Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
File:                     ffDZZHEjlpmcF8_uBLpMLB39GqE.mft (raw, json)
Hash identifier:          Fj2/PttjL/eLfJMargfpiaIc2GnXPiLTItZFwWqdfpc=
Subject key identifier:   FC:B2:24:FF:F4:AC:98:D2:65:4A:DC:08:6F:04:F4:51:D7:E1:28:5A
Authority key identifier: 7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1
Certificate issuer:       /CN=F36D03D3AF/serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
Certificate serial:       0228
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
Manifest number:          0227
Signing time:             Sun 29 Jun 2025 04:17:24 +0000
Manifest this update:     Sun 29 Jun 2025 04:17:23 +0000
Manifest next update:     Tue 01 Jul 2025 04:17:23 +0000
Files and hashes:         1: ffDZZHEjlpmcF8_uBLpMLB39GqE.crl (hash: TITDGYXl3MQRG+zXAv8Eavzv0A3y/zJu3ydWCnoH16Q=)
                          2: 11714A5EB05211EEB8B0949D775412E6.roa (hash: Y74sDhVPh3sDwTRwkCR1rG2U0+ospQWmyyWML+k0YKo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D03D3AF, serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
        Validity
            Not Before: Jun 29 04:17:23 2025 GMT
            Not After : Jul  1 04:17:23 2025 GMT
        Subject: CN=6860be54-b9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:0e:fb:f1:6f:3a:fa:14:59:f4:3b:4f:67:
                    06:7e:24:e0:72:f5:5b:17:bd:37:eb:f3:7f:9a:a3:
                    29:5d:8e:d7:02:e9:83:10:41:64:75:b6:fe:7e:b6:
                    08:4f:f8:36:a7:b7:11:77:ec:6a:cb:48:7c:42:76:
                    9b:d7:cf:57:c6:d7:21:99:15:99:f8:fa:3f:35:f4:
                    c5:02:cd:6c:c8:b8:dd:54:00:14:df:ce:0d:b3:0e:
                    10:0f:1e:9b:9b:b7:13:6d:e4:f7:f8:54:8d:33:50:
                    89:f9:a8:fe:73:41:6a:6d:fa:28:75:67:55:8d:60:
                    b6:6a:eb:4e:9b:a5:03:49:dd:5e:8c:8c:fd:9c:1e:
                    20:08:91:c6:c1:34:44:fe:b4:d4:c0:4a:48:3d:7f:
                    e0:12:a0:69:fc:01:d5:2c:2d:c2:b4:3c:28:d0:4f:
                    f0:de:8e:73:d9:e4:3a:63:6c:cf:64:cc:1e:15:0f:
                    4b:4e:fd:93:8c:75:cf:59:cf:03:d6:07:1e:9c:d1:
                    42:4b:ca:1a:1c:3a:61:5c:22:6a:e6:34:0e:04:97:
                    50:99:1e:a8:58:59:7b:2e:d7:77:8d:7c:1b:41:d0:
                    28:cb:0a:9b:ff:d5:0a:c7:96:98:c4:3e:ca:62:a2:
                    2b:73:31:d3:bd:7f:3e:5c:35:76:7d:0f:a3:7c:78:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B2:24:FF:F4:AC:98:D2:65:4A:DC:08:6F:04:F4:51:D7:E1:28:5A
            X509v3 Authority Key Identifier:
                keyid:7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:76:87:41:24:65:6b:a5:7d:3c:b0:46:56:76:41:9d:9e:ec:
         ec:88:0a:8a:70:3f:c8:7e:f0:83:0f:0f:b3:c5:d4:f1:7d:85:
         36:ab:ee:8e:42:90:b7:69:5c:3e:25:c7:4d:93:35:b7:59:74:
         b7:23:2c:14:5d:9d:dd:c2:6d:22:40:95:3b:6d:5e:20:58:24:
         cb:6a:b3:af:f7:84:94:1a:24:ac:53:ac:db:10:b5:4c:84:92:
         4f:8f:29:42:0c:33:2f:c2:73:55:8c:70:dd:57:5b:11:98:c8:
         f6:fc:f8:41:83:75:5b:f4:db:a5:56:e3:54:9a:ec:b5:17:b4:
         69:e1:cf:d5:bc:9a:86:86:70:c3:fd:3f:87:6d:f0:de:1f:fb:
         ae:a1:50:3b:90:1c:9c:c5:24:2b:cc:e2:a8:26:25:ca:87:c0:
         82:c7:d9:e1:3d:a2:ee:e0:c9:31:c2:f7:c5:35:9b:a4:a5:11:
         63:1d:be:20:12:87:7f:0b:56:c2:24:9f:f2:e5:79:35:f9:30:
         83:f5:ff:a5:bd:ef:15:d8:e9:5b:69:f6:1e:1b:9e:60:5d:ee:
         8a:d8:90:aa:fd:02:aa:da:82:ed:77:e9:18:f5:20:a1:52:84:
         e4:46:ec:ca:da:bc:b2:f8:95:1d:ee:d4:f1:da:2b:24:84:39:
         9b:06:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:01:30 2025 by rpki-client