Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
File:                     LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft (raw, json)
Hash identifier:          qrgeWeEx2/41aPEe4JIEUvYq8UO2XiM1MrRQ6A3Xqa0=
Subject key identifier:   65:A3:B7:FE:A1:09:4A:06:B7:1C:37:6B:11:F3:D0:9C:73:00:4E:B6
Authority key identifier: 2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
Certificate issuer:       /CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
Certificate serial:       0365
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
Manifest number:          0364
Signing time:             Mon 16 Jun 2025 03:34:38 +0000
Manifest this update:     Mon 16 Jun 2025 03:34:37 +0000
Manifest next update:     Wed 18 Jun 2025 03:34:37 +0000
Files and hashes:         1: LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl (hash: OE5T+jHyW1AH5xRCNw2yI7+Ag0D7M2LZxz5uoJpLtNA=)
                          2: 9AA2C8F4A72111EFAFB5507D762E951A.roa (hash: BkVr0GywD5ne77AbuN3SlJGoFofC7j3OIJUx5FhoLhs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
        Validity
            Not Before: Jun 16 03:34:37 2025 GMT
            Not After : Jun 18 03:34:37 2025 GMT
        Subject: CN=684f90ce-85ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:d0:67:2c:4c:39:0c:41:21:16:38:68:85:
                    0b:21:44:5c:57:eb:f2:08:b7:c8:42:00:86:19:90:
                    b0:4a:02:88:78:5d:33:8d:4c:c2:ad:26:af:4d:3d:
                    5f:4d:15:d8:4e:de:79:1f:9b:03:b1:07:75:e0:bf:
                    3f:07:1d:e1:97:53:10:b2:b7:ba:2c:c3:ea:77:40:
                    f2:5f:c7:95:93:24:4a:d3:d9:e7:03:94:1a:f2:da:
                    7a:20:7e:40:53:2e:f4:e5:af:8f:42:d8:c3:1e:5b:
                    24:17:64:6b:7e:dd:8c:a8:74:3e:9b:a0:00:95:0e:
                    70:4e:58:c5:64:47:2c:59:61:1e:e1:a7:73:eb:b8:
                    cf:6c:fc:ad:42:57:4d:ca:f7:4c:26:cb:54:c0:e1:
                    58:df:8b:49:5d:ea:f8:58:ad:99:b2:c7:ba:66:1c:
                    be:e7:8d:c4:2c:a1:88:b1:5c:e5:86:61:71:8f:7b:
                    03:ac:e0:1d:02:bc:b1:a4:88:7a:f6:4e:a3:0f:a9:
                    2c:f8:86:5c:e1:6e:19:09:51:5a:9d:6d:75:f2:a9:
                    f6:81:de:11:a1:a5:91:6d:9a:8c:b1:88:c3:b9:68:
                    86:7a:ca:02:a8:40:93:e9:90:1b:52:86:18:38:2e:
                    a3:0a:75:92:9e:44:2d:e3:ee:0c:9b:f5:05:94:82:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A3:B7:FE:A1:09:4A:06:B7:1C:37:6B:11:F3:D0:9C:73:00:4E:B6
            X509v3 Authority Key Identifier:
                keyid:2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:b0:57:ae:a5:b4:2f:c5:2e:83:ba:52:46:a5:50:d4:58:
         18:09:1f:c5:6d:4d:93:01:8c:c4:db:92:01:e3:6b:45:f1:34:
         da:26:6b:f5:f6:93:5b:da:30:66:01:76:a6:68:e1:44:07:94:
         a0:7d:07:da:05:4d:79:6f:4e:3b:b9:cb:97:d3:5f:9f:c2:32:
         95:6e:9a:f4:cb:15:af:79:54:ad:5e:82:3a:ce:7d:b3:a8:e7:
         46:e9:96:c0:f7:e0:6a:0d:00:e4:ee:40:b6:44:84:3a:47:1d:
         e5:d5:3b:f9:28:f8:18:e7:87:8e:72:6a:4d:e5:02:2d:b6:b0:
         a9:85:d8:49:65:61:a8:54:9b:6a:6f:0f:6d:fb:3c:9b:00:74:
         22:c2:8e:51:11:9d:7b:b2:57:d7:7a:7e:f7:5b:e7:f8:de:a4:
         02:6e:c7:dd:0c:83:99:97:63:c5:60:b1:43:bc:af:81:05:b3:
         ec:0f:cd:ed:1e:1a:be:0b:13:4a:6a:0b:06:74:68:53:14:e1:
         6f:4e:f7:c6:12:f9:e4:9a:df:a0:52:f3:d9:12:06:61:4b:b9:
         9e:e9:2c:34:3d:3c:8e:9e:ae:79:e1:27:09:37:df:8e:39:7f:
         0f:22:f5:b0:28:be:9b:4a:b1:00:61:42:74:5c:b0:f5:d8:bf:
         47:62:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:11:07 2025 by rpki-client