Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
File:                     fHsh1E3T3s6a76jRvdnhrs9LUY0.mft (raw, json)
Hash identifier:          AsGfIOKRDyx3WZUOBiGlCt6wCeJVcpkKA5sZ8pm1smI=
Subject key identifier:   19:7D:4D:43:4B:2D:6E:73:2E:39:D7:F4:AB:EE:AD:CE:B3:52:A3:9F
Authority key identifier: 7C:7B:21:D4:4D:D3:DE:CE:9A:EF:A8:D1:BD:D9:E1:AE:CF:4B:51:8D
Certificate issuer:       /CN=F362DE23AF/serialNumber=7C7B21D44DD3DECE9AEFA8D1BDD9E1AECF4B518D
Certificate serial:       5B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fHsh1E3T3s6a76jRvdnhrs9LUY0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
Manifest number:          58
Signing time:             Thu 18 Sep 2025 05:01:28 +0000
Manifest this update:     Thu 18 Sep 2025 05:01:27 +0000
Manifest next update:     Sat 20 Sep 2025 05:01:27 +0000
Files and hashes:         1: fHsh1E3T3s6a76jRvdnhrs9LUY0.crl (hash: eLrJU77q6O9tLDLyXIufHCeEtjYQQCkaAAGBv9MLo7o=)
                          2: 61A3E35055B111F0BEABAEADDAE4EC9C.roa (hash: 5RZ+g8PtYtB8DddiaGipYGbE8zOMK03uWK9ehUr/Igs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fHsh1E3T3s6a76jRvdnhrs9LUY0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362DE23AF, serialNumber=7C7B21D44DD3DECE9AEFA8D1BDD9E1AECF4B518D
        Validity
            Not Before: Sep 18 05:01:27 2025 GMT
            Not After : Sep 20 05:01:27 2025 GMT
        Subject: CN=68cb9228-9491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:a4:c9:f3:21:fb:40:c2:e5:37:2e:df:f9:
                    09:a9:0f:41:d9:d0:3f:c3:5a:e8:f8:bd:1b:8b:ea:
                    c1:85:98:1d:9b:a5:5a:41:95:7b:93:0a:1a:cb:fd:
                    8e:14:bf:f1:6c:a5:7b:91:85:75:4f:dd:ea:9f:18:
                    37:35:9c:a8:7c:6f:3b:64:77:5f:4f:aa:b9:67:f0:
                    43:ec:7a:cd:de:ed:3c:79:ec:2e:76:ad:40:f0:62:
                    80:d4:2e:b3:c4:08:61:4f:22:84:fb:1f:f3:13:80:
                    ba:a0:b5:d6:e7:d3:f0:ef:91:6d:c3:6d:e8:42:3e:
                    02:20:e6:f1:b4:6c:c2:70:a6:52:bb:48:aa:dd:a8:
                    55:a8:89:45:e4:74:5e:df:71:b0:c6:a5:7d:61:6e:
                    c9:53:15:49:7f:dd:8e:c7:6a:20:94:2c:63:1b:ef:
                    ea:14:92:df:ea:76:e6:b1:41:bb:87:6b:5d:b3:63:
                    62:cf:55:0d:de:fe:9b:fa:63:37:a0:a7:8b:39:fd:
                    e2:5d:bb:1a:cc:ff:6f:57:80:92:91:67:05:a0:57:
                    64:fa:4f:9f:69:7a:09:ed:b4:a0:6a:18:26:d6:1f:
                    74:24:a8:50:f2:29:c1:ae:87:05:99:f9:1f:14:36:
                    7b:a3:d2:96:1b:34:47:6d:10:2a:f4:83:20:fb:6d:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7D:4D:43:4B:2D:6E:73:2E:39:D7:F4:AB:EE:AD:CE:B3:52:A3:9F
            X509v3 Authority Key Identifier:
                keyid:7C:7B:21:D4:4D:D3:DE:CE:9A:EF:A8:D1:BD:D9:E1:AE:CF:4B:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fHsh1E3T3s6a76jRvdnhrs9LUY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c9:17:b2:bc:5a:3c:94:fc:b4:71:ef:08:93:a1:70:77:ef:
         3d:a3:05:12:09:15:f8:30:8d:d4:81:57:df:f5:6a:56:87:d4:
         bf:40:d4:7f:85:1d:e2:b1:8b:32:53:fc:ca:ef:6a:80:39:df:
         79:f3:34:6b:4f:88:21:72:e4:14:4d:47:cb:b0:b0:d2:18:6a:
         4e:b9:f0:5c:63:c6:5c:20:43:6f:da:75:3f:cc:38:e7:e5:de:
         5d:d5:36:5e:c8:f0:a7:4d:ca:32:c2:ee:c5:3f:4d:38:d4:38:
         8a:4f:02:52:55:56:f6:a6:0a:c9:a3:eb:39:ce:b8:e3:50:53:
         2a:3b:83:be:dc:78:da:2b:eb:d4:5f:5a:3b:08:ff:39:7a:8a:
         21:e5:1b:d9:1f:72:77:38:90:ea:5a:1d:a4:9b:29:75:f4:8b:
         eb:cc:39:bd:1a:f0:12:f8:bc:30:17:f5:23:c2:95:7f:36:3f:
         e5:54:aa:af:32:06:2b:5a:99:42:b2:33:db:ac:29:d6:09:83:
         5e:b3:c4:11:6f:d8:12:19:0c:ae:ee:dc:9b:aa:5a:65:a2:c9:
         ff:e8:92:8c:9a:11:68:7f:67:a9:7a:01:51:92:e4:ad:2f:c7:
         92:38:d0:b8:db:c0:57:20:47:08:6c:8e:00:b5:c3:ec:b3:f6:
         94:76:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:06:53 2025 by rpki-client