Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
File:                     JJfLAcvhH34S4q3Y1P8jILlpA20.mft (raw, json)
Hash identifier:          H16C1A9wEgxuO0ojKhzpU4pfZOW6okQtGR/nroTa7vI=
Subject key identifier:   E6:AC:62:F8:2C:C5:E5:DF:F6:84:FB:A1:7C:70:E5:53:53:0C:25:45
Authority key identifier: 24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D
Certificate issuer:       /CN=F3628CF1AF/serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
Certificate serial:       02BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
Manifest number:          02BD
Signing time:             Sun 27 Jul 2025 04:04:42 +0000
Manifest this update:     Sun 27 Jul 2025 04:04:41 +0000
Manifest next update:     Tue 29 Jul 2025 04:04:41 +0000
Files and hashes:         1: JJfLAcvhH34S4q3Y1P8jILlpA20.crl (hash: xXmaqdWCojkNoS/Rv+wq64rXQvlhfMTfEfbkBI3pspM=)
                          2: D5189642585A11EE959ED9784AD9E6FC.roa (hash: KsQ50yFvchQtrtq3TNZ2t0VHuQZ3asdeMse4z12DwNw=)
                          3: 0525AE88585B11EEA76861794AD9E6FC.roa (hash: 7rp3+TdgE0k+yfnwL23onTrWLktoLa5cPkFU5dKOKQ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628CF1AF, serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
        Validity
            Not Before: Jul 27 04:04:41 2025 GMT
            Not After : Jul 29 04:04:41 2025 GMT
        Subject: CN=6885a55a-d40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:c4:b0:77:39:a5:e5:cd:1a:12:eb:3f:15:
                    2c:88:a7:87:c0:84:10:7f:05:73:9f:18:b8:76:09:
                    4c:46:48:b0:4c:19:00:05:e9:b6:a3:e7:0e:2c:04:
                    6c:80:e5:21:38:4a:46:0a:aa:19:29:a5:7d:41:de:
                    63:94:ca:d8:b3:5d:32:7a:11:f2:c0:38:97:8d:d7:
                    dc:56:2f:22:d9:e9:fd:85:99:87:e3:85:5b:7e:f5:
                    fa:39:ae:33:06:79:bd:6c:82:c2:93:f6:ec:4b:53:
                    9e:cf:1f:8a:3f:7f:93:99:e4:80:ca:1c:66:47:09:
                    54:91:a3:dc:99:d3:31:b7:43:08:99:a8:ca:c4:bc:
                    31:16:cf:4c:3a:57:b8:b5:92:7f:a1:c5:71:c8:ff:
                    f9:48:3e:2c:3e:9d:41:56:3c:b8:2b:fc:4a:45:36:
                    30:fa:08:26:c1:f0:44:6d:00:66:df:aa:73:cd:f2:
                    ac:fe:43:d3:93:0e:2d:47:68:53:06:1a:c1:91:7c:
                    a6:0b:e0:06:df:49:0b:c6:95:15:cc:6a:8a:8e:5f:
                    cc:0f:ab:13:e0:ca:e8:b7:51:c1:c1:c0:f1:20:eb:
                    49:ad:34:c4:71:88:48:2a:64:6a:e7:44:8d:79:7e:
                    29:ce:99:a2:fa:18:ab:f9:7e:92:0d:2c:ce:5f:3f:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AC:62:F8:2C:C5:E5:DF:F6:84:FB:A1:7C:70:E5:53:53:0C:25:45
            X509v3 Authority Key Identifier:
                keyid:24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6e:bb:4a:85:81:98:e8:be:d2:0f:0a:be:6f:fd:50:2d:50:
         4f:5b:1c:ad:24:3e:27:aa:53:02:25:da:74:93:f4:c6:07:fa:
         3f:fb:cf:cd:c4:6d:e8:29:4a:86:a9:a4:43:bf:b5:41:b2:ff:
         37:1a:51:8c:fd:65:ca:ac:56:36:97:d0:6b:1a:07:24:81:8e:
         f9:e6:7a:68:fa:09:9c:b4:f0:8b:31:82:ac:3c:a1:09:2a:d5:
         19:20:45:4f:7c:90:22:f7:87:01:78:b6:1b:b3:f8:6e:de:79:
         c1:8d:d2:3d:e5:32:c0:7c:bb:57:9e:71:96:e7:8e:75:7a:c2:
         71:58:b2:a7:b5:dc:14:82:ec:3a:0d:3d:51:9a:94:f6:8b:32:
         d5:e8:26:d5:56:a7:20:c7:ff:82:54:50:6f:02:5b:88:86:5c:
         15:9f:37:dd:09:48:12:fe:80:04:4a:42:50:b7:ac:bd:39:dd:
         ce:e9:88:bd:f4:59:a9:6f:b6:c2:ff:3e:3f:79:46:47:4f:89:
         86:bd:aa:17:f6:1e:c2:8b:83:07:21:72:da:02:f3:90:10:8c:
         f5:7d:74:14:a3:1c:99:fd:05:ba:9b:96:56:10:57:65:9c:c6:
         41:3b:5c:49:c4:45:df:e8:a1:fe:58:ec:68:6b:88:86:76:7b:
         57:08:da:38
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjhDRjFBRjExMC8GA1UEBRMoMjQ5N0NCMDFDQkUxMUY3RTEyRTJBREQ4RDRGRjIz
MjBCOTY5MDM2RDAeFw0yNTA3MjcwNDA0NDFaFw0yNTA3MjkwNDA0NDFaMBgxFjAU
BgNVBAMTDTY4ODVhNTVhLWQ0MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8FcSwdzml5c0aEus/FSyIp4fAhBB/BXOfGLh2CUxGSLBMGQAF6baj5w4s
BGyA5SE4SkYKqhkppX1B3mOUytizXTJ6EfLAOJeN19xWLyLZ6f2FmYfjhVt+9fo5
rjMGeb1sgsKT9uxLU57PH4o/f5OZ5IDKHGZHCVSRo9yZ0zG3QwiZqMrEvDEWz0w6
V7i1kn+hxXHI//lIPiw+nUFWPLgr/EpFNjD6CCbB8ERtAGbfqnPN8qz+Q9OTDi1H
aFMGGsGRfKYL4AbfSQvGlRXMaoqOX8wPqxPgyui3UcHBwPEg60mtNMRxiEgqZGrn
RI15finOmaL6GKv5fpINLM5fP8EvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5qxi
+CzF5d/2hPuhfHDlU1MMJUUwHwYDVR0jBBgwFoAUJJfLAcvhH34S4q3Y1P8jILlp
A20wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4Q0YxLzlEMTlENTY2NTYwRDExRUVBRjNEQkMyMTRBRDlFNkZDL0pKZkxB
Y3ZoSDM0UzRxM1kxUDhqSUxscEEyMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pKZkxBY3ZoSDM0UzRxM1kxUDhqSUxscEEyMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjhDRjEvOUQxOUQ1NjY1NjBEMTFFRUFGM0RCQzIxNEFE
OUU2RkMvSkpmTEFjdmhIMzRTNHEzWTFQOGpJTGxwQTIwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/brtKhYGY6L7SDwq+b/1QLVBPWxyt
JD4nqlMCJdp0k/TGB/o/+8/NxG3oKUqGqaRDv7VBsv83GlGM/WXKrFY2l9BrGgck
gY755npo+gmctPCLMYKsPKEJKtUZIEVPfJAi94cBeLYbs/hu3nnBjdI95TLAfLtX
nnGW5451esJxWLKntdwUguw6DT1RmpT2izLV6CbVVqcgx/+CVFBvAluIhlwVnzfd
CUgS/oAESkJQt6y9Od3O6Yi99Fmpb7bC/z4/eUZHT4mGvaoX9h7Ci4MHIXLaAvOQ
EIz1fXQUoxyZ/QW6m5ZWEFdlnMZBO1xJxEXf6KH+WOxoa4iGdntXCNo4
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:58:15 2025 by rpki-client