Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
File:                     JLXuZ0cVou7uiGTqX17kcyPPdmw.mft (raw, json)
Hash identifier:          T2hIFN5kztoIMVml8f5s67Wu1D3yAiAekPIGPFcW3Q0=
Subject key identifier:   A1:81:58:D3:EE:B9:68:87:DD:24:2E:D0:A6:68:62:D0:2F:FF:DF:96
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       0171
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
Manifest number:          016C
Signing time:             Sun 10 Aug 2025 04:58:09 +0000
Manifest this update:     Sun 10 Aug 2025 04:58:08 +0000
Manifest next update:     Tue 12 Aug 2025 04:58:08 +0000
Files and hashes:         1: JLXuZ0cVou7uiGTqX17kcyPPdmw.crl (hash: XnvkKGfjlZwDyRhP1szpePjmr1/13wddMLbxaZY1hWM=)
                          2: C8C3F9C2B0B511EF88E1CA4C762E951A.roa (hash: Mh36UH7NwuelUC3NMhOTPwUhu32iweIo8TXpZWT/LM0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Aug 10 04:58:08 2025 GMT
            Not After : Aug 12 04:58:08 2025 GMT
        Subject: CN=689826e1-9670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:2f:9a:8d:36:34:f7:c5:60:94:ce:b1:fd:
                    df:97:5c:93:8d:d8:3d:46:96:a1:7f:55:57:9c:e1:
                    28:69:20:50:bb:ca:18:dd:36:6f:2f:c0:7f:57:c6:
                    d2:be:20:87:cc:52:08:e5:6d:2c:ed:55:ed:76:db:
                    ae:d8:d4:7d:be:59:53:52:0c:f9:74:58:a8:29:61:
                    47:c2:35:a4:a0:38:9d:4e:9d:fa:a9:37:69:8e:23:
                    a0:95:12:fb:30:cc:ff:08:31:cf:bb:f2:29:09:df:
                    a0:a4:e2:a2:8a:e6:55:e4:bf:23:97:03:07:13:6f:
                    d9:c7:74:56:ea:bf:57:5d:f3:6c:53:92:da:ed:f1:
                    72:19:52:29:16:86:47:bf:ef:00:9a:0f:c5:1c:8f:
                    16:28:3e:95:ba:8e:12:e8:33:8f:1c:4b:8f:24:d2:
                    90:29:b5:0e:05:38:64:f0:3b:b9:de:d8:95:f9:7d:
                    14:fe:18:c8:ce:d1:35:02:dd:c8:f3:7c:98:c4:42:
                    3b:5a:e2:dd:c7:32:34:f0:38:d0:37:b4:51:e6:e6:
                    6e:e7:80:a2:88:3d:9b:b4:e5:5d:b6:15:81:67:5d:
                    15:00:eb:8b:d7:01:37:57:66:4e:be:59:fb:d6:ac:
                    40:81:3e:16:a4:ef:27:b0:4a:e6:0a:39:9e:99:c7:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:81:58:D3:EE:B9:68:87:DD:24:2E:D0:A6:68:62:D0:2F:FF:DF:96
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6b:bb:05:4f:e7:15:f3:f2:6b:31:23:3c:9e:b6:10:89:9b:
         6f:82:d5:56:06:d5:0a:71:95:54:97:fa:86:f0:79:52:57:c3:
         f7:ca:2d:64:b8:c8:df:c1:04:61:d4:85:89:b9:c4:e4:e3:49:
         eb:17:53:f4:cc:60:4f:1b:ce:f9:d7:d4:a2:33:24:3a:8b:76:
         47:ca:8b:7c:5c:9a:42:29:c8:f4:a7:99:8c:57:f4:75:f0:87:
         bf:aa:22:a0:54:f3:bd:0f:2d:2f:48:ff:44:c6:a3:59:5b:b6:
         5d:91:3c:05:ad:f7:ae:56:ad:a6:e7:f0:05:e5:48:03:4b:d9:
         04:f7:ce:ec:b7:bb:1e:29:cf:e9:cc:e3:cd:ab:7a:0e:58:e3:
         75:93:bf:f1:c0:76:9c:53:94:33:5a:1b:48:46:6a:89:42:20:
         f2:85:96:a7:af:fa:f1:86:a6:34:13:85:9a:31:da:2c:f6:03:
         89:10:5d:90:77:d3:d5:d2:30:5f:5b:6e:38:74:e0:29:dd:6d:
         e0:8a:1b:71:97:0c:24:9f:cd:46:5c:ee:82:e8:37:1f:83:3c:
         e0:d1:40:b0:68:3c:6b:b9:61:eb:d3:8a:1d:7f:de:d6:e7:60:
         4b:a2:f5:be:27:11:65:b8:40:2d:78:f8:ba:fb:d4:bf:36:d5:
         22:33:f2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:05 2025 by rpki-client