Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          lgw8OHPMrdHM4fAYfB7GwjZDVWXJz4W2jyfQ+hQEBBc=
Subject key identifier:   6A:4E:5D:C1:D0:01:55:5B:30:07:49:16:9C:61:A0:13:10:B1:1A:AF
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       0323
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          031F
Signing time:             Tue 17 Jun 2025 03:42:03 +0000
Manifest this update:     Tue 17 Jun 2025 03:42:03 +0000
Manifest next update:     Thu 19 Jun 2025 03:42:03 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: pjbnDuVA/erOjsbJd12XOtjLZVEbDZuMoG51VrdAusM=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 19 Jun 2025 00:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: Jun 17 03:42:03 2025 GMT
            Not After : Jun 19 03:42:03 2025 GMT
        Subject: CN=6850e40b-288c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:62:70:94:00:82:4e:af:c1:1c:c3:01:e6:
                    f1:f5:4d:fb:0c:9a:b0:f7:34:67:c2:2d:0d:99:0f:
                    78:4e:8a:1e:15:97:8e:15:97:44:8f:67:be:28:64:
                    56:3b:b6:c1:e4:12:4f:3a:e0:2a:0e:a5:94:46:bb:
                    ed:ba:cf:a1:08:55:94:61:4d:d9:98:c3:83:02:53:
                    3b:34:18:fc:06:71:93:dc:2e:ac:d9:e3:e3:82:ac:
                    15:b7:92:6b:e5:71:8c:76:5c:e9:ba:de:59:5f:c0:
                    e1:4f:79:7f:bd:1d:da:26:da:98:74:25:5d:61:d2:
                    c7:79:40:1e:89:44:95:49:3b:06:17:73:2e:be:58:
                    eb:71:e1:80:49:05:76:d9:68:ef:3e:33:29:e4:54:
                    52:8c:e4:85:bc:63:00:42:a0:e4:4c:78:b7:75:6f:
                    89:ce:a1:df:ec:5e:0e:c7:e7:9c:ed:40:5e:42:38:
                    61:a4:45:fd:f8:4a:f7:19:ac:ea:95:61:62:8f:65:
                    47:8c:91:12:03:59:6a:c2:d9:e5:6f:36:b1:dc:a2:
                    57:06:07:1f:b5:f0:fe:74:21:b1:6e:c6:9f:bb:12:
                    f3:5f:07:4e:30:3e:ef:20:a7:c5:f8:f7:63:63:3c:
                    ab:3f:e6:3f:91:89:ce:f9:6b:02:8a:3b:19:1d:03:
                    92:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4E:5D:C1:D0:01:55:5B:30:07:49:16:9C:61:A0:13:10:B1:1A:AF
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ad:e8:14:b5:5e:3a:44:7a:c5:83:a6:b9:25:21:be:df:f4:
         65:8b:60:5d:96:01:5c:21:db:f9:45:64:f9:ad:f3:04:e1:93:
         e3:98:33:01:11:72:8b:a0:ce:ed:9a:81:1a:a8:90:81:f0:9e:
         55:c2:da:d4:b5:74:16:24:8c:b0:1b:36:4e:66:8e:5c:bd:f0:
         82:5f:46:57:92:b0:57:2f:48:84:5c:45:4d:1b:73:e8:81:3a:
         31:67:7f:f8:56:9f:50:31:8f:89:b3:66:78:07:c7:4e:3d:1a:
         01:11:4b:a1:48:2c:bb:a2:5b:78:7c:fd:39:30:46:83:9b:7f:
         56:58:99:3b:47:61:9c:c6:30:57:f6:77:bd:e4:92:88:84:67:
         c9:a3:f4:58:85:d2:4f:2b:97:f7:8a:92:c5:8c:ce:66:fb:3e:
         08:d5:c9:c7:22:7d:61:10:14:97:74:88:84:d9:17:6a:89:46:
         c4:8a:19:10:e7:46:ad:6d:0b:07:b5:0a:96:93:10:fe:7f:86:
         f4:11:62:01:1f:f1:dd:c2:ee:e2:06:9c:93:1b:ac:c8:7f:ea:
         dc:30:ed:32:06:2e:9b:fb:55:83:09:61:c5:69:5e:af:9d:eb:
         48:53:ad:90:8b:9a:f0:c4:73:6d:89:6b:7d:19:89:cd:77:ff:
         b7:95:a0:1d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjUwNURBRjExMC8GA1UEBRMoMUREQjhFOTMxRjU3QTkyODE3NjQ5ODMwQzRFRDhB
REQ3NEVGNDlGOTAeFw0yNTA2MTcwMzQyMDNaFw0yNTA2MTkwMzQyMDNaMBgxFjAU
BgNVBAMTDTY4NTBlNDBiLTI4OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCbnWJwlACCTq/BHMMB5vH1TfsMmrD3NGfCLQ2ZD3hOih4Vl44Vl0SPZ74o
ZFY7tsHkEk864CoOpZRGu+26z6EIVZRhTdmYw4MCUzs0GPwGcZPcLqzZ4+OCrBW3
kmvlcYx2XOm63llfwOFPeX+9Hdom2ph0JV1h0sd5QB6JRJVJOwYXcy6+WOtx4YBJ
BXbZaO8+MynkVFKM5IW8YwBCoORMeLd1b4nOod/sXg7H55ztQF5COGGkRf34SvcZ
rOqVYWKPZUeMkRIDWWrC2eVvNrHcolcGBx+18P50IbFuxp+7EvNfB04wPu8gp8X4
92NjPKs/5j+Ric75awKKOxkdA5I7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUak5d
wdABVVswB0kWnGGgExCxGq8wHwYDVR0jBBgwFoAUHduOkx9XqSgXZJgwxO2K3XTv
SfkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY1MDVELzFGQjFCNEIwRUU1RjExRURBODIxOUM1QTRBRDlFNkZDL0hkdU9r
eDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkdU9reDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjUwNUQvMUZCMUI0QjBFRTVGMTFFREE4MjE5QzVBNEFE
OUU2RkMvSGR1T2t4OVhxU2dYWkpnd3hPMkszWFR2U2ZrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdregUtV46RHrFg6a5JSG+3/Rli2Bd
lgFcIdv5RWT5rfME4ZPjmDMBEXKLoM7tmoEaqJCB8J5VwtrUtXQWJIywGzZOZo5c
vfCCX0ZXkrBXL0iEXEVNG3PogToxZ3/4Vp9QMY+Js2Z4B8dOPRoBEUuhSCy7olt4
fP05MEaDm39WWJk7R2GcxjBX9ne95JKIhGfJo/RYhdJPK5f3ipLFjM5m+z4I1cnH
In1hEBSXdIiE2RdqiUbEihkQ50atbQsHtQqWkxD+f4b0EWIBH/Hdwu7iBpyTG6zI
f+rcMO0yBi6b+1WDCWHFaV6vnetIU62Qi5rwxHNtiWt9GYnNd/+3laAd
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:54:14 2025 by rpki-client