Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
File:                     X2s0EhZiPYWnTyzopeKbXurPolM.mft (raw, json)
Hash identifier:          005dL+iwDFzG63tj4UQyYhvZM9c6xc4M+BCq8btURzM=
Subject key identifier:   AB:A0:EE:6B:AB:01:E4:F4:60:F8:E5:07:38:7C:0C:4D:DA:91:E2:F7
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Certificate issuer:       /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial:       0419
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
Manifest number:          0417
Signing time:             Sun 15 Jun 2025 03:12:51 +0000
Manifest this update:     Sun 15 Jun 2025 03:12:50 +0000
Manifest next update:     Tue 17 Jun 2025 03:12:50 +0000
Files and hashes:         1: X2s0EhZiPYWnTyzopeKbXurPolM.crl (hash: aVqAyJqse0KRXTt2HnmyO/T2CBVO+sQjOtI/mNiX0uI=)
                          2: 55A54EE42E9611EDA379C780F1222468.roa (hash: 92dmko5SHijeHZEqNigi1tIoOa55D1fkpQHQwRV5fc8=)
                          3: 189309602E9611ED8FED3480F1222468.roa (hash: 9thUVnLZZ7EOpFloeIsOWtyUvJheIIw/Jl2bg+WHMIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C632AF, serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
        Validity
            Not Before: Jun 15 03:12:50 2025 GMT
            Not After : Jun 17 03:12:50 2025 GMT
        Subject: CN=684e3a33-5f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:07:5b:3b:f3:3a:6e:eb:4d:ea:51:6c:e0:ef:
                    54:d7:57:53:62:3d:aa:8c:e0:98:a3:21:45:9d:13:
                    3c:1b:ff:92:57:f3:6b:5f:c5:7c:e1:a6:bd:bc:29:
                    cb:e5:22:d0:2f:55:24:dc:c4:54:a1:da:fd:3e:0a:
                    e8:2e:20:36:22:e7:a5:92:66:c5:69:87:f1:b9:88:
                    16:b9:26:f5:40:88:1a:49:d9:fc:24:04:99:64:64:
                    3f:61:df:a6:06:4a:1c:b7:7b:67:e7:fc:4d:8f:1c:
                    0f:6c:0a:49:80:d9:cc:04:27:19:f9:fe:66:a7:4c:
                    6c:76:3a:d5:f2:c3:0f:7f:03:85:3e:3e:ec:a3:67:
                    60:ca:36:97:aa:73:af:1c:bd:de:a0:d7:41:99:ef:
                    c8:65:39:6a:f9:39:81:b2:8d:d6:4a:d7:cf:d2:f3:
                    b9:8d:10:55:ac:d4:ac:f6:74:d2:27:69:e4:5d:ef:
                    0c:12:e5:38:d4:89:72:28:32:4a:e1:b8:d0:2b:72:
                    f3:37:89:33:f9:eb:c0:78:7c:9a:e7:89:40:66:70:
                    26:14:f6:34:a8:e2:8a:5c:e8:9a:23:bd:37:48:69:
                    b8:21:49:e0:cb:40:f4:f5:f3:05:05:b8:6e:0e:54:
                    4e:2d:35:12:50:ed:f5:5f:94:77:2a:d6:37:83:68:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A0:EE:6B:AB:01:E4:F4:60:F8:E5:07:38:7C:0C:4D:DA:91:E2:F7
            X509v3 Authority Key Identifier:
                keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:dc:c7:71:21:c8:da:2c:89:66:ad:4f:30:96:bb:62:20:0d:
         57:f6:cc:d5:a8:9c:ba:82:15:3a:a6:9b:02:e1:b2:94:af:71:
         89:8f:ed:08:06:ea:da:76:76:11:8c:4c:e7:31:22:9f:88:88:
         3f:d8:02:5c:8c:8f:cb:72:76:5e:1c:7b:1d:d2:a3:13:6b:6a:
         9a:1a:81:9f:e0:28:5a:76:19:2a:fc:77:f8:7f:27:c8:e8:b2:
         4f:54:ac:4b:8e:38:fb:18:32:31:25:db:08:64:dd:bf:4b:ce:
         03:86:f2:e1:58:11:e3:71:ce:74:50:cd:26:72:30:11:ad:83:
         11:5c:ae:21:c8:c6:01:85:ef:09:40:91:b9:14:1f:8e:d2:ce:
         94:19:83:a3:23:f7:89:dd:60:8f:a6:6f:00:28:b9:b8:ef:cf:
         8d:9f:b6:22:04:b3:20:cf:6b:af:85:d8:fe:de:c2:12:41:82:
         f1:10:e8:88:b2:d6:85:0c:df:d1:de:94:30:61:6f:1f:1b:01:
         0e:fc:c9:05:d6:23:22:4f:30:52:90:44:ef:2a:08:0f:31:e0:
         30:a6:a3:46:16:84:e5:20:d8:dc:d4:14:f4:b2:e3:b6:fc:09:
         c4:18:3a:94:3d:ca:ca:db:45:7a:77:b1:ff:b1:e1:5e:1d:18:
         1e:9e:f0:ba
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUM2MzJBRjExMC8GA1UEBRMoNUY2QjM0MTIxNjYyM0Q4NUE3NEYyQ0U4QTVFMjlC
NUVFQUNGQTI1MzAeFw0yNTA2MTUwMzEyNTBaFw0yNTA2MTcwMzEyNTBaMBgxFjAU
BgNVBAMTDTY4NGUzYTMzLTVmN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZB1s78zpu603qUWzg71TXV1NiPaqM4JijIUWdEzwb/5JX82tfxXzhpr28
KcvlItAvVSTcxFSh2v0+CuguIDYi56WSZsVph/G5iBa5JvVAiBpJ2fwkBJlkZD9h
36YGShy3e2fn/E2PHA9sCkmA2cwEJxn5/manTGx2OtXyww9/A4U+PuyjZ2DKNpeq
c68cvd6g10GZ78hlOWr5OYGyjdZK18/S87mNEFWs1Kz2dNInaeRd7wwS5TjUiXIo
MkrhuNArcvM3iTP568B4fJrniUBmcCYU9jSo4opc6JojvTdIabghSeDLQPT18wUF
uG4OVE4tNRJQ7fVflHcq1jeDaFCJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUq6Du
a6sB5PRg+OUHOHwMTdqR4vcwHwYDVR0jBBgwFoAUX2s0EhZiPYWnTyzopeKbXurP
olMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDNjMyLzM2NEM0RkY4MkU5NTExRURBNjU5QkI3REYxMjIyNDY4L1gyczBF
aFppUFlXblR5em9wZUtiWHVyUG9sTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1gyczBFaFppUFlXblR5em9wZUtiWHVyUG9sTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUM2MzIvMzY0QzRGRjgyRTk1MTFFREE2NTlCQjdERjEy
MjI0NjgvWDJzMEVoWmlQWVduVHl6b3BlS2JYdXJQb2xNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+3MdxIcjaLIlmrU8wlrtiIA1X9szV
qJy6ghU6ppsC4bKUr3GJj+0IBuradnYRjEznMSKfiIg/2AJcjI/LcnZeHHsd0qMT
a2qaGoGf4Chadhkq/Hf4fyfI6LJPVKxLjjj7GDIxJdsIZN2/S84DhvLhWBHjcc50
UM0mcjARrYMRXK4hyMYBhe8JQJG5FB+O0s6UGYOjI/eJ3WCPpm8AKLm478+Nn7Yi
BLMgz2uvhdj+3sISQYLxEOiIstaFDN/R3pQwYW8fGwEO/MkF1iMiTzBSkETvKggP
MeAwpqNGFoTlINjc1BT0suO2/AnEGDqUPcrK20V6d7H/seFeHRgenvC6
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:18:13 2025 by rpki-client