Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
File:                     kOmId5HPLZYFAfiu3iSiM0q6VAM.mft (raw, json)
Hash identifier:          JJ2sFK7lAKKvWhKKVT+yTe7qAMWNgHrOpWMnFE4GAF8=
Subject key identifier:   D3:A5:D2:9F:8B:E0:C1:B7:40:AF:1D:93:F0:82:89:6A:4F:FE:C5:39
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Certificate issuer:       /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial:       09ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
Manifest number:          09E2
Signing time:             Sun 27 Jul 2025 01:19:13 +0000
Manifest this update:     Sun 27 Jul 2025 01:19:12 +0000
Manifest next update:     Tue 29 Jul 2025 01:19:12 +0000
Files and hashes:         1: kOmId5HPLZYFAfiu3iSiM0q6VAM.crl (hash: 5Tgo5Rv5YDd4ZatADberySLFFu1d4QhyYYFAtkYtJsg=)
                          2: 93B50CB27C2811ED81D30EDDF1222468.roa (hash: gp/99soeditLcJO0T5hekMas/YIo6afkCzb5ekN/BCo=)
                          3: BF2A74367C2811EDA828B1DDF1222468.roa (hash: 8Vz8jskWPkYysMtex35shbS5v1VNGyIr6NmUyZ7bv2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2541 (0x9ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C3A1AF, serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
        Validity
            Not Before: Jul 27 01:19:12 2025 GMT
            Not After : Jul 29 01:19:12 2025 GMT
        Subject: CN=68857e91-952f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:09:37:d2:3c:fa:6d:ae:83:7e:25:bf:8f:
                    3b:b3:80:f2:ea:ff:56:5c:c4:44:0d:58:d9:ad:9c:
                    90:66:cf:64:57:59:89:66:c6:69:db:5a:7d:d5:40:
                    40:3e:1e:12:47:15:03:77:fb:f8:5b:50:8b:0d:d6:
                    9b:e2:a2:5c:6a:cf:49:6b:66:78:a1:bc:c4:31:9e:
                    fb:d9:f3:51:93:c4:7d:58:54:5a:a4:73:96:9c:b8:
                    f8:19:41:44:5d:b9:59:e5:29:24:13:7c:27:3d:26:
                    05:d0:c1:eb:0a:1e:bf:b9:02:53:9e:9c:14:cf:1c:
                    ed:92:96:0d:3a:5a:eb:fb:4d:d3:bb:ee:ed:ef:aa:
                    b0:a4:de:51:8a:b3:34:37:0a:4b:53:5e:b4:97:97:
                    91:64:c1:6f:08:ba:03:7f:b1:d8:ba:28:6e:30:12:
                    04:32:f4:ac:9c:7b:6d:6e:6b:e4:da:c1:3e:1e:21:
                    a3:a9:17:b1:5b:5d:a9:ba:53:c1:02:66:84:d6:bc:
                    64:6c:0e:4a:78:ba:6b:ff:c3:01:71:63:2d:f2:88:
                    b3:9b:20:09:7d:ec:2c:a3:39:ab:11:d1:3b:69:38:
                    d5:83:80:44:9f:8f:82:cf:e8:f6:4b:2b:54:99:72:
                    20:d6:8c:78:27:9a:07:0a:a6:c2:d8:7f:1c:07:f1:
                    27:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A5:D2:9F:8B:E0:C1:B7:40:AF:1D:93:F0:82:89:6A:4F:FE:C5:39
            X509v3 Authority Key Identifier:
                keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c1:2e:5f:85:08:9a:f2:be:6b:0d:d3:bb:39:36:62:c8:c1:
         8e:26:8c:ea:32:7f:a6:71:e5:ac:57:97:fe:2e:b7:45:20:07:
         f4:57:a6:7f:cf:23:2b:62:f4:14:e9:2d:bd:2a:25:fa:91:c0:
         ed:27:e7:b9:7a:97:e7:66:31:1a:37:a9:26:83:0a:95:09:c5:
         b2:f4:da:83:3d:b8:e6:d7:25:e7:e3:dd:2b:a2:32:69:d5:36:
         6b:b9:a6:b8:5d:77:d4:30:87:69:75:9e:e9:1e:b2:a5:27:da:
         54:01:f8:f4:03:11:e1:7a:aa:5d:9d:46:cc:b1:b0:54:fe:f2:
         15:c4:60:ad:25:17:8d:cb:b0:bf:b1:7d:f8:d9:48:91:cd:5f:
         b4:dd:61:3c:9c:e3:44:be:3e:88:71:27:03:95:f9:6c:2d:ed:
         47:14:17:c4:10:9c:96:8a:f2:41:2c:e6:f9:67:7a:99:42:7c:
         7e:01:e7:49:59:5b:46:02:03:ab:ed:28:a3:19:3e:75:95:0c:
         37:8e:83:4b:a0:98:6a:cd:26:ec:fa:ba:12:89:8b:4b:06:fd:
         d7:92:09:a5:7f:15:2e:c9:59:d2:54:e8:63:9b:d3:7b:38:e6:
         ba:75:3c:7c:50:d1:99:1e:9e:f4:ac:3a:b0:9e:e5:03:2f:cb:
         ad:88:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:13 2025 by rpki-client