Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
File:                     DiXC-NXlAp5pEJ686yVczjVJFv4.mft (raw, json)
Hash identifier:          luRvLdV8+fQ6uh2wcYfU+d9vXKRt0TOcGi/lKOlQSas=
Subject key identifier:   E1:ED:6F:B5:3A:C3:F5:25:0A:A1:B7:A4:DE:80:45:34:BC:EC:3F:5B
Authority key identifier: 0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
Certificate issuer:       /CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Certificate serial:       027A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
Manifest number:          0279
Signing time:             Sat 09 Aug 2025 04:21:20 +0000
Manifest this update:     Sat 09 Aug 2025 04:21:19 +0000
Manifest next update:     Mon 11 Aug 2025 04:21:19 +0000
Files and hashes:         1: DiXC-NXlAp5pEJ686yVczjVJFv4.crl (hash: jPHJ1mMY4X4n2wkUwxmj2kvXvU/4/QrjVAVdRPfx9rk=)
                          2: 8C7C1810938711EE9A4CB809D25BE465.roa (hash: WJPtWXyF4HbsBRlcRAZ4odD1u13hg/x2iKAvSH5H04k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369CA26AF, serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
        Validity
            Not Before: Aug  9 04:21:19 2025 GMT
            Not After : Aug 11 04:21:19 2025 GMT
        Subject: CN=6896ccc0-ba71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:9e:f6:78:02:20:bd:c2:8f:ec:5c:fa:2a:
                    b5:79:f0:e3:63:3a:73:84:9f:4a:a7:80:c4:33:26:
                    ec:b5:32:94:cb:8d:ee:6d:86:47:2d:2d:6f:c5:a4:
                    79:41:58:c2:d2:81:ca:8a:b6:17:74:3c:1b:96:64:
                    3c:ee:bd:09:96:be:b3:cd:54:3f:85:dd:5e:95:17:
                    6a:4e:b6:d0:39:9c:a6:99:ac:4e:e5:83:c2:31:b2:
                    69:d4:e7:1f:54:29:a0:08:0f:04:0c:9c:98:bf:c1:
                    45:ae:6e:5f:f7:88:97:49:85:cf:6f:8a:d2:dd:19:
                    69:4e:ac:c7:2e:c9:4b:d1:10:01:40:4f:7c:a3:e3:
                    9c:93:9e:85:68:98:94:d7:19:80:14:76:95:51:aa:
                    7a:b1:4f:3e:a3:5c:c2:b4:1f:ed:3b:81:a2:c4:95:
                    03:f0:ab:2b:e5:0d:62:43:03:71:b7:20:22:90:86:
                    26:0b:3b:8d:a8:c6:72:9e:e1:44:03:ad:48:d4:55:
                    d6:b7:20:10:6c:f5:9f:4b:ea:44:70:66:84:11:37:
                    97:2b:36:90:fd:87:08:ea:c2:35:d4:65:0d:c0:2b:
                    ec:cd:8d:7c:b2:be:4c:df:54:9f:f5:cf:f6:bf:35:
                    39:99:81:1e:9d:27:3f:b7:cb:e3:79:9c:c7:46:59:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:ED:6F:B5:3A:C3:F5:25:0A:A1:B7:A4:DE:80:45:34:BC:EC:3F:5B
            X509v3 Authority Key Identifier:
                keyid:0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:e0:50:d3:6a:cd:2b:bd:eb:e5:95:cd:1b:55:de:8e:ee:a2:
         02:7c:5c:de:bd:c0:62:82:b6:c4:9d:4e:58:02:57:23:eb:9c:
         c6:ad:fd:ae:1e:ac:20:05:af:f1:2e:d0:63:ce:63:93:4e:89:
         31:cb:5e:45:f3:ab:b1:be:80:df:2c:ea:22:55:55:c2:f0:e8:
         c1:04:ec:8e:14:fc:c2:71:ba:f2:77:96:b2:f0:af:f3:fd:08:
         58:12:16:82:cf:27:e2:b7:b9:cf:e9:2d:57:a0:68:e5:cb:71:
         7e:ce:92:f5:27:10:3e:cf:d2:77:5d:38:3b:cd:ad:2a:2d:c4:
         e1:ab:aa:b8:e2:a3:62:4b:5c:5e:a3:c1:b6:53:a9:a8:9e:13:
         ea:72:24:0d:cb:25:07:be:ee:a2:2f:e1:58:45:16:e8:3a:94:
         e1:e3:92:71:6e:12:a9:2b:75:3e:e5:b0:77:6c:36:32:10:40:
         25:2d:39:4d:d9:90:75:56:c4:44:e0:ff:1c:65:55:19:06:8a:
         91:66:78:17:d3:04:0a:52:60:46:80:86:0f:cc:53:d4:1d:35:
         45:82:e9:d0:96:02:5f:f2:cd:5a:db:19:b7:73:d2:e0:15:c2:
         24:e8:2d:93:45:16:c1:cf:7b:38:8c:c9:1a:a7:1f:32:2a:9b:
         0a:b3:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:52:23 2025 by rpki-client