Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
File:                     DiXC-NXlAp5pEJ686yVczjVJFv4.mft (raw, json)
Hash identifier:          i9g0WFHQ679rKh9P1EPv3LMHlHoXqHgGZd9jnElTSwQ=
Subject key identifier:   8F:04:9C:16:5B:53:11:63:1A:50:E5:72:DB:3C:0F:52:19:19:50:B4
Authority key identifier: 0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
Certificate issuer:       /CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Certificate serial:       0211
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
Manifest number:          0210
Signing time:             Sun 27 Apr 2025 04:11:39 +0000
Manifest this update:     Sun 27 Apr 2025 04:11:38 +0000
Manifest next update:     Tue 29 Apr 2025 04:11:38 +0000
Files and hashes:         1: DiXC-NXlAp5pEJ686yVczjVJFv4.crl (hash: 9GJSsgqfpNdoOGahAr890YFbRiJ7xeNfau5Q1OdZnQ4=)
                          2: 8C7C1810938711EE9A4CB809D25BE465.roa (hash: WJPtWXyF4HbsBRlcRAZ4odD1u13hg/x2iKAvSH5H04k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 04:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369CA26AF, serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
        Validity
            Not Before: Apr 27 04:11:38 2025 GMT
            Not After : Apr 29 04:11:38 2025 GMT
        Subject: CN=680dae7b-b8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:a6:25:c8:5f:27:d7:2c:70:0c:37:80:44:
                    6b:7c:38:52:93:01:0b:e0:da:7c:30:61:f0:b4:0a:
                    19:dd:ed:17:9b:3a:ab:a5:cb:d3:78:a5:bf:e0:49:
                    6c:a0:73:76:af:40:df:1d:2c:1d:78:49:6b:6a:93:
                    1e:51:b4:b3:72:93:ec:56:2e:12:4e:2e:3c:60:14:
                    18:42:b1:b1:03:27:82:b1:39:0f:a9:d9:c3:22:c4:
                    2e:40:0a:8f:c9:d9:06:72:b7:d2:d8:7a:2e:13:8e:
                    fb:3d:10:6e:b1:b8:93:dc:2b:bc:fc:81:4f:66:47:
                    46:69:db:85:f9:97:c3:93:39:6c:d7:0b:a4:52:a8:
                    f7:a5:d8:ee:f6:62:08:4c:53:c5:dc:e8:f1:42:35:
                    21:0c:42:c6:8c:1e:c9:02:96:db:5f:44:e5:0e:cf:
                    4a:f8:1b:f2:bf:28:73:a6:16:a1:66:d1:b4:0a:a2:
                    76:e3:ae:09:7f:03:52:e8:08:4c:67:23:fe:34:ca:
                    bd:0e:f3:78:22:ac:ef:8f:89:75:e0:22:dc:fe:a5:
                    f5:b9:31:42:f8:e1:29:3a:74:80:58:0d:44:26:c1:
                    58:d9:6f:34:70:7f:a5:6d:67:e1:29:63:da:39:67:
                    17:6c:25:66:b8:62:fc:24:b4:2a:43:d0:b9:30:55:
                    fc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:04:9C:16:5B:53:11:63:1A:50:E5:72:DB:3C:0F:52:19:19:50:B4
            X509v3 Authority Key Identifier:
                keyid:0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b8:51:c6:09:39:db:11:79:60:87:28:38:20:64:46:e8:f0:
         34:ac:25:54:ea:f3:3b:50:0c:2d:44:03:37:ae:86:94:a8:0e:
         78:96:53:24:2a:27:1a:ae:8a:8a:e2:58:5e:8d:2d:89:25:79:
         21:4c:58:65:14:87:d2:d2:a2:0b:98:9f:1d:e0:ce:da:42:91:
         90:35:e9:29:e4:06:c4:39:29:41:cc:d9:8a:ea:b1:2f:23:84:
         c0:e8:a8:5e:8e:cd:81:47:7a:10:76:5f:5a:55:f0:a0:a5:3f:
         00:85:77:c8:f0:39:31:15:d4:21:91:9f:7d:bf:03:c2:d0:e9:
         78:72:83:8c:6c:02:da:df:96:ad:79:9d:be:20:c4:e7:54:e3:
         f3:2e:bd:e5:3f:09:ee:e3:a9:d5:0e:c9:6b:83:b3:09:93:9f:
         ef:85:76:33:cd:fc:12:19:dd:26:f2:8e:d2:eb:16:73:68:7c:
         e7:ca:f6:d3:ee:64:40:1d:5d:6c:7e:dd:31:41:13:b4:b2:27:
         fd:f4:8c:47:05:cc:5f:ef:9b:64:4c:99:f5:8a:05:63:34:b7:
         c3:3c:87:28:6a:e4:a4:24:63:b7:f8:dc:f1:7c:c8:99:b3:bb:
         3b:50:f5:e1:cc:10:4a:c7:bf:4e:b0:cf:24:9d:32:73:32:7c:
         aa:7f:f3:4c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUNBMjZBRjExMC8GA1UEBRMoMEUyNUMyRjhENUU1MDI5RTY5MTA5RUJDRUIyNTVD
Q0UzNTQ5MTZGRTAeFw0yNTA0MjcwNDExMzhaFw0yNTA0MjkwNDExMzhaMBgxFjAU
BgNVBAMTDTY4MGRhZTdiLWI4YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4S6YlyF8n1yxwDDeARGt8OFKTAQvg2nwwYfC0Chnd7RebOquly9N4pb/g
SWygc3avQN8dLB14SWtqkx5RtLNyk+xWLhJOLjxgFBhCsbEDJ4KxOQ+p2cMixC5A
Co/J2QZyt9LYei4Tjvs9EG6xuJPcK7z8gU9mR0Zp24X5l8OTOWzXC6RSqPel2O72
YghMU8Xc6PFCNSEMQsaMHskClttfROUOz0r4G/K/KHOmFqFm0bQKonbjrgl/A1Lo
CExnI/40yr0O83girO+PiXXgItz+pfW5MUL44Sk6dIBYDUQmwVjZbzRwf6VtZ+Ep
Y9o5ZxdsJWa4YvwktCpD0LkwVfwhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUjwSc
FltTEWMaUOVy2zwPUhkZULQwHwYDVR0jBBgwFoAUDiXC+NXlAp5pEJ686yVczjVJ
Fv4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDQTI2L0JFQ0M0NzM4OTM4NTExRUVCQzc3NzIwNkQyNUJFNDY1L0RpWEMt
TlhsQXA1cEVKNjg2eVZjempWSkZ2NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RpWEMtTlhsQXA1cEVKNjg2eVZjempWSkZ2NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUNBMjYvQkVDQzQ3Mzg5Mzg1MTFFRUJDNzc3MjA2RDI1
QkU0NjUvRGlYQy1OWGxBcDVwRUo2ODZ5VmN6alZKRnY0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZuFHGCTnbEXlghyg4IGRG6PA0rCVU
6vM7UAwtRAM3roaUqA54llMkKicaroqK4lhejS2JJXkhTFhlFIfS0qILmJ8d4M7a
QpGQNekp5AbEOSlBzNmK6rEvI4TA6Khejs2BR3oQdl9aVfCgpT8AhXfI8DkxFdQh
kZ99vwPC0Ol4coOMbALa35ateZ2+IMTnVOPzLr3lPwnu46nVDslrg7MJk5/vhXYz
zfwSGd0m8o7S6xZzaHznyvbT7mRAHV1sft0xQRO0sif99IxHBcxf75tkTJn1igVj
NLfDPIcoauSkJGO3+NzxfMiZs7s7UPXhzBBKx79OsM8knTJzMnyqf/NM
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:03:25 2025 by rpki-client