Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
File:                     kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft (raw, json)
Hash identifier:          p1Ux62Hu6j5wOBKmtv4rzUfbfwr4G3ZvI84GH6Ry8lM=
Subject key identifier:   A9:32:57:C8:B4:E5:C5:65:44:D4:E9:8D:DC:19:B8:C1:E3:22:84:82
Authority key identifier: 92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06
Certificate issuer:       /CN=F3611484AF/serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
Certificate serial:       0243
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
Manifest number:          0241
Signing time:             Tue 05 Aug 2025 04:21:48 +0000
Manifest this update:     Tue 05 Aug 2025 04:21:48 +0000
Manifest next update:     Thu 07 Aug 2025 04:21:48 +0000
Files and hashes:         1: kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl (hash: YZEYWkt9qqVMLNBqQlzAH/6NW5k3EVvoWCS1nWUxw20=)
                          2: 2908C1DCB9E511EEB9065888775412E6.roa (hash: zUZ7frdCVvRhVt6G1jP6YXP6H0Tz6Q6HJTbMKr0ueno=)
                          3: 60A31C9CB9E411EE910C0687775412E6.roa (hash: k8wj8VzEDiiwJJsRvgprQG7fLZ2kqSdbh1u+v7N4tmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 Aug 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611484AF, serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
        Validity
            Not Before: Aug  5 04:21:48 2025 GMT
            Not After : Aug  7 04:21:48 2025 GMT
        Subject: CN=689186dc-23bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:11:a4:57:4a:ff:43:96:d8:a5:b7:2d:75:
                    62:ce:a0:f3:72:fb:18:7b:66:e0:23:ad:09:5c:cc:
                    dd:9e:44:dd:65:2d:e1:a4:e9:55:47:08:36:db:3e:
                    c8:e6:cd:cd:7d:2b:5c:8b:28:84:3d:fd:82:cd:27:
                    5b:20:b7:41:36:a2:08:3d:1a:0b:8c:07:17:87:82:
                    33:5e:58:e6:e5:13:47:3f:a9:d7:e2:7c:a3:c2:0d:
                    6a:97:a6:e3:96:d2:b3:8c:60:cf:de:02:cc:86:cb:
                    ad:40:aa:b6:28:03:f0:c4:12:ee:b5:d2:f8:a9:3f:
                    d1:83:2b:5f:2b:88:37:71:c8:77:d1:3a:4a:95:09:
                    9b:16:b2:55:ab:57:4d:82:e4:a3:7b:06:fc:e2:fd:
                    4b:f2:a9:40:0b:d9:5f:30:31:dc:44:b6:b1:44:8d:
                    32:8f:18:97:ee:2e:46:64:95:ac:b3:50:06:48:e4:
                    71:b9:7b:ab:3e:b6:d8:41:c5:79:8e:e5:d0:a6:0d:
                    22:83:c5:e4:2c:62:5d:70:aa:dd:68:01:25:69:5b:
                    f3:7c:27:18:f9:1a:97:18:71:e1:e3:dd:5f:bc:b8:
                    03:52:f5:bf:a8:23:4b:d5:3a:db:7e:f3:60:bc:fe:
                    d9:ea:3e:ae:3b:b5:3f:e0:87:f9:29:21:85:66:99:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:32:57:C8:B4:E5:C5:65:44:D4:E9:8D:DC:19:B8:C1:E3:22:84:82
            X509v3 Authority Key Identifier:
                keyid:92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3c:68:84:74:a4:36:cd:2d:83:54:60:cc:0e:00:3c:e7:91:
         e0:18:f4:da:3e:5f:9f:a2:27:2f:42:9e:af:d1:30:d4:da:da:
         86:3f:5f:3e:bd:82:9e:8a:7b:21:79:71:e4:f5:2a:90:40:8e:
         7b:27:9a:91:1f:e9:03:0a:23:a1:dd:2a:a6:0a:68:18:90:0c:
         75:32:42:1c:20:0f:f7:83:65:00:9c:ae:f3:fa:29:6a:29:fd:
         67:d9:04:ef:2a:2d:b4:9c:c9:08:71:7c:94:ee:19:fe:a2:94:
         2d:8b:6a:23:58:69:43:98:85:b5:11:e4:36:c4:a7:88:6a:e1:
         a7:c5:67:43:44:73:bb:32:38:f5:9e:f2:79:d9:02:65:61:fa:
         38:6f:c1:f2:ee:ad:e0:81:ec:d0:f1:d1:2d:d6:09:b9:3d:cf:
         5e:65:9d:37:34:51:50:c0:4a:c6:29:da:f8:94:a1:08:03:91:
         13:93:92:75:28:eb:e7:2e:a2:0a:b8:4c:bd:61:98:a0:38:ab:
         1d:ba:38:24:f4:a7:1a:04:66:00:d0:3e:7c:40:48:fb:ac:b4:
         a1:52:b1:77:2c:c1:af:2c:72:73:4e:47:00:29:fa:bb:92:ad:
         5c:b5:c0:34:e4:04:61:54:4d:bc:7e:1a:51:1b:06:fa:b5:61:
         22:4c:39:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:40 2025 by rpki-client