Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File:                     KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier:          PJ0BiuYLgvSipEKlc3Q/foTfGf7xuy4K55E7xHZmadg=
Subject key identifier:   3F:EF:01:03:5C:6A:59:03:3D:8F:B9:C8:02:CF:88:31:09:0B:99:42
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       0E80
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number:          0E73
Signing time:             Sun 27 Jul 2025 00:56:28 +0000
Manifest this update:     Sun 27 Jul 2025 00:56:27 +0000
Manifest next update:     Tue 29 Jul 2025 00:56:27 +0000
Files and hashes:         1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: qdZiPwkqkfoLbAzabOEY2/Ra0QdI7SYH7LdU72g0us4=)
                          2: 7C0BFD26F4F511EFB3E4B9B5762E951A.roa (hash: 5wXs7RMJiyud6JyXFkR1o4z/jMZs+dRUug3mlkais2g=)
                          3: 603F44FEF4F511EF825958B5762E951A.roa (hash: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=)
                          4: E90F871CA09811ECA7CC64845A40D577.roa (hash: oxWlZcS9cWEi0+CZBGrhmI9nrUQ78IAE+xwjMFu/v9A=)
                          5: BE403084F2A411EFA60BB451762E951A.roa (hash: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=)
                          6: 30DA2FD2D99011EBB3AFA075F8AEA228.roa (hash: p31uwZZBrdaLtBzico1EAerpqK+JUtNLbRhjPY74axU=)
                          7: E5D310BCF2A411EF9A7E2652762E951A.roa (hash: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=)
                          8: A66C5B60EEFB11EAB67BB760F8AEA228.roa (hash: FhdIMm+EQ8oEL4UIZyKUV2bOPB0gTKOHcKnmpA8WxzA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3712 (0xe80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF, serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: Jul 27 00:56:27 2025 GMT
            Not After : Jul 29 00:56:27 2025 GMT
        Subject: CN=6885793c-69e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:06:46:c0:1c:f4:c5:10:62:8d:94:c3:64:
                    63:83:a7:b4:37:e7:ce:cb:d5:2b:72:e4:8b:c2:dc:
                    c8:be:b1:d0:93:9a:63:27:ec:80:39:04:a3:83:48:
                    7e:98:23:bf:b9:18:0b:4a:3a:9b:48:9e:c1:4b:64:
                    cc:32:60:07:3e:53:a1:a7:0b:79:ef:1c:c7:bc:92:
                    c8:b1:6a:ef:4d:f6:c4:67:f5:ea:d2:c0:e7:2d:34:
                    ca:96:12:69:8e:83:24:3e:a6:91:7b:01:4c:0f:73:
                    35:72:50:5e:3f:5e:57:09:b9:2f:89:ee:fc:4f:fb:
                    71:51:38:3f:60:e1:1b:72:fa:c9:0a:85:a5:62:99:
                    35:66:2c:ca:4d:b3:93:0b:ae:56:69:94:2e:d8:4a:
                    20:4f:bd:36:6b:4a:86:6e:c4:8c:db:08:26:c8:2b:
                    07:50:92:1b:f7:5b:39:84:5c:ce:d8:c8:e6:13:4a:
                    f4:50:34:aa:94:41:ef:d3:42:68:88:bc:69:4e:9b:
                    cf:22:ac:e1:86:d2:fe:a8:ba:8d:9d:ef:b1:79:4d:
                    60:ca:f8:9a:3f:0b:ee:82:85:2d:85:91:a6:a5:09:
                    43:30:30:d1:55:20:fd:ce:8a:37:e4:7b:02:a9:03:
                    7f:73:9f:fa:0c:48:a0:55:ac:26:19:c4:6a:4e:e1:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EF:01:03:5C:6A:59:03:3D:8F:B9:C8:02:CF:88:31:09:0B:99:42
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:ed:a6:1d:8b:12:d4:ea:15:9b:43:d0:a7:4d:8b:76:66:
         5f:f4:75:d4:2d:ff:9f:60:2e:18:cf:5d:d4:e7:e1:b7:f4:93:
         39:54:ba:6d:5c:88:7c:83:4c:1f:9f:80:ed:1e:8f:7d:f2:0b:
         13:43:2d:79:2e:bb:da:a0:05:77:66:6e:d1:34:ad:64:46:74:
         2e:25:3c:f1:b2:8a:80:60:9f:a7:37:4b:be:d0:75:b6:49:b4:
         4d:39:a2:9c:5c:5b:ef:52:f6:65:bd:f7:6f:2a:dd:e7:04:e7:
         ec:b9:95:7d:85:8d:5a:37:e4:84:66:89:9a:53:51:53:26:80:
         a5:dd:9d:71:c8:97:84:00:bf:af:ec:68:14:87:b8:1b:b2:0b:
         59:e7:65:5d:5b:09:2d:e8:fe:88:f1:1c:51:f0:e8:d5:49:82:
         fd:b3:bf:65:f2:d1:70:62:0b:80:b3:d7:a7:37:a1:52:f9:11:
         69:ca:17:cd:9e:ad:d9:74:81:f3:02:15:31:ba:c3:1d:3b:13:
         d7:7b:0e:bb:f8:b2:f4:c5:8e:93:fd:10:8e:13:9f:0a:36:35:
         57:2d:b8:0b:67:b8:88:50:86:ab:ea:37:31:c7:97:91:80:28:
         b2:b8:0d:4b:e1:2f:df:f6:9e:1c:4e:be:e2:f4:1f:9c:28:08:
         dd:d3:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:41:31 2025 by rpki-client