Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          h1xyUgA9htOKmwH7+Ih3bnQWYkSIaXcOE7IoCCnyvc8=
Subject key identifier:   E6:C8:37:2B:B3:BF:6B:73:2C:5C:62:AC:7C:A5:F2:FD:0F:4B:96:AF
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       020F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          020D
Signing time:             Wed 06 Aug 2025 04:26:43 +0000
Manifest this update:     Wed 06 Aug 2025 04:26:43 +0000
Manifest next update:     Fri 08 Aug 2025 04:26:43 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: tAsPmo+gT3CGU9t311uD78cs/eiSa/jthSFI8tcyaXo=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 08 Aug 2025 00:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Validity
            Not Before: Aug  6 04:26:43 2025 GMT
            Not After : Aug  8 04:26:43 2025 GMT
        Subject: CN=6892d983-24af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:fd:3c:44:4c:03:0a:c8:51:0a:f8:ef:fc:
                    84:7f:fe:3b:31:fd:ad:15:8d:fa:d4:11:bb:c0:db:
                    6c:a7:bc:eb:e8:88:0e:7e:9f:31:e2:97:33:54:cd:
                    af:fb:a4:a4:ad:b1:29:ec:e0:76:c8:19:90:90:7c:
                    29:f9:2e:f9:3c:bd:3c:e3:6a:10:fc:da:4a:f4:89:
                    00:53:9c:b9:d5:23:38:80:37:f9:c3:03:bb:a4:1a:
                    84:7c:a1:e3:95:05:9f:14:28:1c:a6:6b:2e:b9:31:
                    5f:4a:9d:4c:0a:64:41:07:f5:78:62:00:6f:2d:a8:
                    ab:f7:6a:05:8a:30:c7:b1:5c:a5:cd:0a:19:17:67:
                    62:8d:8f:60:74:14:ed:29:89:fe:83:25:d0:1a:ad:
                    63:d6:61:6d:07:1f:03:b2:80:a6:1c:c1:d3:a8:af:
                    4b:e9:34:63:b5:f9:f8:82:04:c9:6f:fe:cc:16:c0:
                    28:77:dc:f8:a6:eb:c3:79:65:99:8a:d9:19:c5:bd:
                    ce:98:bd:bc:3f:81:d2:28:55:9c:95:7d:84:a0:8a:
                    35:d1:3e:a9:e4:76:8f:29:05:34:6c:7f:47:94:87:
                    1f:90:6f:bb:9c:6d:b7:79:27:41:0f:65:b2:c6:42:
                    20:3c:58:ae:9d:77:ca:ab:57:76:6e:c9:5a:50:86:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C8:37:2B:B3:BF:6B:73:2C:5C:62:AC:7C:A5:F2:FD:0F:4B:96:AF
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6f:bd:58:1a:ce:e4:bd:4a:91:d7:98:0c:4d:cf:12:ad:e9:
         73:96:2c:44:d1:83:01:16:bc:d8:50:2e:16:2f:53:09:26:77:
         b2:0d:f3:f9:f1:63:24:51:e1:4d:11:e3:a9:5b:9f:80:7b:12:
         68:19:0c:e8:ce:b3:93:0f:4b:f6:66:4e:95:50:01:7b:46:0e:
         8c:cb:21:dc:bc:65:f3:2a:59:ae:d8:28:04:8b:5a:85:fb:86:
         1d:fd:a5:19:18:a8:86:eb:bc:7a:4e:cf:74:87:aa:1a:92:94:
         3f:38:bf:c6:95:c3:c1:9f:e4:7c:27:6e:52:84:82:62:1e:5c:
         38:b3:10:65:ad:4a:5c:11:63:35:21:3a:4c:46:26:2d:19:c6:
         9d:80:ba:ec:7f:55:11:e9:1f:bc:31:20:09:56:6a:3b:e7:3c:
         9c:fd:ca:05:cd:e1:b4:a0:94:d4:94:79:99:6d:73:63:88:0d:
         30:11:0e:f3:54:31:49:d8:ac:e5:a9:d7:b3:52:a7:35:37:c4:
         4b:65:54:32:cf:5c:f1:fa:03:92:9a:e0:40:a9:d8:5b:ca:06:
         e7:2e:27:9a:10:6b:35:1d:10:96:8a:8d:13:7b:29:4e:3b:57:
         4d:cf:e8:95:4b:6c:bf:11:56:1c:ec:fc:8c:93:a8:a6:48:02:
         c2:ea:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:33 2025 by rpki-client