Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
File:                     DV2bCS_jnIf5O8uUysP2yR0WyOs.mft (raw, json)
Hash identifier:          JFu8mu8SzShWvF1OPMJYf7Ox7kolPbf4FV8PKnQIEtU=
Subject key identifier:   88:33:4A:58:CA:EA:65:19:7B:19:4B:D7:2C:7F:4D:75:9D:2D:88:FF
Authority key identifier: 0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB
Certificate issuer:       /CN=F367890AAF/serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
Certificate serial:       092E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
Manifest number:          0924
Signing time:             Mon 04 Aug 2025 01:27:07 +0000
Manifest this update:     Mon 04 Aug 2025 01:27:07 +0000
Manifest next update:     Wed 06 Aug 2025 01:27:07 +0000
Files and hashes:         1: DV2bCS_jnIf5O8uUysP2yR0WyOs.crl (hash: yGb9gCl2T02BRjVUit/362iEd869xTczD8AJ+IGPK/4=)
                          2: 1CD89842944B11EA8D91181BF8AEA228.roa (hash: G8QTB1cDSlhFc1aM1m+wP1xl5Ubb7Vbu7br4H677GAs=)
                          3: 1385324820B311EA8A79CB75F8AEA228.roa (hash: E+0kaNnyaz2XaAgp2UmW3UiOevGh8K77GCjxHRNxjgk=)
                          4: 8CD6FED820B311EAAC843476F8AEA228.roa (hash: Gf1aru2E3Yggqz5sr3+VkWloIXes+1L3V6Xe+EwFJW4=)
                          5: 6C0163EC20B311EAB8D01576F8AEA228.roa (hash: qKJSwkjO0UEEtt3fvEcg777sLhnc5F/s5CDz6fXaO0M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2350 (0x92e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367890AAF, serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
        Validity
            Not Before: Aug  4 01:27:07 2025 GMT
            Not After : Aug  6 01:27:07 2025 GMT
        Subject: CN=68900c6b-e105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:01:df:6b:2d:03:f1:3b:3c:89:8c:cf:4b:
                    fb:c6:94:57:f0:a3:be:34:cb:75:a7:dd:d1:af:88:
                    7d:19:e8:aa:53:e3:52:78:fa:d3:47:48:bc:38:c0:
                    ab:aa:1c:a7:28:7b:89:a6:de:02:6e:0e:ee:99:76:
                    8e:53:27:46:95:a8:64:bb:2b:d9:ec:4f:8c:76:77:
                    0b:67:9d:e2:de:0e:22:4a:8f:b3:54:73:5c:b1:73:
                    67:c0:99:7c:96:7e:7d:ae:78:e5:7b:50:6e:a6:88:
                    2e:e2:3f:f9:26:01:89:32:72:1e:06:e1:96:bc:58:
                    1c:20:ec:b5:ae:f7:38:5f:25:bb:82:1d:c2:3b:ee:
                    55:b8:9f:89:34:01:13:30:51:7d:a1:18:77:5a:55:
                    f0:67:fe:51:ed:fa:09:fc:7f:fc:3a:95:d7:fc:61:
                    8c:3e:a5:6f:f6:c2:23:29:cc:d4:b9:e9:13:8a:d4:
                    83:bb:1a:83:54:c8:fc:f2:e9:af:35:aa:3e:68:a3:
                    1e:bc:9e:da:20:28:30:20:b9:38:78:36:32:22:ff:
                    71:08:06:3f:1a:f5:86:9c:f7:1c:4f:ca:a7:ec:71:
                    73:47:c0:da:9c:0e:44:8a:61:4c:31:a3:fc:bb:d0:
                    c0:be:19:82:1b:68:6c:4c:c9:70:b4:ef:61:04:d0:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:4A:58:CA:EA:65:19:7B:19:4B:D7:2C:7F:4D:75:9D:2D:88:FF
            X509v3 Authority Key Identifier:
                keyid:0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9e:37:87:f3:bc:9f:c3:81:75:75:f2:fb:e1:96:a0:e6:54:
         f4:fd:29:3c:dd:8a:17:63:5a:00:3d:55:1c:f0:74:f6:7f:c4:
         cb:0b:1a:72:60:88:08:f3:cf:3f:b8:2e:b3:7b:fa:56:10:1a:
         de:79:7a:fb:0b:7c:f9:2b:87:6e:41:dc:35:81:8a:d1:db:cd:
         9f:1e:3c:91:13:0a:4b:5d:22:45:ff:fd:de:37:0f:9a:71:e6:
         0c:09:5f:b9:b0:0b:bb:94:99:a5:88:53:75:9e:4d:af:3d:d7:
         dd:71:a1:6a:80:47:8d:8b:94:a6:41:7c:24:02:ee:05:70:8d:
         81:23:9c:e7:d7:77:b6:12:fc:bc:33:94:0e:b0:fd:68:2f:d5:
         68:76:93:1b:6e:35:68:33:72:65:be:8f:97:0f:8c:3a:60:29:
         4e:9a:a5:e2:72:fa:cd:68:91:bd:d8:b2:a0:36:2e:aa:b5:8f:
         16:79:61:53:29:58:c5:79:c4:a9:d2:1d:0d:1c:61:d1:e7:8a:
         cf:91:92:14:17:b7:25:95:d7:4f:e5:ca:6f:10:3e:cc:61:eb:
         78:fe:23:96:c5:85:a1:dc:a7:d4:28:5c:26:de:5b:29:07:8f:
         c8:1c:94:1f:8e:2d:4e:7f:cd:71:2e:bb:a7:88:b4:63:62:72:
         d1:18:b4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:56 2025 by rpki-client