Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
File:                     3EJIwHspjM1rOedr4TDL0ntsigU.mft (raw, json)
Hash identifier:          v/euuWFJOBBsjD7v+pv5UhVAKHrTrkZIJPY4wHS+260=
Subject key identifier:   8C:AB:46:FD:C7:F8:72:40:28:0F:65:B6:41:7A:CE:D4:CC:08:05:68
Authority key identifier: DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
Certificate issuer:       /CN=F3629595AF/serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
Certificate serial:       02E2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
Manifest number:          02E0
Signing time:             Thu 31 Jul 2025 04:03:31 +0000
Manifest this update:     Thu 31 Jul 2025 04:03:30 +0000
Manifest next update:     Sat 02 Aug 2025 04:03:30 +0000
Files and hashes:         1: 3EJIwHspjM1rOedr4TDL0ntsigU.crl (hash: ATOYDMn4Yugk1tg8euCEe/plEOWH/oY86NwixonlGF0=)
                          2: 054094BC3FF811EE81E5E73E4AD9E6FC.roa (hash: CjcOFUpPISl7bBWR1ojvxALzjkJgMeu4M9y6B2QpvRg=)
                          3: BE084E483D0C11EEA697D1784AD9E6FC.roa (hash: d3pcG470SIIHRtD4u5KMhKjkrzBNkxu/J9n0pkCnKfA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629595AF, serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
        Validity
            Not Before: Jul 31 04:03:30 2025 GMT
            Not After : Aug  2 04:03:30 2025 GMT
        Subject: CN=688aeb12-1c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:8b:fb:ca:fa:64:03:70:77:b3:7d:cf:bc:
                    8e:44:76:4b:ec:0f:b5:9f:d1:04:06:39:db:89:c4:
                    94:23:1c:0a:a9:e3:78:7c:ba:9d:63:9e:46:c1:68:
                    5f:60:42:4d:19:0c:13:3b:b7:b3:a6:4c:2b:fd:02:
                    88:d5:06:89:38:0d:d4:11:08:09:4c:73:c4:c9:30:
                    33:1f:87:f1:77:d6:4a:80:06:eb:d8:c9:38:fa:6c:
                    1f:e9:7d:37:37:63:94:04:37:61:e6:58:8c:23:8d:
                    34:c0:41:07:b2:fa:35:52:f8:6d:7b:6b:e3:b7:6b:
                    d7:6e:72:d7:e9:a5:88:67:5b:c1:d4:76:c5:36:d5:
                    75:6c:37:a1:6b:d0:1d:d5:4d:9c:95:d7:f0:be:fb:
                    63:2b:ce:5a:a5:d6:97:14:e4:df:64:e5:98:c4:e9:
                    7e:2d:4c:3b:fb:47:9c:3c:d2:16:2c:6f:33:ee:d9:
                    85:ba:b0:82:ac:ce:fd:be:ea:0b:33:9b:e4:8e:e0:
                    45:dc:66:8c:c7:82:02:5c:a5:bf:ee:4d:fb:d3:da:
                    4f:e0:b9:d8:1a:55:50:88:3a:5d:fe:d9:a0:97:2d:
                    fe:25:8b:2a:c7:b7:fc:4f:5b:b7:39:9e:e1:a1:b9:
                    6f:a1:d7:96:82:ab:ab:c0:61:df:b3:81:18:25:11:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AB:46:FD:C7:F8:72:40:28:0F:65:B6:41:7A:CE:D4:CC:08:05:68
            X509v3 Authority Key Identifier:
                keyid:DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:50:c5:43:cb:b1:48:a6:68:44:09:54:18:f9:70:20:f6:5a:
         99:d7:88:32:07:c8:56:c0:85:01:76:55:cf:ab:66:b9:b3:1f:
         68:d2:c3:9f:b5:8a:90:3b:3a:df:93:6d:88:cf:63:c7:29:f0:
         fb:d9:c3:36:5c:67:f3:f3:f2:b3:c7:f6:9e:a3:c3:41:3c:b4:
         2f:36:e2:41:08:7c:81:50:d1:57:70:7b:3d:30:b3:73:99:e5:
         65:c8:0b:0f:27:80:67:ad:62:36:6b:ca:d2:de:09:1e:ae:43:
         6e:b7:4b:4b:a7:a1:b6:45:66:a2:29:e4:51:52:d1:8c:a3:e7:
         a5:a6:aa:a6:36:f3:a0:fc:1c:2f:90:e4:8b:6e:11:24:de:a1:
         09:fe:86:a1:be:06:d4:e6:dc:da:e8:5f:71:60:93:32:09:4a:
         52:d4:02:05:7a:96:0b:64:6e:76:45:92:6e:18:f8:9f:b0:75:
         3b:34:a8:44:99:a8:c1:df:b5:a5:d3:ab:d6:a3:83:86:0a:d7:
         25:49:57:d2:dc:15:25:7d:d1:15:43:de:15:f9:34:2c:1e:92:
         11:85:86:cb:c6:c5:3a:5b:4d:c1:13:bb:09:a7:c0:68:12:0e:
         58:9b:6f:8c:be:86:f2:2f:74:6e:4a:3f:1d:19:ae:fc:20:45:
         f3:05:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:54 2025 by rpki-client