Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
File:                     m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft (raw, json)
Hash identifier:          2KQDNGCnIhV54MaGie4+hsDX0FczgMakUbDgDq9ClW4=
Subject key identifier:   96:BB:B2:03:BC:12:76:5F:13:DC:39:03:4B:17:2E:FB:D5:6E:86:77
Authority key identifier: 9B:7C:D4:91:3D:4D:40:C2:C8:E1:0B:EA:39:4A:85:96:BC:3F:E7:76
Certificate issuer:       /CN=F3674116AF/serialNumber=9B7CD4913D4D40C2C8E10BEA394A8596BC3FE776
Certificate serial:       053A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
Manifest number:          0538
Signing time:             Sun 15 Jun 2025 02:42:37 +0000
Manifest this update:     Sun 15 Jun 2025 02:42:37 +0000
Manifest next update:     Tue 17 Jun 2025 02:42:37 +0000
Files and hashes:         1: m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl (hash: FfLkrx0q6BlpbERsm6X1rYxv8MFXBmPplES3YCX61ck=)
                          2: 51CD22A06E3F11EC8BCA63C15A40D577.roa (hash: E5rUiTU+lgeiOsadbVjO4CnL7A4nHG6PajRp8I6dh5k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674116AF, serialNumber=9B7CD4913D4D40C2C8E10BEA394A8596BC3FE776
        Validity
            Not Before: Jun 15 02:42:37 2025 GMT
            Not After : Jun 17 02:42:37 2025 GMT
        Subject: CN=684e331d-51f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cf:cd:39:49:56:3c:2f:9e:30:40:bb:76:80:
                    23:1a:a7:23:1d:ba:b9:26:a3:ef:c4:69:17:93:c2:
                    1b:3f:30:2c:4c:2f:c2:8f:0c:f8:63:bf:ba:05:24:
                    ec:b3:59:d6:e2:2e:e3:f3:58:d6:94:bb:5b:0f:71:
                    cd:fe:8a:20:58:95:88:dc:96:89:bd:0b:6c:1d:af:
                    98:15:a0:f9:21:54:7f:7a:4f:04:77:23:43:1e:a7:
                    59:e3:2c:cf:4f:f0:7e:8e:c0:f5:5e:35:45:56:50:
                    c7:44:56:5a:12:bb:0d:81:e5:03:fa:20:76:7a:93:
                    cf:fe:43:d8:39:89:47:7e:8f:02:71:92:a6:89:3a:
                    ca:a2:4c:a8:7e:25:c7:f2:43:ae:81:9a:43:6a:25:
                    a1:5f:dc:37:35:0d:d6:19:ec:ba:50:1e:82:80:97:
                    4d:e6:23:48:2c:3c:fa:95:df:18:4d:1a:4e:b8:00:
                    da:a8:22:ba:b3:c3:98:ef:24:9d:4f:da:d7:f0:92:
                    6c:dc:81:97:53:5e:30:72:c0:01:88:43:2d:e0:f2:
                    58:91:ef:6c:05:3b:d7:3f:53:e1:5f:55:76:38:43:
                    89:ed:b8:54:dd:c3:91:99:1f:5e:d8:1f:ee:05:b1:
                    c1:81:6d:fb:22:bf:dd:70:d4:de:c5:f1:db:94:af:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BB:B2:03:BC:12:76:5F:13:DC:39:03:4B:17:2E:FB:D5:6E:86:77
            X509v3 Authority Key Identifier:
                keyid:9B:7C:D4:91:3D:4D:40:C2:C8:E1:0B:EA:39:4A:85:96:BC:3F:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a7:88:32:96:f7:cf:3e:f6:bd:c2:22:57:7a:3a:bc:09:44:
         bc:ee:43:27:2f:a8:80:6d:bd:2c:41:4b:80:45:8e:b7:15:84:
         f8:36:d0:8d:36:16:5d:4f:db:b0:cf:89:af:f0:75:17:1e:3a:
         e9:5b:a7:a7:a5:db:7d:97:ef:b6:0f:ce:6e:f4:75:3f:51:e0:
         8f:8f:6f:51:14:fe:f3:22:62:91:1c:98:ba:b9:b3:1b:ee:e7:
         ba:c4:3c:f7:3d:c0:69:b1:4d:55:6f:19:8d:a2:f4:da:07:5c:
         64:be:c5:54:84:6f:e6:98:78:f8:6d:3c:e8:dd:85:5b:c9:25:
         39:57:04:15:a7:03:6c:65:23:7b:09:00:f3:81:4c:1a:77:7c:
         57:1e:39:36:d2:47:4c:78:a6:cb:31:74:39:ba:8e:5b:ed:bd:
         b4:a0:ea:e5:aa:94:9d:2f:a0:3d:8a:69:c9:a9:e9:54:64:b1:
         0c:e8:f9:75:fc:78:d5:ca:79:fb:bd:ea:85:06:28:76:be:c9:
         81:51:f5:84:b2:93:bb:60:5e:7e:ed:75:ba:c0:56:2f:f1:41:
         3a:93:8c:76:b4:cf:cd:52:41:1a:ea:0c:33:04:d4:43:5d:fc:
         12:c3:10:e9:38:24:4d:5c:75:70:63:d8:5b:36:05:2c:6f:2f:
         85:39:ef:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:10:57 2025 by rpki-client