Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
File:                     7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft (raw, json)
Hash identifier:          WaFUnCNtSVF5dJyUvkkMXX2PXNCIDG9hBLh2OUuJFQ4=
Subject key identifier:   20:25:8B:9F:05:BA:AD:50:ED:ED:35:EF:D5:62:31:04:7B:E6:17:34
Authority key identifier: EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04
Certificate issuer:       /CN=F361C3A1RI/serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
Certificate serial:       09B7
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
Manifest number:          09B4
Signing time:             Fri 20 Jun 2025 01:19:24 +0000
Manifest this update:     Fri 20 Jun 2025 01:19:23 +0000
Manifest next update:     Sun 22 Jun 2025 01:19:23 +0000
Files and hashes:         1: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl (hash: 0nXqkU3FbICQzj9S6RhgkeszJBCXxS33YIZPjLhAJus=)
                          2: E1CD81C8280F11EBB63DE871F8AEA228.roa (hash: /3VNsnr60M58thhrmrm6ZI5zKetsZe2Nwr0JCmxLZg4=)
                          3: E0D747A87C2811ED97EC03DEF1222468.roa (hash: KuxC2oW0LJganBPkuHcCbqhMMXwVkPZeWM7/glv9ahM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                          rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 22 Jun 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2487 (0x9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C3A1RI, serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
        Validity
            Not Before: Jun 20 01:19:23 2025 GMT
            Not After : Jun 22 01:19:23 2025 GMT
        Subject: CN=6854b71c-8a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:5b:c7:f6:e0:b6:d0:5d:d6:c1:bd:73:61:
                    52:95:be:25:ba:6e:68:91:59:2d:03:3a:e9:ce:53:
                    03:3f:c6:a7:5d:47:3f:44:86:92:71:1a:50:7c:10:
                    4d:1d:71:f2:7e:9f:74:ea:22:12:c0:56:39:5d:f6:
                    ee:da:b8:44:bd:ba:8a:78:e0:e6:e8:47:b5:ef:c3:
                    72:b8:38:63:0d:89:4b:66:89:9a:01:b9:a0:bc:e1:
                    a9:91:ae:34:13:6f:7c:32:71:13:59:40:35:8c:05:
                    e3:eb:2f:aa:54:42:b1:e6:02:77:c9:ca:31:0e:0c:
                    2a:07:5d:5e:6a:cf:fc:3d:ee:e2:5f:68:b8:fd:34:
                    36:0e:90:0a:90:e7:e3:a6:1c:0d:8b:bb:6a:ef:00:
                    83:88:df:ed:b1:ac:0d:33:1c:5f:0a:ff:76:84:8c:
                    bc:11:4c:7e:ab:99:1a:70:89:d6:8c:43:3e:11:d0:
                    83:56:33:bb:ac:1b:eb:33:2b:ba:b6:bd:fa:72:37:
                    96:50:af:d8:5d:89:3f:f0:4f:c7:bf:d4:c8:e5:c5:
                    17:6d:0d:3b:2f:a0:28:d4:cd:26:22:2b:ff:02:0b:
                    b2:be:b4:5b:82:48:ce:f1:69:f4:59:dd:cf:37:f5:
                    17:90:7e:22:80:f8:13:96:ba:00:64:1d:89:cb:3c:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:25:8B:9F:05:BA:AD:50:ED:ED:35:EF:D5:62:31:04:7B:E6:17:34
            X509v3 Authority Key Identifier:
                keyid:EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:69:70:69:33:34:74:6b:00:31:a5:0e:3b:cb:ab:3d:1e:ae:
         b3:49:29:45:8e:03:fe:ca:c9:7f:06:3b:70:5f:98:ab:1f:40:
         77:eb:a0:4d:43:12:74:17:ec:0c:91:5a:17:1f:8a:1e:60:e1:
         a5:21:49:0a:c2:f3:66:e8:0b:38:a1:d8:dc:f8:8f:de:b3:b3:
         4e:8c:d9:99:2f:ef:df:37:bd:39:eb:3d:03:b4:fc:71:df:ec:
         e9:b0:62:aa:ad:c9:02:f4:9e:46:3f:10:b7:d7:7e:95:c2:ce:
         81:6a:f6:5e:ee:51:e1:a8:af:56:fd:ba:88:85:47:a1:15:22:
         e6:9c:a1:79:32:9b:f7:9b:ba:14:1f:94:9d:25:04:18:2b:53:
         7b:87:08:97:56:32:4a:6c:23:7e:f4:35:db:89:99:8f:90:49:
         80:10:88:c0:fb:03:2d:8e:a7:cd:4b:e3:1e:a9:28:16:51:1d:
         ae:4f:11:2b:e1:53:24:f2:73:1a:89:ea:a6:f8:47:a5:db:93:
         c5:55:75:da:c2:ed:e7:ac:e5:cd:dd:36:69:bf:a8:2b:2a:b2:
         25:37:a4:b0:21:9e:83:1d:ff:7c:4f:84:67:b0:ba:f7:fd:32:
         5c:84:fe:ed:68:85:d5:2e:de:32:64:73:e8:83:6a:bc:84:01:
         3e:28:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:55:53 2025 by rpki-client