Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
File:                     _CFqOFBDurE2eHrAmYJUYZDL3pI.mft (raw, json)
Hash identifier:          Lpbe/JRdEWTpr7vwJPNvntQyQI+1dhTvsCItWEXN6IM=
Subject key identifier:   B2:70:5E:6F:4A:FC:AE:59:04:BA:6B:C4:78:41:8D:6B:C0:33:2A:2B
Authority key identifier: FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92
Certificate issuer:       /CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
Certificate serial:       073F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
Manifest number:          073C
Signing time:             Sat 14 Jun 2025 01:59:40 +0000
Manifest this update:     Sat 14 Jun 2025 01:59:39 +0000
Manifest next update:     Mon 16 Jun 2025 01:59:39 +0000
Files and hashes:         1: _CFqOFBDurE2eHrAmYJUYZDL3pI.crl (hash: D4E7EBvfh+4NsoD8TbxkYjxbQKTZctYn1c4W4NS83L0=)
                          2: 7D1D251CC04011EA957AEB21F8AEA228.roa (hash: t/ypp67l7oHU7gQc6/GfToKk0xAfDBleGGehP++nK88=)
                          3: 234A1CC0C04011EABDD07A21F8AEA228.roa (hash: qxLDaEM+dLvWNlnURJT6LsT7+vD5fBM4n0SH7Mu85No=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855 (0x73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618989AF, serialNumber=FC216A385043BAB136787AC09982546190CBDE92
        Validity
            Not Before: Jun 14 01:59:39 2025 GMT
            Not After : Jun 16 01:59:39 2025 GMT
        Subject: CN=684cd78c-3ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:7d:6c:80:f4:32:ba:c9:8f:1c:c3:87:33:
                    d3:7d:5d:be:24:32:af:77:bc:f7:a1:14:93:5a:28:
                    e0:7d:d9:16:24:45:a1:c5:a3:b8:e0:8a:d9:c2:fd:
                    52:cf:c5:ac:48:35:8e:20:1a:f4:54:3c:c2:b3:7c:
                    fe:a2:7a:43:4e:50:95:c2:68:89:0c:56:4d:61:7d:
                    31:19:80:27:72:74:ac:27:0b:0e:ba:3f:56:da:a7:
                    bd:6e:f3:bc:26:9e:eb:3f:fa:54:71:f9:d5:6b:e7:
                    7a:ac:ce:94:9a:fc:7e:fa:09:bb:d0:1a:05:5a:06:
                    22:6e:1c:f1:fc:6d:25:d7:5d:6b:15:a0:7d:67:b6:
                    fe:ec:71:4d:8c:8f:16:79:97:1d:c1:f9:f2:8e:c4:
                    74:48:5d:61:41:e7:07:a2:69:e2:ff:04:74:56:b8:
                    33:9d:be:06:15:a4:7b:7c:bd:fa:3d:f9:b2:4a:ee:
                    78:bd:01:99:dc:b8:b4:ac:79:b1:7f:ac:21:84:a0:
                    7d:4c:83:d9:a6:0d:67:19:e2:d7:a2:7d:fe:fa:08:
                    fd:e8:bc:2a:21:b0:ce:3e:cd:57:ff:21:f3:6b:5d:
                    09:e9:61:60:1b:d4:48:41:2c:b7:93:af:b2:1d:c8:
                    05:84:5a:09:d4:ff:b5:20:86:e9:3a:65:58:b2:27:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:70:5E:6F:4A:FC:AE:59:04:BA:6B:C4:78:41:8D:6B:C0:33:2A:2B
            X509v3 Authority Key Identifier:
                keyid:FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7e:17:84:f6:a7:36:df:de:d9:7e:d2:be:e6:63:ce:7a:f3:
         8d:6a:5d:46:49:f4:5c:78:a9:9c:e5:29:69:7b:ed:1f:73:96:
         1a:b3:99:73:5b:e3:bc:fb:5a:12:ed:be:20:c1:eb:fc:e8:40:
         50:cf:b6:8b:a8:bb:55:3b:12:e7:d8:b0:0b:51:e8:e6:5b:69:
         9d:f4:61:ea:f6:d4:f7:d7:0e:43:75:20:0e:ca:d9:f2:c4:dd:
         41:d9:6c:3c:b6:26:2c:49:39:71:72:5e:36:a8:c5:fb:de:18:
         48:79:ff:ad:70:4c:d8:ea:94:77:b6:05:c1:0a:14:39:cd:3a:
         11:38:30:ab:9c:44:46:92:07:d8:36:db:72:b9:36:da:c2:61:
         99:78:8d:5e:66:31:77:f7:c3:9d:fc:59:30:93:40:d3:3c:9c:
         f4:31:63:c5:2f:44:83:5a:ac:c8:d1:86:ca:77:ed:2d:77:47:
         bf:23:15:bb:ec:02:57:37:62:d4:b6:da:d1:b4:68:b6:21:7b:
         6e:02:e8:44:4e:74:55:73:b4:1c:ee:ce:eb:d0:99:93:ac:0a:
         45:36:13:da:b8:0e:b9:36:c9:36:52:ed:b5:c9:69:ec:75:73:
         71:f9:2c:6d:15:73:fd:e7:53:a9:63:6c:f7:32:12:b5:3e:ee:
         6e:f2:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:04:29 2025 by rpki-client