Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
File:                     nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft (raw, json)
Hash identifier:          /Z2EFNgsvQf0sDNQjtbz0gq1IQjuVESXrbj1PZdCVXY=
Subject key identifier:   38:1A:F2:7F:65:12:C3:5F:36:F2:2E:C4:F4:96:AC:5C:91:2E:66:06
Authority key identifier: 9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20
Certificate issuer:       /CN=F3623AE4AF/serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
Certificate serial:       CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
Manifest number:          C9
Signing time:             Mon 16 Jun 2025 05:09:15 +0000
Manifest this update:     Mon 16 Jun 2025 05:09:15 +0000
Manifest next update:     Wed 18 Jun 2025 05:09:15 +0000
Files and hashes:         1: nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl (hash: adJnLd1CV0kIh0j5VSZxEnQxgxN4Uxo0vC7U902nDt8=)
                          2: 0CBAC432B27111EF99B95144762E951A.roa (hash: gmMvunoj5KNwjAHQwXEB9NQDDcCeTBCj9SxbM2LLQYk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623AE4AF, serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
        Validity
            Not Before: Jun 16 05:09:15 2025 GMT
            Not After : Jun 18 05:09:15 2025 GMT
        Subject: CN=684fa6fb-a627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:32:7f:75:06:e3:82:95:c0:f4:a5:de:33:
                    eb:ac:aa:7d:be:27:34:dd:ba:08:c3:e1:97:9a:ae:
                    c6:94:89:0e:9e:33:5c:c1:e1:22:50:7c:4d:a4:e5:
                    d7:b3:4d:aa:86:6b:47:36:d4:a9:16:70:af:19:e8:
                    75:b4:ab:1c:0e:64:8f:9c:15:f1:18:6e:30:39:4e:
                    29:47:f5:90:43:7f:3d:d8:e3:19:0b:1e:9d:a5:14:
                    f5:27:03:bb:ad:eb:bd:0e:83:1d:67:60:ea:48:9d:
                    a0:93:f2:43:92:7c:f2:5f:a9:bc:8c:f7:61:02:6c:
                    13:83:13:16:07:14:0c:75:4a:e6:f1:71:55:25:5f:
                    f2:ea:dc:e3:ee:c8:ae:ef:a8:7e:95:44:52:1d:a9:
                    8b:d5:17:56:dc:39:1c:7c:77:eb:c2:7a:eb:bc:e8:
                    16:ea:dd:3a:5d:f4:02:0d:e8:f6:60:2c:d3:a4:19:
                    b7:e9:49:ca:6b:74:60:49:a5:15:f1:a4:b5:c9:7a:
                    67:29:0c:92:ba:36:57:89:e8:3d:29:36:8a:02:95:
                    90:fc:ea:74:6d:79:d1:40:be:51:c5:34:00:dc:77:
                    55:8e:29:d9:b1:24:4b:82:b3:a9:55:01:6c:47:45:
                    f5:33:c3:81:66:77:4e:95:84:4a:95:85:fb:d1:15:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1A:F2:7F:65:12:C3:5F:36:F2:2E:C4:F4:96:AC:5C:91:2E:66:06
            X509v3 Authority Key Identifier:
                keyid:9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:75:62:88:95:bd:1a:bd:11:1e:5b:d0:4f:56:0e:5a:95:42:
         d8:82:dd:94:12:5f:02:d4:b1:13:6c:60:6e:1b:95:c6:7e:36:
         15:70:3d:a1:a7:28:d7:ac:22:01:ba:e9:3b:03:2e:1f:e1:09:
         7e:25:78:fa:ae:16:91:9e:cf:be:66:dd:52:cc:8f:2c:d1:be:
         a3:82:59:79:2c:7d:c0:0b:f2:87:0b:e0:93:43:df:c8:51:b2:
         2f:7a:5c:2d:a9:d3:2b:42:e1:c8:00:ef:1e:94:3c:cf:6a:76:
         20:a6:e0:09:f2:fe:0c:f2:7d:13:49:e7:d8:ab:e6:22:78:c2:
         c0:e8:d7:b0:ad:f7:1a:6a:6d:a5:10:24:e0:90:9f:1b:f4:50:
         ab:52:8d:a4:38:63:74:e5:b9:c8:ee:83:fd:e4:7d:4c:5e:14:
         7a:d3:a3:ce:ac:b5:d3:23:5d:53:31:8a:b7:c7:ad:d9:bc:90:
         d8:35:c3:7b:62:3a:77:2d:1a:90:65:a8:18:8a:cd:c0:8a:fd:
         95:35:95:29:7a:1d:07:ab:3f:33:65:4a:68:a6:2a:7b:5c:7f:
         7b:67:3e:75:45:e3:62:5a:7b:b0:c1:ee:ef:3e:2f:21:8e:e7:
         45:83:31:ad:95:37:04:b0:c6:ea:08:77:83:27:13:ee:fe:ab:
         c7:11:2d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:04 2025 by rpki-client