Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
File:                     xlOxWlDuQwH_JY2KKnwYY4PFDro.mft (raw, json)
Hash identifier:          aVZcdFSXUIhJOpqAXth+AcDdP/BAi5kUnNiLGaBWvhM=
Subject key identifier:   DC:74:B8:A0:47:A4:F4:86:36:28:37:46:29:A5:36:7F:DB:C4:3A:68
Authority key identifier: C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA
Certificate issuer:       /CN=F367D68CAF/serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
Certificate serial:       05FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
Manifest number:          05FB
Signing time:             Sun 27 Apr 2025 02:11:31 +0000
Manifest this update:     Sun 27 Apr 2025 02:11:30 +0000
Manifest next update:     Tue 29 Apr 2025 02:11:30 +0000
Files and hashes:         1: xlOxWlDuQwH_JY2KKnwYY4PFDro.crl (hash: olgFIiGAiASkBBdAdoeF4Dasr0tQ/u5mKdyCZ0NSJK0=)
                          2: 69EE67B4920711EBA4D68A7DF8AEA228.roa (hash: PWOhXQJ0fibjAAccGAeAnloClqV+BwPlt2KmVpD849M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1532 (0x5fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D68CAF, serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
        Validity
            Not Before: Apr 27 02:11:30 2025 GMT
            Not After : Apr 29 02:11:30 2025 GMT
        Subject: CN=680d9253-f902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:31:8d:72:56:d3:6b:31:94:81:e6:31:6c:
                    f2:99:06:f3:7f:43:37:36:94:dd:88:82:8c:ee:eb:
                    ff:65:18:48:d3:89:56:59:84:3a:77:24:60:73:32:
                    14:11:c3:84:b7:71:8e:fe:6f:14:ea:9f:94:4a:52:
                    6f:62:11:88:dc:bd:5b:48:70:76:aa:c9:6a:77:e9:
                    ba:b6:fc:38:07:fc:ce:82:5e:51:e8:b6:bd:c0:8d:
                    d2:7f:24:02:89:a1:62:9b:fe:15:78:69:54:e0:6b:
                    ba:13:58:88:03:5b:8c:a8:65:d3:ee:e6:37:41:65:
                    f1:6c:d1:cf:83:5c:b0:31:f4:1b:e3:69:c8:39:0d:
                    3c:8d:a7:59:d6:cb:ac:10:5e:be:16:bb:41:09:3e:
                    69:78:c3:6c:c3:49:f0:0e:4c:a9:5f:7d:b4:e0:b9:
                    56:07:89:0d:8f:06:03:e3:75:ee:a5:c7:a3:ce:c0:
                    c0:fb:55:d9:e6:55:5f:39:b1:fc:fd:5d:c6:dc:52:
                    55:e5:ad:e9:45:8d:54:29:67:89:18:bf:49:39:75:
                    68:39:f2:77:e7:1f:4e:d4:e2:1c:c9:c4:28:56:5f:
                    27:4c:d7:e1:44:33:ba:a3:45:ce:72:ab:53:45:0e:
                    84:79:69:8b:44:e9:15:08:46:ce:38:e7:70:f4:a8:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:74:B8:A0:47:A4:F4:86:36:28:37:46:29:A5:36:7F:DB:C4:3A:68
            X509v3 Authority Key Identifier:
                keyid:C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:99:ea:76:30:b5:d0:09:d9:13:29:80:62:3e:0e:70:76:0c:
         e1:70:4d:b4:38:46:fc:e3:e8:5f:9f:2e:dd:cc:79:bb:cc:0e:
         cb:f2:ed:a5:b1:ea:bf:6d:bc:8a:3e:ed:0b:61:b3:88:b7:32:
         93:04:a1:c7:67:3d:ac:63:43:1f:1a:1d:d1:85:58:71:e0:73:
         32:4a:66:ba:19:6e:83:14:95:b7:9c:ca:3f:f2:1e:c5:a8:69:
         1a:06:77:87:56:79:6a:33:65:97:04:b1:19:01:56:b9:c0:98:
         60:50:9e:15:4a:75:10:60:57:77:7a:06:f5:85:e9:db:31:9c:
         ec:6e:2a:f8:49:7c:da:32:09:dc:8b:67:1f:1c:cb:ca:68:7a:
         c2:a0:59:3c:e3:6d:4b:63:db:65:52:f6:04:41:5a:54:3f:31:
         17:ad:f0:7b:d0:b6:3c:4b:91:96:83:9a:10:85:86:dd:e7:ad:
         b1:aa:26:de:70:41:3c:6b:ab:91:6f:ac:e3:4a:e8:1f:d5:ce:
         44:65:15:04:be:93:8a:21:08:54:bb:9c:63:7a:90:b1:30:81:
         f7:ea:f0:a4:b4:66:58:16:3a:2a:89:0e:78:54:64:9f:fc:9d:
         24:1f:fd:4f:ff:54:4f:46:40:db:4b:6c:22:36:11:9f:f4:79:
         14:59:cb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:14:21 2025 by rpki-client