Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
File:                     HNlmJ3URky060f0tMBT24WjMSOU.mft (raw, json)
Hash identifier:          NiCGhz6Cr2mF2Yx3lvmUre8y3Amf8tBZlhJnNXFy3VI=
Subject key identifier:   F7:70:B8:02:C3:2F:88:A1:A7:AA:9F:DF:A1:2A:D8:67:E1:F2:C7:66
Authority key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Certificate issuer:       /CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Certificate serial:       030F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
Manifest number:          030E
Signing time:             Sun 15 Jun 2025 03:45:18 +0000
Manifest this update:     Sun 15 Jun 2025 03:45:17 +0000
Manifest next update:     Tue 17 Jun 2025 03:45:17 +0000
Files and hashes:         1: HNlmJ3URky060f0tMBT24WjMSOU.crl (hash: uElH73pRSL62rwKiH1JnCCB94CKtFJV2+FDtubWe6zQ=)
                          2: 14217AF4FD4611EDACE0A4484AD9E6FC.roa (hash: scusLfpX0zDQtYPg/Gz0vTNJwugRyOQOlFnS4UEvDsE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B69AF, serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
        Validity
            Not Before: Jun 15 03:45:17 2025 GMT
            Not After : Jun 17 03:45:17 2025 GMT
        Subject: CN=684e41cd-dcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:fb:e6:60:86:b9:e9:af:42:2a:c8:1c:fe:
                    74:49:0a:49:95:75:a3:6d:2c:41:d8:f9:cc:99:86:
                    04:37:e5:4c:0c:8a:d3:44:0d:e4:b2:06:40:36:e6:
                    93:28:ff:d2:81:cd:9a:9c:8c:66:7f:2e:ee:60:0c:
                    f3:7b:33:70:cf:82:4d:1a:c5:a0:dd:9d:1d:51:93:
                    c8:8c:6a:20:b5:34:80:20:91:d0:04:7e:43:e2:d3:
                    3d:74:df:95:94:24:c2:f7:b4:84:5f:e9:60:67:db:
                    2a:a4:4d:f6:bf:66:94:e2:b7:bb:0b:0d:c5:16:16:
                    87:9b:9f:93:e2:84:42:ea:cc:43:c1:44:2b:49:53:
                    3b:7e:d7:51:e8:6c:dc:b5:9a:64:b2:69:4b:9c:bd:
                    c4:ca:5f:97:c2:0b:81:2f:a2:c8:0b:e0:d3:78:fa:
                    84:36:7b:a2:d4:f2:b1:eb:38:76:66:6e:07:d0:36:
                    9d:46:ba:5f:9d:a6:11:32:a6:b3:30:ca:cc:be:ac:
                    0c:f3:28:c2:0a:eb:df:a8:42:b8:d5:8b:25:f8:9f:
                    fc:c7:c8:cb:25:1a:28:0b:e8:bb:88:26:05:ce:65:
                    1c:82:40:9f:4f:a8:f3:72:8a:26:5e:f5:48:ed:b4:
                    73:ec:c8:9c:26:f2:1d:71:c1:32:91:03:a0:25:fd:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:B8:02:C3:2F:88:A1:A7:AA:9F:DF:A1:2A:D8:67:E1:F2:C7:66
            X509v3 Authority Key Identifier:
                keyid:1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:2f:d8:b8:bb:cf:d7:e0:97:40:fa:e4:1a:f9:4a:32:7d:
         82:a7:17:7c:66:a3:52:a3:56:58:e5:bd:2c:b6:83:9d:65:ac:
         6d:86:d6:82:e6:93:a3:be:eb:54:fe:df:d2:0e:c2:a4:f6:5a:
         a7:36:24:1e:c4:81:10:e5:61:51:6b:e3:6b:05:b6:b1:e1:e7:
         9c:33:e2:99:36:63:13:f0:d6:1e:e3:38:24:16:87:47:75:ac:
         2a:e5:3e:27:df:5a:0a:d5:c5:3a:f4:d7:06:6a:e5:b4:23:dd:
         9e:f0:4b:8e:d5:7c:1a:76:23:28:e7:80:4c:cd:4d:2a:74:c6:
         3e:24:ca:49:4c:7c:85:7a:1e:80:85:48:65:86:19:a0:a8:22:
         1a:49:d5:18:f1:b9:5e:5a:c7:e8:d0:98:70:3c:75:0e:1f:0c:
         ff:f7:21:7a:12:7f:f3:ba:71:c6:46:ca:bf:31:b8:f0:73:75:
         f3:e6:db:1d:f4:c3:f5:f7:41:60:61:52:ae:34:a9:fd:21:c2:
         5a:ed:20:3b:ea:65:43:df:a6:d8:ee:c5:00:9b:f7:5f:0b:b2:
         31:3c:d9:37:95:a9:26:81:76:de:81:2c:9e:f4:a2:76:90:a7:
         06:96:c2:11:f3:e7:25:1d:61:33:62:7e:1c:e3:cd:c8:1e:f9:
         54:17:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:32:34 2025 by rpki-client