Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
File:                     hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft (raw, json)
Hash identifier:          f+plvdSbbyLKTMlGiROWs+UqO7/Pm9KDAgE94bAPLL0=
Subject key identifier:   82:88:36:A4:7B:50:7F:5B:CF:4C:98:F1:33:AF:F1:80:E4:B0:23:36
Authority key identifier: 87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32
Certificate issuer:       /CN=F3682B3AAF/serialNumber=870C8E8FD43B42C5B51562D9B8944A84E43D3632
Certificate serial:       02F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
Manifest number:          02F0
Signing time:             Fri 20 Jun 2025 03:51:21 +0000
Manifest this update:     Fri 20 Jun 2025 03:51:20 +0000
Manifest next update:     Sun 22 Jun 2025 03:51:20 +0000
Files and hashes:         1: hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl (hash: Qj7IVOTSvZ5AWlLDuyNSWt+q+lUWOhG/uGNQXpJdNQQ=)
                          2: 55FD2498F36111EE8255797D775412E6.roa (hash: 5+TRgE4Za1lP1tBhZLXfEbMvFbNLglwsyfdbD3gRLSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 22 Jun 2025 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B3AAF, serialNumber=870C8E8FD43B42C5B51562D9B8944A84E43D3632
        Validity
            Not Before: Jun 20 03:51:20 2025 GMT
            Not After : Jun 22 03:51:20 2025 GMT
        Subject: CN=6854dab8-8748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:7b:4d:b8:8a:68:ef:30:bf:7a:68:3c:21:
                    21:a5:59:49:93:33:d8:f1:3c:43:a0:40:87:31:9e:
                    41:bc:68:9f:bf:81:8d:4a:17:d6:ea:63:a1:fc:6e:
                    3b:c2:23:6a:2c:d1:3c:18:af:8a:8b:8b:a7:82:c0:
                    d7:53:00:6a:4d:e3:1b:3e:b7:1a:29:b6:44:92:71:
                    a6:f0:48:94:a2:5f:f4:a0:a7:d6:64:a6:6a:1d:89:
                    f9:84:8f:ad:9a:48:88:61:1b:72:1b:45:e8:9b:6e:
                    1a:8b:d9:28:6c:b4:13:2d:a6:11:f6:c8:18:bb:8b:
                    d4:83:60:89:59:7d:a5:da:0e:0d:c7:03:b3:f6:e6:
                    78:19:aa:00:52:72:9e:ed:d6:57:c3:66:05:f2:53:
                    75:82:8c:a7:44:9c:bf:4b:81:a0:ba:a7:f5:2c:48:
                    a9:6d:b4:f2:12:9e:ad:0c:68:d3:dd:7b:fd:22:c7:
                    59:7c:fb:d6:15:84:29:a4:f0:27:67:d9:a1:06:70:
                    1e:3e:4b:f2:97:41:27:ad:6e:1f:ff:88:49:5f:86:
                    f4:9e:03:d9:72:22:d8:d4:e4:35:41:04:90:03:b0:
                    24:b3:d5:0d:90:dc:dc:a3:5f:15:e4:a3:4e:4a:7c:
                    08:f3:fc:aa:7e:59:1e:42:cb:87:29:5e:55:2e:a5:
                    e9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:88:36:A4:7B:50:7F:5B:CF:4C:98:F1:33:AF:F1:80:E4:B0:23:36
            X509v3 Authority Key Identifier:
                keyid:87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0c:22:b5:1e:ee:42:94:43:a1:6a:d8:1a:90:d1:4d:df:36:
         47:3a:b8:4b:8f:c0:55:a5:af:7e:3b:9d:80:77:70:1f:2a:d9:
         57:6a:ae:d1:df:6b:af:59:60:fb:63:5f:ac:6a:34:ff:68:e1:
         8f:e7:e2:9e:5f:16:41:a4:c8:fa:6b:7e:be:e0:d5:d3:82:d6:
         34:ca:5a:6f:e0:d7:43:32:bf:87:a3:7d:df:5e:0e:45:4b:f4:
         4a:31:99:e1:00:32:94:a9:7f:d0:52:dd:72:98:d0:ae:2e:8e:
         5f:76:db:14:cc:96:c6:a3:22:df:40:3b:8c:40:71:db:3b:25:
         48:b4:0a:8b:8d:8b:cf:3b:27:5e:c4:d4:2c:3e:11:1e:94:5d:
         40:f3:30:93:e9:d3:35:90:00:47:10:6d:35:ad:a1:69:36:43:
         45:d6:76:89:86:43:3e:29:a2:76:9f:70:13:68:9d:b1:83:29:
         4e:4d:a4:8d:22:c1:5c:b5:ed:d7:58:33:2e:3d:7b:50:89:5d:
         bb:5b:e7:18:98:ee:f1:ef:f6:26:bb:41:53:c6:c3:d4:2f:76:
         63:d9:1b:42:28:50:d4:ca:ba:15:d9:5a:09:63:b8:85:2d:47:
         66:1e:be:87:04:54:23:3e:85:cd:f2:eb:6e:44:70:0d:07:e5:
         19:a3:6f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:40:02 2025 by rpki-client