Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
File:                     M03n0uuGIBi7lXSbZI3Lr1DRPag.mft (raw, json)
Hash identifier:          8bdEmyZY6Dc3eI60zozxru335XMSFK+QLHOhq4O1xog=
Subject key identifier:   90:D4:52:8B:39:43:C0:70:58:26:D2:6B:1C:CD:B9:00:53:11:98:79
Authority key identifier: 33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
Certificate issuer:       /CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Certificate serial:       0DAD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
Manifest number:          0DAA
Signing time:             Sat 09 Aug 2025 01:02:26 +0000
Manifest this update:     Sat 09 Aug 2025 01:02:25 +0000
Manifest next update:     Mon 11 Aug 2025 01:02:25 +0000
Files and hashes:         1: M03n0uuGIBi7lXSbZI3Lr1DRPag.crl (hash: lbdypVFmtkjqpZ8oPoGHnk59KKk3jrcX0UC92Xnhdng=)
                          2: D4836C70F58E11E59F714033F8AEA228.roa (hash: pN8APZRuxk6Jm4N1ZwtHoYfsYhbm0SmVWbFKIM+vAlY=)
                          3: 6CF64EE6A62211ED8F649780F1222468.roa (hash: NWE8clw8CF7WBnE8BhZlyK4mx7cNZXF3h1x6LHBwvwc=)
                          4: F019B85EA62111ED8776367FF1222468.roa (hash: vz0gdE2qPXTbuobi42RjN0wKI0ZjByLhBDreE92zsPQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3501 (0xdad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623CAFAF, serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
        Validity
            Not Before: Aug  9 01:02:25 2025 GMT
            Not After : Aug 11 01:02:25 2025 GMT
        Subject: CN=68969e22-2860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:6a:17:54:0f:a6:5d:82:98:0c:a1:dd:fb:
                    fe:74:d2:6a:cb:a5:f8:65:1d:43:f4:64:bb:65:e6:
                    a0:0b:f0:88:4e:45:b3:36:0c:9a:54:a7:84:a7:87:
                    2a:a0:2d:78:60:9f:47:78:9a:de:23:a0:1c:65:f9:
                    7a:a3:03:8e:1a:59:ad:5b:ee:5e:1c:a0:73:e7:fd:
                    7b:27:4e:7c:bd:72:1d:a7:9f:ee:2d:57:3b:31:4e:
                    35:81:b5:a9:3d:59:71:3d:b3:2e:b8:83:84:cf:44:
                    77:45:77:ca:8a:70:c6:33:82:c1:30:6f:1b:40:a8:
                    4a:79:38:aa:da:fa:04:a3:b3:6c:ca:67:94:f5:fe:
                    ab:19:e8:1d:5b:79:be:3a:23:38:53:ba:0f:0c:3b:
                    9f:f7:c7:4d:c1:de:9c:cb:b8:c6:34:b1:d9:e6:68:
                    0a:b1:d6:6d:50:59:f3:3f:3c:61:fd:7f:ab:d4:84:
                    30:23:33:14:36:8b:a6:fb:23:13:d4:14:a1:3a:ed:
                    ba:cc:68:fb:ea:1f:16:8c:c3:5e:76:de:46:49:f5:
                    97:b3:21:37:3e:65:2e:67:01:78:0c:18:f0:a2:13:
                    23:cf:a5:31:34:6f:88:bb:d5:53:c1:a5:da:f1:92:
                    0a:a7:40:da:27:32:29:38:6d:8d:9c:15:60:bb:1e:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D4:52:8B:39:43:C0:70:58:26:D2:6B:1C:CD:B9:00:53:11:98:79
            X509v3 Authority Key Identifier:
                keyid:33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b5:b0:70:68:a1:92:8b:3b:19:15:57:2b:7e:76:f7:c6:3f:
         f5:61:29:58:d5:59:67:f4:9e:04:ad:db:cd:0a:39:b4:1c:65:
         75:64:c8:4d:bb:59:33:9f:af:26:bf:dc:80:5d:20:64:dc:10:
         da:cd:d5:ba:19:cc:ed:c8:6b:89:43:e0:b7:d5:04:52:c3:f8:
         26:95:a6:3a:ac:b6:1d:73:f8:76:91:30:a3:73:5d:2c:c0:43:
         11:f7:94:96:a8:43:a3:d3:09:bf:47:07:75:8d:22:6c:4b:2c:
         48:88:aa:c9:8d:f3:d3:a5:c0:5d:71:b4:f5:bc:98:9f:cf:c3:
         ca:b6:71:ce:3f:ee:c5:0b:5e:b5:a8:5c:d8:1b:6c:33:62:a1:
         b2:dd:df:5b:18:f1:6f:0b:0d:6a:25:2b:24:1b:1d:a8:b1:c5:
         9c:28:d2:b0:28:72:0b:3c:f3:55:9e:c2:e2:15:09:86:82:af:
         f4:b8:9e:a1:5c:70:2d:be:37:be:14:9c:09:43:2e:2a:98:59:
         67:bd:6a:95:a2:c5:2a:7c:34:0b:5b:98:b5:36:d8:a0:32:16:
         4e:8d:ef:3c:ce:53:21:ad:33:fe:95:93:a2:46:02:c4:9e:86:
         93:02:e8:55:ba:06:b9:e2:f8:08:c4:f6:bf:a1:fa:bc:f4:88:
         04:e2:94:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:04 2025 by rpki-client