Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
File:                     nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft (raw, json)
Hash identifier:          kpMDIg5EFYD7PNGgkpxaWYqILlYM1qtoZqznTKPSAMQ=
Subject key identifier:   3B:FE:53:A2:F2:87:71:C3:B7:D1:50:67:3F:5F:C3:DA:39:AF:4F:78
Authority key identifier: 9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20
Certificate issuer:       /CN=F3623AE4AF/serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
Certificate serial:       C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
Manifest number:          C0
Signing time:             Sat 07 Jun 2025 05:08:16 +0000
Manifest this update:     Sat 07 Jun 2025 05:08:15 +0000
Manifest next update:     Mon 09 Jun 2025 05:08:15 +0000
Files and hashes:         1: nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl (hash: lply/DErpvgBpoqO57rvsMa8pjmzXWSXdmTxfA5LRNw=)
                          2: 0CBAC432B27111EF99B95144762E951A.roa (hash: gmMvunoj5KNwjAHQwXEB9NQDDcCeTBCj9SxbM2LLQYk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 05:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623AE4AF, serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
        Validity
            Not Before: Jun  7 05:08:15 2025 GMT
            Not After : Jun  9 05:08:15 2025 GMT
        Subject: CN=6843c940-f67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:14:d5:ef:ae:12:96:d3:0f:cf:b1:f7:e0:
                    01:85:1c:13:07:95:cf:05:83:58:9d:68:64:7c:b1:
                    80:b6:3c:a1:76:48:46:4c:1c:a0:ba:60:83:0d:02:
                    d3:56:00:c9:8c:b6:f6:ba:6f:bf:0c:2e:a6:c7:40:
                    c6:43:3b:41:86:7d:fa:e5:22:f6:a2:f3:72:62:e6:
                    fc:a4:2e:a4:c7:c1:40:94:ec:23:3f:d3:74:25:d3:
                    b2:9c:86:4e:be:f1:b4:5c:7c:3e:21:c3:b7:27:b5:
                    45:6c:29:9a:6f:6b:02:0d:32:91:42:f8:65:99:1f:
                    18:18:57:08:7c:89:82:15:0d:63:5b:12:37:29:dc:
                    6e:a3:e3:93:70:ec:7f:9f:62:4f:e3:e6:d2:a9:1b:
                    bd:c2:85:3e:d0:6d:e3:b2:04:af:f0:65:89:ee:43:
                    1e:c7:32:4c:87:5e:cc:97:53:74:86:97:a5:af:fd:
                    b9:a8:2a:d1:9a:69:6b:13:88:26:46:9c:39:f3:26:
                    a0:30:5b:37:3a:ba:be:2d:dd:9a:d4:a6:8d:4e:77:
                    ac:25:a6:bc:fe:d4:9f:9d:b6:40:7e:32:a0:23:44:
                    e5:09:e6:93:e2:27:1b:17:78:9f:1f:3a:a3:1c:3d:
                    f3:d8:c0:9b:67:d6:de:9c:54:29:1a:a9:27:11:76:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FE:53:A2:F2:87:71:C3:B7:D1:50:67:3F:5F:C3:DA:39:AF:4F:78
            X509v3 Authority Key Identifier:
                keyid:9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d9:e5:9c:72:9d:96:47:aa:ba:4e:76:54:95:e2:b7:d6:5c:
         8c:b6:ad:e1:c5:d3:ab:3e:ae:cd:8e:b5:d8:87:ce:32:42:bb:
         98:90:ab:9e:2e:e3:f2:61:17:92:4f:b8:71:6d:91:43:54:6c:
         be:a7:75:f9:75:81:3d:f6:01:4e:50:5f:7e:b1:6b:18:b2:62:
         61:57:30:b8:96:71:3f:51:b1:2d:bb:f5:e2:76:79:7e:de:2e:
         33:34:9a:07:af:57:25:6b:d2:6d:20:09:3c:25:a5:e5:f6:9b:
         08:f1:c6:cf:77:54:27:84:df:63:f8:31:4c:1e:02:91:eb:b8:
         02:c1:2a:b4:b6:f6:80:60:65:3f:59:e7:cf:0e:86:e8:31:aa:
         fc:d7:a7:aa:6b:ff:65:7f:8b:c1:b1:06:b4:59:c4:a7:0e:95:
         70:26:e3:8c:83:ea:44:f9:6e:c9:54:cd:0e:3b:fb:b0:80:1b:
         64:35:40:3b:6a:ad:ae:f6:00:c6:3f:27:b1:10:f0:0b:f2:c2:
         c7:3b:15:3c:1d:73:9f:b4:e7:e0:36:dd:e7:46:63:e7:94:84:
         d0:ec:ea:36:ed:df:d5:a8:51:e7:9f:5f:8f:26:18:74:af:10:
         c6:ce:7c:f5:d7:e3:ed:a0:7a:cb:9c:5a:d0:54:93:6b:51:c1:
         88:85:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:18:22 2025 by rpki-client