcAKjqq04=)
                          2: 9D0722C8B24511EF879E88B5762E951A.roa (hash: re1+1WPfPmFof+DoUwQFqcaVy7veeKE2VogjJwa7xs8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BFA8AF, serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
        Validity
            Not Before: Jul  3 05:05:38 2025 GMT
            Not After : Jul  5 05:05:38 2025 GMT
        Subject: CN=68660fa3-5a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:14:c3:bc:2b:99:87:49:57:1a:3f:7c:96:
                    63:18:7a:e4:33:85:8c:8a:c1:cf:20:68:69:31:56:
                    55:bb:76:7a:5a:e1:31:49:2a:1e:3d:9d:85:eb:44:
                    ae:7a:2f:00:6b:5a:4f:49:2f:b5:d2:10:5c:0e:bf:
                    bb:ab:ab:56:89:5f:e3:9a:8b:fc:d2:12:75:6c:3d:
                    05:77:f9:30:c1:50:c9:6e:d0:c7:04:fe:7d:c4:f5:
                    bd:46:05:70:62:41:03:87:82:0d:db:42:44:0b:05:
                    c0:64:13:d3:3d:22:19:ed:03:39:82:3f:05:87:9f:
                    ce:63:c3:70:f6:31:c1:87:40:19:82:86:67:be:e2:
                    6c:5e:be:26:a4:32:b7:91:12:6d:1e:96:df:02:d2:
                    81:8b:b6:81:5c:a8:4b:25:08:e9:ca:d6:f8:22:16:
                    d7:63:e9:33:2d:93:6c:c9:7f:71:09:3c:45:96:cc:
                    e0:6b:61:c0:49:11:2f:0b:29:05:8d:93:08:bc:d2:
                    4f:b0:ee:da:5b:48:97:b2:97:c3:73:df:45:68:ed:
                    d4:df:f7:d8:db:4e:6c:de:1b:67:29:4c:15:1d:7a:
                    20:62:51:4c:2c:b3:88:40:fd:11:a8:10:fa:51:61:
                    52:a6:96:20:1d:4f:69:85:2e:4e:6f:12:bb:ca:7a:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6E:D1:CA:1B:01:73:5F:E5:DE:73:90:05:6D:C2:09:37:88:B8:B1
            X509v3 Authority Key Identifier:
                keyid:CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:1e:8a:85:3b:e7:01:9e:68:06:a7:53:44:08:a9:f5:8c:
         77:78:c4:e6:fa:e8:9c:de:53:55:24:b5:9f:fc:58:ca:fd:10:
         6b:da:a5:e1:22:bc:66:05:7c:dd:3a:6c:f7:68:db:4c:01:ce:
         ab:de:17:2d:e9:6b:05:2a:ea:16:14:c7:33:4a:6d:8b:a5:13:
         e4:71:fd:b9:d4:ae:90:79:26:48:a5:60:25:80:b0:88:26:5c:
         e6:21:41:2a:c4:e9:68:1e:1c:89:dc:89:77:5e:31:bf:4f:00:
         a9:bd:49:4e:bd:f3:b0:37:5c:eb:c1:c4:e6:83:95:25:ce:8f:
         81:40:4d:f7:23:94:2b:3c:f3:5f:81:24:59:58:f3:6d:e1:86:
         e8:c5:f2:9d:0f:c6:b6:00:e0:e5:3c:c6:02:f2:07:13:0e:35:
         e2:0c:73:3c:84:10:65:69:9e:92:56:02:e2:98:d0:6a:3f:c1:
         ac:34:bc:8d:00:5a:c0:0e:ac:c2:34:50:12:30:a3:6b:46:bd:
         a7:9e:d5:19:30:e4:8a:58:0e:8b:4e:18:8f:9c:19:0d:8a:0d:
         ed:40:0c:a0:e7:06:e3:2d:04:14:7e:ed:95:f5:b9:b7:bc:10:
         9c:f7:15:99:38:61:5a:3c:d8:8f:ba:f9:2d:31:c0:6a:3d:d9:
         35:38:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:04:11 2025 by rpki-client