Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.mft (raw, json)
Hash identifier:          co2+/kO81pGKPdrWe8MzMJXDXd6sq2V/NDBSnlQit90=
Subject key identifier:   5B:AF:41:E9:74:C7:BA:E9:8E:49:DC:0D:41:04:E3:DD:89:06:45:82
Authority key identifier: C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Certificate issuer:       /CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
Certificate serial:       025A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
Manifest number:          0258
Signing time:             Mon 11 Aug 2025 04:23:57 +0000
Manifest this update:     Mon 11 Aug 2025 04:23:56 +0000
Manifest next update:     Wed 13 Aug 2025 04:23:56 +0000
Files and hashes:         1: x_9uywvS7BI1alQX4xxzC5BQlBE.crl (hash: l7yZp8p15iPKq6zz7ZpGbZNPq2m6UPU5N4TCrvYeNfc=)
                          2: 209064A80ECA11EFA0FB8D6C017001B1.roa (hash: SYHt2ENsggByHF7FNfIiJDtYCTGlxeYoFHTIRbjH6Hc=)
                          3: 3906A38AAD5411EEB67B65B2775412E6.roa (hash: ReFNAC4d+VQBlR/AEunK+azob89VljT5w2yD48BTB3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AF, serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
        Validity
            Not Before: Aug 11 04:23:56 2025 GMT
            Not After : Aug 13 04:23:56 2025 GMT
        Subject: CN=6899705d-5c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:ea:3e:6a:b8:dc:52:77:18:ce:57:ca:ae:
                    09:c5:28:99:7e:52:de:ca:9b:18:35:60:09:35:52:
                    05:43:74:6f:9f:b2:66:b0:55:9a:b2:4e:e9:1d:1a:
                    2b:44:0f:13:8d:07:5f:2b:41:88:a7:a5:8a:45:5f:
                    86:1b:42:9b:c3:66:c0:c2:c0:22:91:67:70:a7:7d:
                    0e:de:45:1e:3f:25:dd:5d:2c:4d:eb:ff:12:be:17:
                    8f:c3:39:72:49:d9:6e:69:b3:cc:6e:56:1d:53:be:
                    b2:c9:c3:ec:8d:b5:1c:0a:b9:2c:e7:a1:f5:5a:49:
                    53:e9:9b:80:90:25:99:3e:3c:95:08:b8:ab:b5:11:
                    19:e1:13:db:62:3a:ad:7e:4c:7c:7a:42:16:8f:b9:
                    98:42:64:1c:91:97:cc:ab:2b:74:89:1f:8d:13:1d:
                    bc:0a:88:57:d3:6e:07:12:23:1a:93:26:26:66:4e:
                    d7:cd:0a:5b:6a:49:be:50:20:49:80:41:d5:f2:fe:
                    3d:77:1e:f8:b1:00:f7:07:26:aa:90:dc:d1:90:f8:
                    b9:5e:39:ab:e9:7f:60:0b:ee:dc:5b:4c:40:33:50:
                    ca:9c:7c:46:df:0b:9e:07:f8:54:09:02:85:31:68:
                    de:df:ca:05:73:b8:de:f0:77:f6:f9:6a:43:6d:d5:
                    89:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AF:41:E9:74:C7:BA:E9:8E:49:DC:0D:41:04:E3:DD:89:06:45:82
            X509v3 Authority Key Identifier:
                keyid:C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:f9:46:d5:ef:72:3c:63:7f:8c:bf:cf:72:72:e5:1f:06:
         e8:e8:18:cf:d8:7c:07:f4:61:7b:5b:50:95:64:f8:12:d1:76:
         0b:e8:19:cb:7d:0f:72:6c:52:32:39:ff:f7:e2:6c:2d:ea:0b:
         cf:6e:f4:28:d7:01:7f:d2:1c:2e:be:6b:62:c6:16:57:4b:a4:
         05:29:e1:1b:1b:10:28:f3:97:0d:56:22:b9:5b:ee:d9:9a:01:
         22:d3:1e:8b:0c:5c:ac:17:2b:36:c8:c7:5f:36:0d:0a:6e:8f:
         c7:72:76:d0:4f:d1:62:3b:d4:39:5c:6a:2b:df:a3:7d:f8:d4:
         53:9b:ba:81:2c:a4:8a:c3:d5:4d:cc:97:ea:bb:5b:8f:c4:b5:
         2b:75:8e:ad:47:11:1e:48:f2:6e:51:d9:f4:62:29:14:a2:d1:
         df:1d:94:34:c0:0e:3e:a7:fe:40:b2:6a:8c:6e:51:cd:59:ad:
         b4:c2:bd:bf:3d:e3:89:f7:4f:40:0c:81:71:d2:8d:6a:f8:8e:
         5a:b6:4f:40:ac:1d:51:fc:0e:d5:f2:34:7b:2e:03:7c:d6:5e:
         4b:e8:5c:b5:8a:85:3a:44:11:c9:b4:1f:c2:13:16:e0:19:fe:
         e6:45:06:23:a8:97:0a:fc:7f:6d:81:a2:cf:65:7f:16:92:d0:
         2c:cb:77:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:08:47 2025 by rpki-client