Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
File:                     3XSZqMjBKrZ-FetJKAimku1LWfQ.mft (raw, json)
Hash identifier:          FBDFMpgaXovyjPjo07wFBgQlQl8/7Qytp7Fr7q1biig=
Subject key identifier:   2C:25:CD:3F:10:87:3A:02:D2:E5:11:F1:78:5B:A2:38:62:C6:E9:59
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Certificate issuer:       /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial:       063D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
Manifest number:          0637
Signing time:             Mon 11 Aug 2025 02:22:53 +0000
Manifest this update:     Mon 11 Aug 2025 02:22:52 +0000
Manifest next update:     Wed 13 Aug 2025 02:22:52 +0000
Files and hashes:         1: 3XSZqMjBKrZ-FetJKAimku1LWfQ.crl (hash: /vWUEM+uII5SO9vEAHmUJc4l8i3GwUNe9DgkSmKSmaY=)
                          2: 1D79094AD6B211EFB2D3FF42762E951A.roa (hash: DubCazr+DZeeKepCVu6sjSupYBoZCqIo6H/IBZvf+PU=)
                          3: FB1FEEF4D6B111EF8099CF40762E951A.roa (hash: +7phxm5TzkZRyeFGhR37ALd4AEcaf9TKaQBnWBb/gF0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C79EAF, serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
        Validity
            Not Before: Aug 11 02:22:52 2025 GMT
            Not After : Aug 13 02:22:52 2025 GMT
        Subject: CN=689953fd-b029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:c9:4c:04:50:5e:f2:8d:11:43:90:c7:b8:
                    e8:f6:91:0d:38:8a:e1:48:3b:fa:d3:d7:b1:e4:88:
                    2f:13:22:68:57:f1:de:d1:93:e9:ae:ba:4c:95:19:
                    eb:63:c8:84:34:48:33:64:cc:50:b0:7d:89:50:f5:
                    23:10:59:a0:01:fe:b9:6b:27:b8:41:98:32:c1:60:
                    15:17:bc:4f:82:ac:24:62:00:83:d9:68:fc:1d:11:
                    bb:3e:95:af:a3:34:a4:7f:11:45:e6:5a:60:3b:b2:
                    c4:05:11:44:06:6c:ed:5a:be:d7:5d:04:a5:de:9f:
                    54:94:02:e1:53:0f:1e:6d:8e:de:56:d5:c7:bc:11:
                    d6:33:aa:ab:0f:c9:84:39:0f:20:d0:a4:35:c4:1a:
                    e1:78:3d:e3:23:cd:04:bd:c9:48:99:de:7c:82:aa:
                    fd:af:90:25:c1:cc:34:67:c0:6a:12:9c:44:8c:5d:
                    04:eb:55:a8:fe:94:08:81:93:f3:1c:04:60:51:40:
                    c2:c4:6e:5d:c5:c1:55:c4:f4:4b:a8:5b:ae:5e:ed:
                    2b:75:54:c5:20:90:81:9a:bf:11:a6:99:6c:d5:d9:
                    37:4d:e0:c0:d6:47:31:4b:bf:97:d7:0e:3f:9e:a1:
                    ad:21:17:69:c5:5a:1e:1b:6d:72:c8:4b:22:b6:e7:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:25:CD:3F:10:87:3A:02:D2:E5:11:F1:78:5B:A2:38:62:C6:E9:59
            X509v3 Authority Key Identifier:
                keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:c2:a2:c3:40:c3:ec:46:d2:76:e2:81:5c:32:84:04:de:96:
         9e:c1:02:46:ff:3f:c6:ff:14:d9:e8:86:df:5d:02:9d:85:f5:
         2d:1a:c1:d8:61:f8:48:18:37:8e:cd:17:80:b8:56:1f:7e:a5:
         2e:70:74:e1:82:05:57:3d:a7:7b:61:18:a0:37:52:e9:c8:7b:
         0d:21:7a:14:31:1c:3a:0d:72:5c:18:a8:d8:59:12:60:bc:cd:
         d1:ba:98:fd:e6:4b:ab:d3:9d:ef:c5:8e:9a:cc:df:c4:38:8c:
         a7:c5:bb:46:71:03:eb:49:1c:61:b8:26:40:e8:7b:58:98:de:
         3e:6d:6d:67:cc:65:c0:c3:8e:1a:c5:93:a3:5f:57:4a:48:f2:
         33:9b:0f:75:b7:f6:2c:f7:50:9d:f5:69:f3:87:48:92:7a:91:
         45:49:f9:47:7d:96:e8:51:1f:eb:67:bb:9d:f9:ab:3f:88:a0:
         ec:fe:48:61:31:8d:86:e3:6b:52:6e:3e:96:e8:72:82:58:27:
         de:ee:3a:87:ac:d7:3b:30:a1:3d:4b:c7:38:f1:20:ae:70:5f:
         c2:c0:eb:71:49:e6:34:b9:53:16:f7:85:9e:4a:ff:31:fd:ce:
         fe:2c:0f:83:36:34:85:64:44:0d:c7:bd:ef:47:98:fc:2b:72:
         14:96:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:49:51 2025 by rpki-client