Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
File:                     Upl4cSNfYM1xWncQ_9bi6kyI0po.mft (raw, json)
Hash identifier:          gIyRUDU3ur6WoSHN12qJPY+Q29WOhCTTV5Ls4UsjoMA=
Subject key identifier:   F3:6A:16:78:21:7A:55:71:32:80:FA:7B:8C:10:99:D5:A6:D9:11:52
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Certificate issuer:       /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial:       0497
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
Manifest number:          048F
Signing time:             Tue 01 Jul 2025 03:00:22 +0000
Manifest this update:     Tue 01 Jul 2025 03:00:21 +0000
Manifest next update:     Thu 03 Jul 2025 03:00:21 +0000
Files and hashes:         1: Upl4cSNfYM1xWncQ_9bi6kyI0po.crl (hash: 1ugBtHn8bjDyjSkCflJEY5j2aCNrKTA1uvLldFfcPME=)
                          2: A27E602082FF11EE8205C9864AD9E6FC.roa (hash: pv58iSJoNZfLF15J4awhKwcNzaZSo1gyn9KUtGLQf7U=)
                          3: 811B0F4682FF11EEAC9619864AD9E6FC.roa (hash: pPHAUOTt22hBeaB17IRburRyPCm6dJpRxd6TfErC+xI=)
                          4: 40750D8E82FF11EEA9EF75854AD9E6FC.roa (hash: IfBtUMkbvyisKLp/KIr1N58P5Vt8K4q1zYyTPAWX8DY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7F21AF, serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
        Validity
            Not Before: Jul  1 03:00:21 2025 GMT
            Not After : Jul  3 03:00:21 2025 GMT
        Subject: CN=68634f46-1b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:46:28:b1:e1:7e:fa:08:44:43:73:b3:ce:
                    fa:b9:a4:3f:bb:b4:2c:07:69:00:e5:5e:e7:8b:0d:
                    ad:ef:33:8a:e0:55:ee:c1:65:c8:7f:0f:35:52:2e:
                    9c:9e:f1:b0:6f:93:85:d5:d2:7e:12:b1:9d:3b:4c:
                    04:2d:78:35:1f:00:53:13:e3:14:1f:29:a6:ed:5c:
                    d8:35:82:1a:cb:78:32:df:c3:88:b9:92:05:8d:97:
                    57:9c:f5:75:f2:72:ee:0d:0b:56:be:0f:18:93:ab:
                    a3:43:bc:ad:ab:46:0d:9f:51:95:79:5a:d2:e2:03:
                    3a:06:3d:91:0e:d1:e3:4b:a2:69:ea:bc:88:00:9f:
                    50:0b:8d:7e:61:25:f0:36:a0:ad:95:13:8f:98:c3:
                    51:39:8d:69:a0:34:f8:91:29:b2:41:25:0a:3a:10:
                    70:4e:d9:4c:f5:d1:23:36:2f:89:56:a7:81:6d:10:
                    88:b3:83:d6:a6:81:c6:48:2e:eb:94:56:b3:db:30:
                    29:61:74:bd:4d:ee:a8:b2:d9:33:c2:9a:30:6d:72:
                    66:e2:96:30:73:3b:39:c1:43:4c:39:c5:78:1c:b0:
                    f5:2d:59:5a:29:f2:be:6d:c1:d9:f6:5c:ed:26:13:
                    b6:d4:c0:8e:7b:02:80:b8:d0:00:08:35:9e:31:27:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6A:16:78:21:7A:55:71:32:80:FA:7B:8C:10:99:D5:A6:D9:11:52
            X509v3 Authority Key Identifier:
                keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:bb:0b:82:24:80:69:ec:0d:9f:77:5d:f5:66:5b:d6:f5:20:
         39:cd:52:a1:3c:99:82:cb:97:b6:bf:f6:d3:9c:27:fc:19:f3:
         3d:2c:c1:75:61:ce:55:bf:3c:0a:ee:01:fe:3c:8b:8e:1a:a7:
         e9:6d:73:23:45:77:bb:fe:5c:fa:a3:8b:3a:6b:15:18:94:cd:
         b0:f0:80:81:52:ab:8a:85:f3:fe:c2:69:93:d0:66:2c:53:ad:
         bf:0e:2b:2a:3c:99:8c:ea:d1:7f:8b:01:a5:c2:29:65:e5:9b:
         e5:32:fe:6a:d6:77:10:d2:05:24:b3:67:bf:b1:d4:16:5b:61:
         db:da:49:63:7c:f9:58:06:41:23:1c:3b:ed:e5:d0:71:93:41:
         e4:8a:f6:9b:1d:d6:61:90:ed:bb:2a:3b:10:62:ff:49:5b:49:
         71:bb:b0:e2:f5:79:f2:27:6a:96:15:47:60:70:a6:f1:88:34:
         1a:6a:27:f5:f1:0a:91:45:fa:85:c1:e0:32:17:5a:37:e2:87:
         f7:90:c6:80:2d:ba:13:40:cd:8f:d3:d7:21:ad:84:09:19:ce:
         b5:ea:e4:3b:bf:ba:74:93:b0:4e:62:fa:bb:57:e3:72:8c:6c:
         5e:d8:66:62:71:2c:c0:b9:ca:87:5c:94:b9:f5:bd:c0:eb:91:
         8c:3f:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:58:50 2025 by rpki-client