Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
File:                     Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft (raw, json)
Hash identifier:          s2rPFM/W6/Wi1aZDw1VW/sR3m7Eb2b4sMxOIfPbiXc4=
Subject key identifier:   47:44:D3:2D:FB:E8:25:DE:FF:86:7F:27:7C:5A:01:FA:97:54:99:C0
Authority key identifier: 5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA
Certificate issuer:       /CN=F362E278AF/serialNumber=5F3D4548D0494CB3EBB65FB0A79FE099A5A12CEA
Certificate serial:       0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
Manifest number:          0C
Signing time:             Sat 07 Jun 2025 05:22:42 +0000
Manifest this update:     Sat 07 Jun 2025 05:22:41 +0000
Manifest next update:     Mon 09 Jun 2025 05:22:41 +0000
Files and hashes:         1: Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl (hash: +Op+B26/1O1U8Vl+jFXCyvh7ZsnCvFf23TKi+CMr1Lg=)
                          2: 76A1AD86424D11F089D462E9DAE4EC9C.roa (hash: 920Pq5gLXNEK7ec2oQwBasEvZAmSump0pVGWoebeoI4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 05:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E278AF, serialNumber=5F3D4548D0494CB3EBB65FB0A79FE099A5A12CEA
        Validity
            Not Before: Jun  7 05:22:41 2025 GMT
            Not After : Jun  9 05:22:41 2025 GMT
        Subject: CN=6843cca2-d6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:fa:39:d3:f7:9d:da:05:a4:e5:25:23:bf:
                    55:c0:df:57:1e:08:10:7e:d7:3f:cc:6e:b1:be:d3:
                    1b:18:c5:0e:ee:f6:cb:08:35:d1:14:26:b0:bd:d0:
                    c0:07:17:f4:85:2a:1d:e0:6e:14:0d:f6:8a:86:e8:
                    e4:96:d5:8a:4e:43:bd:22:cd:3e:27:bd:3a:d7:54:
                    9c:56:26:f6:bb:b3:c0:90:7c:4c:d5:39:35:89:8f:
                    be:24:dd:e0:01:9f:82:ea:ea:33:ec:51:65:50:e9:
                    ef:4c:41:81:b1:94:91:05:4a:cd:ff:f9:b5:30:db:
                    4b:14:b0:ac:b9:f9:ce:2e:42:42:f9:4f:a8:9c:3a:
                    a4:eb:15:95:94:6f:d5:55:d8:b9:e8:84:09:49:75:
                    f1:b2:96:59:df:dd:eb:3c:f3:93:d6:15:7b:61:be:
                    fd:1b:41:9d:a1:af:ca:eb:79:73:d8:7a:1e:ed:b2:
                    40:54:e4:aa:0b:6f:a4:b7:69:1f:78:8e:aa:16:22:
                    a3:e8:1e:8a:1f:eb:9a:e1:c2:f7:f3:42:03:63:f6:
                    81:89:8d:cb:06:8d:be:3d:4e:91:9b:f2:ab:8a:d7:
                    6a:9a:a4:2b:7c:8c:66:84:bf:16:9d:c5:24:11:df:
                    12:18:d1:8f:15:dd:2c:a9:85:df:a7:31:0d:47:1b:
                    6e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:44:D3:2D:FB:E8:25:DE:FF:86:7F:27:7C:5A:01:FA:97:54:99:C0
            X509v3 Authority Key Identifier:
                keyid:5F:3D:45:48:D0:49:4C:B3:EB:B6:5F:B0:A7:9F:E0:99:A5:A1:2C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E278/2C6A530A3C6F11F0976A48D0DAE4EC9C/Xz1FSNBJTLPrtl-wp5_gmaWhLOo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:24:79:30:41:ef:c4:2e:d0:b0:0c:84:03:3b:9e:8a:43:c5:
         31:f1:39:63:73:a7:47:01:24:b1:9e:a9:7d:d1:b6:da:e4:db:
         98:96:de:79:89:4b:50:8b:11:80:4a:ec:78:11:a9:08:33:ed:
         ec:37:64:aa:09:ee:d5:fb:5f:9f:48:24:23:52:c7:ae:eb:e7:
         1c:d2:7f:97:05:6f:e5:ee:74:f7:9a:6c:4a:67:25:73:f4:f7:
         76:5b:b5:b2:f9:02:b5:02:05:a4:99:89:1b:42:ab:65:15:68:
         09:a7:58:4f:0e:3d:b0:ff:4b:f4:67:6e:b8:69:2b:a6:d2:bf:
         a3:d8:c6:ca:b8:bf:af:42:10:84:4f:b0:c1:09:18:8d:c5:96:
         63:b6:da:95:27:33:28:b8:54:79:14:3e:85:40:63:37:f3:03:
         f6:ad:aa:50:de:56:7f:cd:37:c2:17:80:cc:5f:0b:b7:16:7c:
         c2:e4:1c:97:0a:34:8f:93:73:0d:aa:d4:70:91:8b:f0:8a:ff:
         48:31:78:bd:84:92:46:0c:21:af:94:41:da:0f:b2:73:7c:57:
         3c:22:32:88:88:47:aa:85:3b:97:55:0c:d1:b8:05:3c:bc:a8:
         df:de:ee:f9:a5:65:fe:0c:0d:47:a7:c0:a6:8b:45:7b:41:fa:
         93:b8:1f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:49:03 2025 by rpki-client