Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
File:                     UJrkB4CHuVMUvanvade7dIgcL94.mft (raw, json)
Hash identifier:          Wu/63urR8+Ll5naJCA5GjqXyJSyw9BhYBvGbtMT8tD0=
Subject key identifier:   C9:63:6E:FA:69:2E:F7:43:4B:84:4A:14:67:23:10:AA:36:97:C2:8E
Authority key identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
Certificate issuer:       /CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
Certificate serial:       0114
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
Manifest number:          0110
Signing time:             Wed 11 Jun 2025 04:56:45 +0000
Manifest this update:     Wed 11 Jun 2025 04:56:44 +0000
Manifest next update:     Fri 13 Jun 2025 04:56:44 +0000
Files and hashes:         1: UJrkB4CHuVMUvanvade7dIgcL94.crl (hash: +HgSg0vQwfwqbufDOnxTu86UvlppClzuNkvLMxyGlDk=)
                          2: FCFCC1C67A7111EF9AF36551762E951A.roa (hash: qrAboZUTqac+Q2mxl59aHmWOevvURvqrYd1DnspbsRc=)
                          3: 8CB5168E7A7111EFA28C7C4D762E951A.roa (hash: wxbx8f56MZI34oPvLMhsBGgkuRggcFGrbjCG/8PfNq8=)
                          4: 077D2872950A11EF882E6662762E951A.roa (hash: FmMHw1MbWECOIR2uR6bUIj//ZenNUVJQZYWgci9jbBo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 13 Jun 2025 04:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630501AF, serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
        Validity
            Not Before: Jun 11 04:56:44 2025 GMT
            Not After : Jun 13 04:56:44 2025 GMT
        Subject: CN=68490c8d-abb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:49:2a:6d:87:77:e9:88:a4:f2:9a:44:31:
                    af:b6:ee:cc:0c:d2:29:c5:4a:6b:f7:50:f7:4f:4d:
                    66:99:94:1e:2b:b1:8b:22:1b:8e:37:eb:93:5d:60:
                    2f:98:1d:66:77:24:cd:f2:5f:28:0b:9b:ce:8e:f0:
                    5b:69:54:96:89:f2:c3:1c:43:03:19:89:30:41:79:
                    79:ab:8d:78:0f:09:9e:cc:90:30:9e:dc:51:22:19:
                    18:78:f6:18:86:da:bf:2c:7e:e9:1e:4a:95:0a:36:
                    87:74:40:4b:44:2a:ea:b7:54:b4:d9:4d:89:5f:99:
                    67:b0:19:1e:13:ff:33:1e:89:0f:f5:c8:5f:cf:7c:
                    2a:0e:f7:fe:0b:ac:99:35:fe:64:21:6d:6d:11:a9:
                    34:ba:41:0d:0f:d3:1e:84:dd:7b:c6:39:48:76:27:
                    e4:b3:3e:7f:51:55:b9:6a:db:98:e1:ca:57:ae:06:
                    0e:cd:de:d9:9f:a7:db:1a:07:e0:c9:f8:81:69:dd:
                    2c:bf:28:0a:d7:37:1d:d5:78:10:71:9f:d6:8c:11:
                    ca:21:58:de:b7:be:08:bf:bc:25:79:27:c7:16:00:
                    84:74:f2:b6:6d:27:e8:60:9b:37:31:f8:96:2d:06:
                    33:ad:02:11:9f:98:5a:5b:41:d2:38:e1:ef:e1:c5:
                    57:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:63:6E:FA:69:2E:F7:43:4B:84:4A:14:67:23:10:AA:36:97:C2:8E
            X509v3 Authority Key Identifier:
                keyid:50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8f:8c:ae:ba:7b:c5:0d:89:ec:64:a4:e7:2c:4b:4e:3a:87:
         fd:11:7c:ff:b4:be:ac:f8:63:b1:08:10:fe:3e:e0:ad:26:e4:
         b8:00:5d:c7:48:ea:e3:f3:5a:bf:8e:7a:94:11:0d:26:96:56:
         c1:22:b6:e1:07:94:0e:ee:e3:43:47:b8:33:90:58:d7:a8:5c:
         e6:8e:bb:e2:45:9d:a9:a4:2d:c3:ba:db:36:01:13:bb:28:86:
         f6:6b:7e:0b:e8:b5:56:3b:fa:0a:97:10:de:44:f5:6c:fb:57:
         4b:a5:4f:0c:f9:72:c7:6c:d5:6a:a6:a7:b0:16:41:df:b9:21:
         1c:46:89:c2:7b:a4:8c:6b:bf:39:5f:3f:3d:23:68:9a:a1:bd:
         50:b5:ee:6a:49:93:e9:27:d3:d6:88:fa:28:3f:2b:ef:8e:38:
         de:ac:8c:24:a6:53:51:82:db:4b:3d:b7:a8:a8:9c:eb:8d:8d:
         54:40:6d:4e:82:4e:41:a8:01:9e:b3:c4:8e:9e:58:7a:11:7f:
         e1:ae:ef:ad:af:6c:81:a6:a2:36:6d:21:ce:b6:be:91:df:cd:
         9c:7b:67:b8:b2:e0:6a:51:c8:1e:d4:6c:0a:2d:92:14:06:f6:
         ce:43:42:a5:30:b3:d7:15:4a:8f:32:3b:25:a2:b1:ef:79:02:
         4d:d8:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:55:02 2025 by rpki-client