Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          nNyY3M+0qAS/vgfxuU+DFDI8S9yHIZp1eaqEJwNqw7w=
Subject key identifier:   9C:20:5E:B1:BE:15:64:6D:00:E5:AF:90:B8:49:2D:08:44:88:3D:AB
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       0358
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          0354
Signing time:             Fri 08 Aug 2025 03:41:40 +0000
Manifest this update:     Fri 08 Aug 2025 03:41:39 +0000
Manifest next update:     Sun 10 Aug 2025 03:41:39 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: YCkWPvglwuzg1sSf/YWYVhxsPRlRFxsy5VyuVDXvCRE=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 03:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: Aug  8 03:41:39 2025 GMT
            Not After : Aug 10 03:41:39 2025 GMT
        Subject: CN=689571f4-bab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:fd:92:9d:99:cc:88:e2:2d:a2:1b:21:74:
                    dd:60:79:92:54:1e:52:d4:8b:de:09:f1:15:5e:04:
                    e9:f0:d3:8c:6c:a3:99:db:f9:14:8d:3f:7e:4a:0c:
                    8b:42:ae:f0:ee:cc:02:60:58:95:e3:ff:8e:da:01:
                    b3:8f:72:0e:e6:d8:87:d3:d4:ea:c7:f8:03:51:39:
                    dd:56:30:a6:72:2d:33:ea:8e:1e:46:3a:50:bd:dd:
                    73:3c:89:92:fd:41:f2:0d:b9:86:01:e0:6c:94:8d:
                    2b:12:16:c2:b1:9b:d9:ba:1b:c5:76:71:1a:ba:e8:
                    91:ab:63:a4:d0:bf:d1:03:3e:7a:c7:01:6b:9a:5c:
                    5e:be:3b:e7:0d:54:0c:0d:8c:35:e7:16:b3:cc:7b:
                    16:5d:55:37:43:aa:92:07:e7:de:e0:b6:95:fd:25:
                    7e:41:5e:0c:c0:04:83:80:22:d7:78:81:b0:58:04:
                    07:f6:74:33:e2:35:80:f4:9b:e4:d1:e3:98:ae:0d:
                    73:96:88:26:3e:c3:ba:1f:94:f7:c0:09:ed:b2:2b:
                    2b:b0:1d:94:bf:31:49:e1:93:3e:81:86:12:38:4b:
                    fb:56:e6:10:99:b6:24:b7:0d:1b:80:00:b6:9e:18:
                    fb:da:38:0e:d5:0d:56:7d:fa:d6:2f:ac:64:b5:da:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:20:5E:B1:BE:15:64:6D:00:E5:AF:90:B8:49:2D:08:44:88:3D:AB
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:92:29:08:5c:19:97:0f:3b:f6:5e:cf:8f:b7:57:dc:49:23:
         f9:b8:fc:49:86:7c:25:fd:3e:96:d5:1c:f2:af:25:9c:21:f4:
         19:17:e9:68:ee:dc:33:8d:a9:02:1b:25:ed:fd:53:1b:02:e8:
         91:69:e3:71:b8:d1:34:f2:61:d2:b3:50:c6:50:b3:bf:3c:39:
         52:bb:b1:4f:eb:ba:16:03:a2:5d:cd:5f:25:d0:74:40:1a:5c:
         1f:23:57:17:3c:31:49:be:fa:ce:df:b4:05:13:3d:05:95:bc:
         62:29:25:47:b4:b3:f3:02:f0:d5:3d:ed:a9:0e:08:e6:8a:e0:
         dc:30:dd:da:e6:25:98:b3:ac:3b:7f:2e:85:5d:10:28:dc:2b:
         e5:33:a2:31:77:e3:86:1c:4b:5c:65:fc:31:21:77:4c:7e:25:
         60:36:04:ef:31:b5:35:0d:01:e6:05:85:c2:39:f2:18:1e:fc:
         85:ac:09:52:9b:48:da:dd:17:56:43:4a:a3:03:fc:9e:41:c4:
         5e:c5:08:f5:51:0b:d8:de:60:ba:71:13:4c:53:cc:34:ee:d0:
         aa:70:35:70:12:86:d1:2b:22:a0:5f:97:7d:4d:b8:18:10:14:
         37:a5:6f:64:e6:97:7d:ce:a6:38:f6:48:d7:71:94:3c:61:7e:
         7f:63:ab:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:39:51 2025 by rpki-client