Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
File:                     X2s0EhZiPYWnTyzopeKbXurPolM.mft (raw, json)
Hash identifier:          aurEjhENvAnwe8tECP98a0aUd8SMG2gOW4ppHliNTfE=
Subject key identifier:   EA:97:2D:63:07:EB:DD:51:D9:D2:7B:AA:6D:EA:E8:46:D1:C6:B3:AB
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Certificate issuer:       /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial:       0428
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
Manifest number:          0426
Signing time:             Sun 29 Jun 2025 03:12:10 +0000
Manifest this update:     Sun 29 Jun 2025 03:12:09 +0000
Manifest next update:     Tue 01 Jul 2025 03:12:09 +0000
Files and hashes:         1: X2s0EhZiPYWnTyzopeKbXurPolM.crl (hash: vgeMBrqubrYplRo6NdLtVsar9GytHUHbvYnaGfQj3aI=)
                          2: 55A54EE42E9611EDA379C780F1222468.roa (hash: 92dmko5SHijeHZEqNigi1tIoOa55D1fkpQHQwRV5fc8=)
                          3: 189309602E9611ED8FED3480F1222468.roa (hash: 9thUVnLZZ7EOpFloeIsOWtyUvJheIIw/Jl2bg+WHMIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064 (0x428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C632AF, serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
        Validity
            Not Before: Jun 29 03:12:09 2025 GMT
            Not After : Jul  1 03:12:09 2025 GMT
        Subject: CN=6860af09-5fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:c8:7b:b9:48:d7:f9:5a:7e:b5:c6:d6:b8:
                    51:50:0c:3f:0a:12:a8:80:1f:b2:73:e5:f7:49:55:
                    8b:d0:58:06:59:2a:f0:06:89:f6:34:a0:53:bf:66:
                    bc:b1:81:35:a4:09:94:9c:28:f3:7c:88:e4:4e:b7:
                    ad:ef:bb:f7:c8:42:70:2b:54:17:3f:50:2e:14:8c:
                    41:07:c9:03:71:01:18:0c:b5:35:60:45:fe:0b:df:
                    bc:35:7b:d8:a4:d3:24:73:cd:56:0e:2a:40:45:c7:
                    2d:68:27:4f:41:af:43:a8:98:c7:5e:0e:95:79:c7:
                    52:6a:57:06:6e:27:fe:00:a1:61:d2:5b:b6:23:59:
                    ec:51:26:ee:9d:0d:6d:4c:29:a6:21:d8:4c:20:fc:
                    c0:10:c2:fb:e7:79:c8:ca:7c:64:e7:f6:1b:cf:91:
                    b8:75:e8:37:bf:32:99:c5:d9:a6:db:74:e6:80:8e:
                    e5:bc:c1:25:f4:d2:4e:5a:f4:dd:12:43:d6:c4:93:
                    7e:57:b2:db:ce:4c:83:23:7d:8e:df:ba:3a:d5:96:
                    b9:b5:5d:56:5a:65:cd:09:de:41:1f:c0:b0:0e:ac:
                    52:7e:ad:ba:00:48:8e:09:94:46:4e:c9:3f:95:23:
                    07:5b:25:64:72:01:da:b6:ef:9a:03:c2:11:d3:be:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:97:2D:63:07:EB:DD:51:D9:D2:7B:AA:6D:EA:E8:46:D1:C6:B3:AB
            X509v3 Authority Key Identifier:
                keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:95:ff:11:f2:89:18:ec:c3:80:a5:c4:37:fe:8f:8a:71:59:
         10:ac:b1:92:a9:b0:36:96:e8:ee:b1:72:30:a6:43:47:2f:7c:
         2f:c6:be:51:72:e3:32:75:ca:ab:26:90:38:77:d9:3a:ef:c7:
         f7:3a:83:ee:6f:d0:36:3c:99:f3:71:70:5e:01:8f:30:0b:a5:
         0c:32:99:0d:03:0e:70:4b:17:61:f4:d9:8b:f8:9e:96:72:8d:
         98:45:f2:75:52:da:7a:35:99:cb:15:39:27:a6:58:7e:48:a8:
         c4:08:13:11:f2:a7:73:f7:c5:7f:6b:44:6e:e7:c8:65:12:3b:
         f0:c9:19:1f:3b:e9:05:9d:da:5a:24:34:37:7b:b8:4a:59:71:
         b4:e1:46:ae:6d:4e:e6:f8:92:c8:70:b4:8d:e5:c6:94:21:fa:
         78:8c:61:de:2d:5e:cf:d5:d8:6f:5f:f6:49:9a:64:15:d9:60:
         3e:e6:e7:43:f4:68:e1:ce:8b:82:27:f3:ee:0c:8c:d5:a8:39:
         d8:2c:7d:98:89:7e:45:22:fc:09:6a:7b:70:45:f8:2d:34:52:
         6c:02:9f:25:8e:33:8d:0a:f7:70:88:fa:9c:96:31:da:de:14:
         51:1d:7a:43:fc:e8:49:d3:6e:21:60:d9:c7:f2:dc:24:5b:3f:
         9d:1a:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:53:32 2025 by rpki-client