Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          ikV+59fAbiRavgPlSidjrEDZCut4dLx3fGlRCZr1pgE=
Subject key identifier:   83:06:28:D7:A0:D5:33:0B:E2:8F:EC:9A:56:76:10:0A:C3:DC:5C:97
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       085A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          0855
Signing time:             Sun 10 Aug 2025 01:48:28 +0000
Manifest this update:     Sun 10 Aug 2025 01:48:28 +0000
Manifest next update:     Tue 12 Aug 2025 01:48:28 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: TWQXAes8lSOshvjCiI3MO/LkjuqsSxHkJjiy1XAYI90=)
                          2: C6A2BFC405E511EEBD45AA854AD9E6FC.roa (hash: Q1IVIvXiqdltQfSEHcyv3gRXZTV0bEmCpfge3Kg/Cb4=)
                          3: D7C38FFA755711ED8288669DF1222468.roa (hash: PQHxtKv0UDmTHySSXriAgQgTxVwVkFl4QLy3ZSWrPUk=)
                          4: 0BB5A474755811ED8757D89DF1222468.roa (hash: OhvKA82g/2G8xwPFY7Ln9+Cew82izds05rzgS/FGkpM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138 (0x85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Aug 10 01:48:28 2025 GMT
            Not After : Aug 12 01:48:28 2025 GMT
        Subject: CN=6897fa6c-de55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:db:38:6a:70:e1:1f:6f:0d:5b:f1:ad:9b:
                    89:37:06:64:13:76:d3:72:45:b9:ca:11:31:64:f6:
                    61:d9:21:11:6b:ad:83:9e:d9:7d:95:ed:a1:4c:e6:
                    23:12:46:18:35:2e:f1:9b:7e:9e:98:6d:67:f0:b1:
                    f1:50:32:c7:68:a3:2d:86:59:10:5b:d7:9e:0f:1b:
                    57:9d:6b:f5:58:f5:c1:0d:a6:43:b5:79:b0:56:fa:
                    c8:d2:0d:57:dc:5d:ff:c7:88:a3:cf:51:ed:6f:f2:
                    23:f4:91:12:d2:de:60:45:c4:fb:3f:b4:34:54:05:
                    dc:13:53:fd:a7:e4:8b:3d:21:c9:01:7f:d3:9e:ef:
                    9e:40:c1:cb:fa:e4:ab:05:72:7e:24:49:eb:08:c2:
                    3b:3d:64:24:25:c0:25:32:96:54:64:0b:39:e9:e4:
                    78:31:8b:09:2b:2e:ab:f2:ab:98:ab:3a:3a:64:71:
                    0a:cf:f3:2f:12:86:0c:de:d8:76:80:26:72:8e:6a:
                    49:32:9e:91:f9:a2:e3:0d:0b:c4:90:59:22:7e:1e:
                    ad:c8:0b:33:a0:7c:b0:80:71:cd:c9:dd:6b:3f:da:
                    dd:a4:3b:c5:60:14:07:c8:a4:d4:92:a6:64:ba:ba:
                    07:1c:3e:e9:8d:ca:68:11:84:32:fd:61:98:ad:34:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:06:28:D7:A0:D5:33:0B:E2:8F:EC:9A:56:76:10:0A:C3:DC:5C:97
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2a:dc:7a:c0:06:92:07:2b:d1:d6:9b:b1:54:01:0c:d2:10:
         6a:fc:fe:28:de:88:6a:4f:d4:d7:51:dd:e3:61:8e:10:fa:09:
         28:ec:88:37:47:39:9c:5f:95:c7:64:e1:b3:29:07:2f:19:84:
         fb:f4:23:bb:f1:89:cc:82:d1:4d:0b:d3:48:28:7a:a8:b5:7b:
         a9:8f:00:10:eb:1b:c4:af:8d:41:b0:ae:d5:ef:ab:54:a8:72:
         9d:78:86:c8:2c:02:37:cf:1e:74:26:20:76:f0:4d:1b:40:ef:
         55:d6:3e:75:b9:1f:f9:f9:78:d0:1c:ec:c5:f5:32:66:67:25:
         60:07:80:03:51:bc:07:23:09:53:e0:87:b1:18:da:01:1b:b9:
         6b:90:54:9b:a7:89:a2:c4:e7:c3:aa:96:02:63:ad:94:80:9f:
         74:40:8d:65:b3:ba:cf:fa:4f:72:cd:32:1a:85:90:c1:d0:b8:
         8c:83:7b:b6:3f:2b:e5:3c:3b:17:18:e7:d1:bb:67:23:09:66:
         4f:04:e7:9a:f3:a0:7e:c7:26:96:62:4b:2f:a3:20:e0:82:96:
         9a:50:1c:c4:7d:ce:79:e2:2a:9b:ff:a6:9a:18:70:07:8e:11:
         d9:ef:42:9f:cf:b0:1b:cd:71:fa:ca:84:1a:fd:f2:a3:6a:5e:
         ad:e8:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:30:18 2025 by rpki-client