Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
File:                     -HlTHl-cqfSLcTODpQCBDVDy0kQ.mft (raw, json)
Hash identifier:          R+U9W+R2GUZWZIaML3gVJ04xz1mea3gQne5jeeDYz20=
Subject key identifier:   00:DE:EA:48:7F:F6:56:60:28:14:64:04:95:BE:D5:CA:FC:C9:F9:F3
Authority key identifier: F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44
Certificate issuer:       /CN=F361950AAF/serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
Certificate serial:       10
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
Manifest number:          0E
Signing time:             Sat 21 Jun 2025 03:14:22 +0000
Manifest this update:     Sat 21 Jun 2025 03:14:22 +0000
Manifest next update:     Mon 23 Jun 2025 03:14:22 +0000
Files and hashes:         1: -HlTHl-cqfSLcTODpQCBDVDy0kQ.crl (hash: 4mrj7w05K4AXCzp68RmYR4yJ7x3/j0DWsNoI+VCKjIo=)
                          2: 7B6F3054478411F0B371B7DADAE4EC9C.roa (hash: w5E8JBOJdrFnCHufU8YUVNcTyXQmMdg4vF0OTc1n9B4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 23 Jun 2025 03:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361950AAF, serialNumber=F879531E5F9CA9F48B713383A500810D50F2D244
        Validity
            Not Before: Jun 21 03:14:22 2025 GMT
            Not After : Jun 23 03:14:22 2025 GMT
        Subject: CN=6856238e-0deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:ab:f9:4c:b3:02:fb:31:94:ab:d1:c2:d8:
                    0a:af:c7:71:dc:ff:5c:d5:b1:ff:6b:61:a1:09:fc:
                    1c:12:78:de:ff:b6:ff:f9:18:ca:ea:93:32:77:b2:
                    71:fb:ee:9a:7a:0e:c6:cb:d0:b2:cf:2c:3f:26:e3:
                    5c:3e:21:02:8a:3d:30:e8:a7:a9:54:3d:d0:83:56:
                    18:20:01:1d:c8:40:14:a2:70:61:ef:5c:ea:a2:5a:
                    9e:2d:9e:6c:e8:0e:91:e4:7c:7d:7d:ad:73:79:4f:
                    78:9a:fd:01:df:54:16:4d:55:43:43:b0:05:2b:d9:
                    80:76:7a:98:0b:b4:db:81:f1:a4:97:82:d0:90:a8:
                    c0:97:5c:a0:04:99:9e:49:d4:e8:1a:5e:ee:35:4c:
                    86:1c:e5:99:94:60:87:de:49:7f:2b:92:40:4a:73:
                    06:9e:35:01:9c:30:f2:56:2d:62:03:29:e8:02:71:
                    03:8a:b2:1c:97:e8:1c:10:08:6b:2f:88:cf:3c:42:
                    c9:3b:67:1e:a5:a0:11:12:6d:32:37:b1:0f:44:0f:
                    61:5f:79:8d:7d:a1:ab:13:9d:24:fb:20:55:69:4b:
                    30:e0:ac:58:cb:9c:51:a1:49:88:20:b8:0d:74:28:
                    0d:6c:13:ee:b3:03:ea:f4:8a:74:75:bb:27:6f:0f:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DE:EA:48:7F:F6:56:60:28:14:64:04:95:BE:D5:CA:FC:C9:F9:F3
            X509v3 Authority Key Identifier:
                keyid:F8:79:53:1E:5F:9C:A9:F4:8B:71:33:83:A5:00:81:0D:50:F2:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-HlTHl-cqfSLcTODpQCBDVDy0kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361950A/965BBE48478211F0A99DBBCDDAE4EC9C/-HlTHl-cqfSLcTODpQCBDVDy0kQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:23:12:fe:78:a3:59:33:e8:ab:08:c4:e2:05:fb:77:47:01:
         f9:92:a9:58:0c:97:f8:6d:0b:ce:22:cc:9b:79:e8:f2:69:1d:
         2f:db:fe:2c:51:ea:f3:04:ed:2c:64:10:54:33:b1:7b:cf:8e:
         99:fc:e7:e9:9e:f0:52:5e:45:fc:c8:c8:97:10:b6:75:33:44:
         4e:94:6d:dd:f6:b5:19:9a:e1:7b:47:d4:be:a3:2e:86:b8:b7:
         3a:7e:f0:a8:36:bb:94:98:55:cf:59:e3:cf:eb:1b:7a:9b:2d:
         80:cf:db:32:f8:10:4d:e3:64:e9:bf:ae:a6:c4:ac:bc:6c:52:
         fb:26:f7:4a:a3:18:ab:e3:59:87:cc:c0:82:de:cc:84:cd:4b:
         52:f6:c3:87:ea:89:14:32:2a:36:de:7f:21:0f:19:7b:1f:d0:
         af:04:e8:bd:11:4f:38:76:b8:3a:2f:8f:e7:22:f2:1a:b3:00:
         82:44:69:99:b3:5f:6a:73:0d:bc:92:4d:e2:94:ea:81:46:62:
         cd:75:fe:0b:c5:0f:52:ca:e2:91:c4:63:fb:fc:f0:a0:fb:20:
         17:e2:08:13:82:41:1c:8d:20:4c:e8:f6:fe:9f:8d:03:c3:8e:
         9a:75:ad:e3:f3:1c:28:f0:d5:3d:02:89:ea:11:b9:6b:ae:9f:
         6a:a4:8f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:52:50 2025 by rpki-client