Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
File:                     HJG1r5tg6j8cHbh-rsbafC6gqHc.mft (raw, json)
Hash identifier:          y43KkuOuULT11rJWkMDWnsDbXfuUU/1U2jHy9dMeCA4=
Subject key identifier:   6F:97:E0:40:F1:97:B6:73:92:55:65:37:EA:70:36:76:A1:31:DF:F6
Authority key identifier: 1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77
Certificate issuer:       /CN=F36432B6AF/serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
Certificate serial:       036A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
Manifest number:          0368
Signing time:             Mon 16 Jun 2025 03:34:11 +0000
Manifest this update:     Mon 16 Jun 2025 03:34:10 +0000
Manifest next update:     Wed 18 Jun 2025 03:34:10 +0000
Files and hashes:         1: HJG1r5tg6j8cHbh-rsbafC6gqHc.crl (hash: UA/UADVFn8uxJ7eBvIgcerOGAcC4WWFAVKmF7uxt0Uk=)
                          2: A3334908B75911ED9D1DD491F1222468.roa (hash: kfeGWGsJ8YUWnbsW+Omh/kxV1I9agx30BHnCONag860=)
                          3: 4DDB7228038511EEAD70B94C4AD9E6FC.roa (hash: c2ddbCPHmmvJv1S8GCuUfE7hXuI9EaV9rtxUGDdpShs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36432B6AF, serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
        Validity
            Not Before: Jun 16 03:34:10 2025 GMT
            Not After : Jun 18 03:34:10 2025 GMT
        Subject: CN=684f90b3-7427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:68:54:b3:45:6f:2a:6c:80:3c:09:10:40:
                    ba:fe:5f:20:e3:fb:1d:02:ea:a7:a3:85:13:0c:07:
                    dd:47:a8:b3:ff:c6:4f:bd:cb:5b:53:dc:27:99:58:
                    d8:d8:f6:88:d9:dd:20:9d:bf:88:5a:49:a2:a6:3b:
                    6c:5a:b8:d4:d0:28:85:69:a1:d9:88:fa:0e:1e:03:
                    9a:93:26:17:7d:84:52:27:ea:6a:58:e7:f2:bb:24:
                    84:2b:46:66:30:c5:a0:a0:d9:0b:fe:5a:e1:9f:aa:
                    91:9d:c1:38:cf:a6:00:92:28:b3:3d:7f:6e:8b:54:
                    ae:e8:cf:af:37:22:70:39:3f:5d:2e:42:49:40:df:
                    08:55:02:8f:77:b9:98:91:42:17:e1:99:2a:1e:a6:
                    3b:d5:a3:b5:b0:e5:9a:d0:41:0f:a9:12:51:c7:f3:
                    19:8c:46:72:13:26:56:28:87:75:45:fd:f9:b4:3c:
                    8a:f0:4e:a1:f3:1b:0f:3c:e6:55:ad:cd:2c:13:8e:
                    a1:97:e3:98:46:14:25:92:38:30:55:7c:05:4c:82:
                    8f:79:58:df:f4:aa:20:11:3b:78:3d:1b:4e:f3:62:
                    d7:e8:57:af:30:a9:8f:5c:e9:38:f9:b1:a6:e1:60:
                    82:21:a7:1c:51:a0:6e:0e:d9:fd:90:7e:a1:21:7e:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:97:E0:40:F1:97:B6:73:92:55:65:37:EA:70:36:76:A1:31:DF:F6
            X509v3 Authority Key Identifier:
                keyid:1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ef:66:0a:4d:45:05:92:29:57:73:a6:59:4f:96:14:64:15:
         98:51:88:c8:98:1c:34:11:bc:c9:2c:2e:16:18:8a:3d:b3:4a:
         69:23:1f:ca:05:dd:3f:de:1b:15:12:ec:e1:58:74:4d:4a:80:
         bd:b7:58:4d:7a:4d:0d:41:c8:23:4c:3c:e9:ce:50:70:b6:b2:
         7e:b9:a8:a7:15:01:b8:70:7f:59:16:2b:ff:99:3c:41:bc:e5:
         80:7c:46:77:d6:a4:68:61:f5:e8:3e:ad:36:66:50:5f:18:59:
         44:aa:33:bc:8a:fc:f3:75:52:de:17:92:50:ed:29:57:65:6a:
         56:96:bb:3c:ff:2f:96:01:8e:8e:fb:a2:f1:f5:a4:65:70:92:
         56:14:7a:fb:5f:08:14:d8:45:29:da:4c:f2:fb:ef:5f:74:66:
         7e:69:19:68:b5:cb:a3:8b:cc:8d:f6:72:59:d2:bc:64:c5:26:
         43:b7:b5:42:e9:84:64:77:04:56:4d:a6:25:ae:3a:24:2f:08:
         ce:f4:c9:ba:54:a9:73:13:f1:ff:f7:82:76:ed:31:27:c8:4b:
         4e:ed:a9:15:b9:44:d5:fe:06:2e:60:69:bd:39:bc:fa:7f:1a:
         46:46:9d:75:58:46:5a:46:ae:63:de:b3:c7:42:3e:4b:82:9b:
         60:a8:41:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:01:53 2025 by rpki-client