Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
File:                     3EJIwHspjM1rOedr4TDL0ntsigU.mft (raw, json)
Hash identifier:          Ipbk7N+lrmMGYMDi8hEbvpDZO2iS8ogNHKOGxWHwMW4=
Subject key identifier:   04:9B:3F:19:56:68:71:9B:8E:B1:1A:8A:0E:32:9D:35:5A:D4:D0:22
Authority key identifier: DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
Certificate issuer:       /CN=F3629595AF/serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
Certificate serial:       02AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
Manifest number:          02AA
Signing time:             Sun 08 Jun 2025 03:56:24 +0000
Manifest this update:     Sun 08 Jun 2025 03:56:23 +0000
Manifest next update:     Tue 10 Jun 2025 03:56:23 +0000
Files and hashes:         1: 3EJIwHspjM1rOedr4TDL0ntsigU.crl (hash: 1Vl5LHiBqFQ/WOyfDRUBu7c0KJddiXEmFuqhxBSzoTI=)
                          2: 054094BC3FF811EE81E5E73E4AD9E6FC.roa (hash: CjcOFUpPISl7bBWR1ojvxALzjkJgMeu4M9y6B2QpvRg=)
                          3: BE084E483D0C11EEA697D1784AD9E6FC.roa (hash: d3pcG470SIIHRtD4u5KMhKjkrzBNkxu/J9n0pkCnKfA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629595AF, serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
        Validity
            Not Before: Jun  8 03:56:23 2025 GMT
            Not After : Jun 10 03:56:23 2025 GMT
        Subject: CN=684509e8-52bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:de:52:75:08:e6:b3:2f:88:0a:51:1c:8b:
                    55:b9:bf:30:66:a5:2f:dd:d1:88:72:fb:74:96:5b:
                    72:3f:4e:ca:f8:57:fc:7a:03:a1:a3:1d:03:b1:39:
                    d2:30:99:05:3b:00:dc:1a:71:90:16:f5:04:9e:95:
                    ae:3d:c9:42:da:29:5c:ba:61:e2:d3:b0:3d:6f:da:
                    a7:8b:f5:6e:9b:3d:81:46:cd:5f:ab:6d:e0:59:15:
                    4e:40:c0:8a:9d:24:2f:9f:34:83:e4:e6:1a:13:21:
                    23:25:9a:41:24:36:f0:cc:d7:02:5f:5d:a1:22:19:
                    85:9b:e2:49:c8:1e:28:73:c0:55:d0:00:42:70:d7:
                    cc:87:ac:5a:3c:48:5e:84:19:46:35:2e:e8:64:92:
                    29:73:7f:05:f6:bb:cf:06:aa:0d:7f:26:8e:b2:9f:
                    ea:29:de:aa:8c:af:94:c5:9a:55:fe:e2:95:9a:e3:
                    4d:32:0d:5f:2d:61:9d:a6:5b:b6:d2:a0:e5:00:04:
                    a9:94:0c:7c:74:b2:fd:dc:e9:15:e2:f7:e0:c9:0a:
                    1d:c0:fc:52:57:a5:e9:15:07:ef:4f:db:2d:cb:09:
                    1c:d2:2f:77:ba:15:50:a0:94:c4:13:22:51:9c:0c:
                    f1:fd:5e:ce:77:7d:79:f0:df:4e:39:5d:c8:3c:ad:
                    68:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9B:3F:19:56:68:71:9B:8E:B1:1A:8A:0E:32:9D:35:5A:D4:D0:22
            X509v3 Authority Key Identifier:
                keyid:DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:13:81:5f:69:05:12:54:ff:63:62:54:34:4a:ee:66:49:
         85:cf:d6:93:ab:7d:1c:bf:1a:c5:38:d0:1d:e7:15:d5:b5:14:
         b7:1c:31:7b:7f:77:58:0c:0e:d0:37:8d:87:0e:71:c1:d1:c1:
         9d:cd:ab:33:a6:62:6e:6b:36:da:1a:64:64:18:7c:ea:e3:78:
         45:8a:b8:7b:49:4f:59:d9:9b:f7:1b:2f:8d:6d:e6:23:c4:55:
         2b:8a:a6:c1:42:36:10:20:55:a7:11:0e:08:49:c6:aa:2a:45:
         57:a0:05:68:a4:d1:d1:11:9e:e5:08:da:15:5f:ac:a8:c8:0c:
         d3:15:73:20:c8:1c:6d:3d:24:1e:f3:6e:1d:56:1e:32:34:43:
         e6:d3:17:ea:5d:89:78:dd:de:16:40:22:58:6b:aa:9a:25:6d:
         1a:36:7f:0e:e6:b7:59:f4:52:e6:f0:3e:a5:2c:cd:ff:04:60:
         67:95:df:30:57:a1:65:08:88:a7:f4:fc:ea:68:c9:02:c2:54:
         44:b2:ed:0d:83:5b:bc:33:10:21:ef:cf:ae:0b:eb:ac:44:a8:
         07:1b:ea:00:5b:c0:e5:e9:53:3d:e5:4e:40:e0:2a:fe:09:fb:
         79:80:af:33:d6:ab:75:31:ba:5e:19:68:c5:60:cf:0f:19:01:
         3b:a2:ae:73
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mjk1OTVBRjExMC8GA1UEBRMoREM0MjQ4QzA3QjI5OENDRDZCMzlFNzZCRTEzMENC
RDI3QjZDOEEwNTAeFw0yNTA2MDgwMzU2MjNaFw0yNTA2MTAwMzU2MjNaMBgxFjAU
BgNVBAMTDTY4NDUwOWU4LTUyYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLid5SdQjmsy+IClEci1W5vzBmpS/d0Yhy+3SWW3I/Tsr4V/x6A6GjHQOx
OdIwmQU7ANwacZAW9QSela49yULaKVy6YeLTsD1v2qeL9W6bPYFGzV+rbeBZFU5A
wIqdJC+fNIPk5hoTISMlmkEkNvDM1wJfXaEiGYWb4knIHihzwFXQAEJw18yHrFo8
SF6EGUY1LuhkkilzfwX2u88Gqg1/Jo6yn+op3qqMr5TFmlX+4pWa400yDV8tYZ2m
W7bSoOUABKmUDHx0sv3c6RXi9+DJCh3A/FJXpekVB+9P2y3LCRzSL3e6FVCglMQT
IlGcDPH9Xs53fXnw3045Xcg8rWjLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBJs/
GVZocZuOsRqKDjKdNVrU0CIwHwYDVR0jBBgwFoAU3EJIwHspjM1rOedr4TDL0nts
igUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI5NTk1LzYxMkM2OTg0M0QwQzExRUU5NjU1OUQ3NzRBRDlFNkZDLzNFSkl3
SHNwak0xck9lZHI0VERMMG50c2lnVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNFSkl3SHNwak0xck9lZHI0VERMMG50c2lnVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mjk1OTUvNjEyQzY5ODQzRDBDMTFFRTk2NTU5RDc3NEFE
OUU2RkMvM0VKSXdIc3BqTTFyT2VkcjRUREwwbnRzaWdVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDwBOBX2kFElT/Y2JUNEruZkmFz9aT
q30cvxrFONAd5xXVtRS3HDF7f3dYDA7QN42HDnHB0cGdzaszpmJuazbaGmRkGHzq
43hFirh7SU9Z2Zv3Gy+NbeYjxFUriqbBQjYQIFWnEQ4IScaqKkVXoAVopNHREZ7l
CNoVX6yoyAzTFXMgyBxtPSQe824dVh4yNEPm0xfqXYl43d4WQCJYa6qaJW0aNn8O
5rdZ9FLm8D6lLM3/BGBnld8wV6FlCIin9PzqaMkCwlREsu0Ng1u8MxAh78+uC+us
RKgHG+oAW8Dl6VM95U5A4Cr+Cft5gK8z1qt1MbpeGWjFYM8PGQE7oq5z
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:35:18 2025 by rpki-client