Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
File:                     jq1LkUtvfJKOEv440cRAvFMJwTM.mft (raw, json)
Hash identifier:          hKcOOEub6BUEHTaBeAGORjg8vSi0zKCWLIvHrp5Mvfo=
Subject key identifier:   72:1F:E0:49:DA:99:EC:A0:7C:B5:E8:D8:73:F9:C2:3F:85:10:3D:F7
Authority key identifier: 8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
Certificate issuer:       /CN=F3642818AF/serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Certificate serial:       042E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
Manifest number:          042C
Signing time:             Fri 08 Aug 2025 03:15:56 +0000
Manifest this update:     Fri 08 Aug 2025 03:15:55 +0000
Manifest next update:     Sun 10 Aug 2025 03:15:55 +0000
Files and hashes:         1: jq1LkUtvfJKOEv440cRAvFMJwTM.crl (hash: MMT5mmd17bPjYcFaQGromqf/NPCq5JREFqVbXCk3Qfk=)
                          2: F25C9A0249FE11ED99C68D94F1222468.roa (hash: Vf9lw2qgHPDTfNIjpz7j0MfeufKn0mia6LXbqdEhm8E=)
                          3: 286E0ED249FF11EDBA4A1095F1222468.roa (hash: e8yRru/YzQ8KdKtbMVpS+nKrVYipBI+fhgmIlkUMpWo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 03:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642818AF, serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
        Validity
            Not Before: Aug  8 03:15:55 2025 GMT
            Not After : Aug 10 03:15:55 2025 GMT
        Subject: CN=68956bec-e72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:b1:fb:87:f1:69:ae:be:8e:ce:9f:7c:66:
                    e0:ef:4f:0a:78:62:92:3d:28:5e:0c:b8:3b:be:d0:
                    38:f7:c2:41:70:ae:ab:d6:02:5a:37:3e:32:b7:d6:
                    fd:51:a2:c4:97:a9:e6:92:a4:32:ee:fa:6e:c8:32:
                    55:61:fd:dc:c9:45:0c:21:ce:bc:62:e8:b2:6e:f4:
                    84:3a:e4:39:83:10:e1:30:af:d7:cb:3c:85:57:f1:
                    cd:7d:6b:2a:a1:50:ad:7c:73:1b:49:d6:e3:41:d7:
                    79:48:e0:e8:8c:d7:4b:f2:e0:96:fd:cc:b0:7e:28:
                    89:0f:88:7f:f4:3f:07:01:46:50:ab:d8:7d:41:6b:
                    60:85:35:45:b5:46:51:9c:03:51:28:7e:8e:e0:be:
                    bb:3d:32:a0:3b:b8:fd:51:fc:06:b1:4e:b3:ca:52:
                    c4:d2:50:70:5e:99:1e:ed:97:94:44:54:83:2e:08:
                    7d:8b:a8:ce:f7:49:fd:1a:14:a4:ba:69:7f:0e:e3:
                    c7:47:3e:28:30:64:b5:0d:0b:ca:28:51:00:5f:49:
                    18:e1:a5:2a:e7:b9:a9:01:cd:9d:f5:0b:e9:71:2a:
                    81:32:23:1b:71:d2:2e:4d:4b:f9:36:af:65:75:9a:
                    21:e2:5a:30:27:e9:97:46:3d:1b:dd:13:e9:c0:73:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1F:E0:49:DA:99:EC:A0:7C:B5:E8:D8:73:F9:C2:3F:85:10:3D:F7
            X509v3 Authority Key Identifier:
                keyid:8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:52:f4:dc:e8:56:3c:9b:22:75:fd:30:09:63:ff:80:a9:5c:
         84:5a:59:90:27:54:c4:00:03:33:21:42:0a:dc:d0:1c:29:09:
         0b:7b:35:ba:ed:11:76:b4:d8:85:80:d3:16:90:37:97:7b:9b:
         91:3d:4e:37:9b:b4:57:ff:12:26:bc:77:e7:7c:66:96:7a:e6:
         03:01:b1:e9:a0:55:a1:5e:c2:fb:50:09:fe:c1:bb:90:4f:ea:
         64:73:57:39:73:e5:bb:01:90:92:b4:45:7f:88:71:ba:9f:0b:
         a8:81:b9:e8:c0:58:50:69:fe:ab:f2:02:49:10:9d:b5:55:43:
         40:99:92:f3:cd:8f:78:b3:bf:f7:97:ff:f4:71:d7:78:0f:b7:
         32:32:b0:7e:61:76:8d:c3:8f:48:1a:98:e2:6b:79:2d:56:0e:
         d1:1a:3d:a8:b0:ba:67:e4:32:d0:d1:64:11:e3:a5:0c:65:5f:
         6f:3b:80:f1:8c:7d:d0:cb:8f:84:ec:19:ac:91:ec:34:ae:a9:
         19:33:8e:1d:eb:5b:17:80:69:ed:5a:11:2b:db:e6:79:06:5a:
         b5:3d:bd:b8:9a:7c:e7:3f:1c:ff:5c:e4:05:a2:f5:6d:dc:a2:
         7c:b8:37:6f:5d:df:92:49:b7:a4:08:5b:8d:bd:70:94:0e:17:
         e9:c7:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:19 2025 by rpki-client