Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
File:                     UJrkB4CHuVMUvanvade7dIgcL94.mft (raw, json)
Hash identifier:          cGBT2Hw/YI7h4dsdKzJ14qKHZ958Ddutu8+bvUuki4c=
Subject key identifier:   C7:84:C2:61:66:0B:3F:64:76:CA:E9:13:FD:7B:88:BA:AD:C4:1C:E8
Authority key identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
Certificate issuer:       /CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
Certificate serial:       0147
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
Manifest number:          0143
Signing time:             Thu 31 Jul 2025 05:04:27 +0000
Manifest this update:     Thu 31 Jul 2025 05:04:26 +0000
Manifest next update:     Sat 02 Aug 2025 05:04:26 +0000
Files and hashes:         1: UJrkB4CHuVMUvanvade7dIgcL94.crl (hash: yI/9UYiEwaxyFrb/RoS5gezNi2jxuU1yKGv6qMI+lRo=)
                          2: FCFCC1C67A7111EF9AF36551762E951A.roa (hash: qrAboZUTqac+Q2mxl59aHmWOevvURvqrYd1DnspbsRc=)
                          3: 8CB5168E7A7111EFA28C7C4D762E951A.roa (hash: wxbx8f56MZI34oPvLMhsBGgkuRggcFGrbjCG/8PfNq8=)
                          4: 077D2872950A11EF882E6662762E951A.roa (hash: FmMHw1MbWECOIR2uR6bUIj//ZenNUVJQZYWgci9jbBo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630501AF, serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
        Validity
            Not Before: Jul 31 05:04:26 2025 GMT
            Not After : Aug  2 05:04:26 2025 GMT
        Subject: CN=688af95b-c88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:b0:38:f2:c3:d0:60:50:3f:11:6d:a8:b3:
                    ba:74:c8:3a:01:16:bb:0c:5d:b7:12:91:aa:f9:9e:
                    0e:b3:42:89:90:19:2d:f7:23:43:03:4b:5d:b4:ec:
                    4c:15:d4:76:0e:3b:fd:87:e1:34:c1:3f:53:29:b8:
                    af:93:6e:de:9d:b6:6f:3c:ec:f2:5c:7a:2a:52:a7:
                    60:3e:96:4d:b9:46:cf:4e:eb:a3:d1:57:67:85:5e:
                    97:38:8b:36:d2:13:c9:d5:62:24:f2:9c:df:b3:ad:
                    78:00:03:e5:36:84:c1:21:bb:74:c3:bb:6f:fa:f4:
                    bf:53:9b:36:01:c9:4f:c6:41:6e:6a:fd:f8:3e:72:
                    1a:87:f6:6b:e8:6b:2c:5b:b2:65:8e:7b:54:6c:0d:
                    37:9f:9d:9f:19:0c:58:9c:57:51:18:34:17:b8:9b:
                    7e:3e:ca:5e:72:43:2b:ac:55:fc:96:56:fa:00:f8:
                    ba:b3:c6:2f:77:df:eb:77:b1:25:a9:d8:a9:57:3b:
                    c6:09:4e:3c:df:3d:80:ca:37:2c:46:20:81:ad:df:
                    22:ba:d9:02:19:05:44:fa:8f:50:14:26:2a:8b:53:
                    0c:ab:2a:8a:5a:a6:dc:60:e5:79:3e:06:e4:00:c4:
                    f8:5d:4f:47:fb:53:ca:a8:f8:fe:42:ba:d5:56:25:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:84:C2:61:66:0B:3F:64:76:CA:E9:13:FD:7B:88:BA:AD:C4:1C:E8
            X509v3 Authority Key Identifier:
                keyid:50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d1:d7:e7:d8:65:5f:bf:d8:aa:19:92:3d:b4:f3:fd:c5:49:
         25:a2:08:25:08:e3:61:b5:18:11:ed:82:d4:16:a3:45:60:fc:
         5c:21:59:49:1c:dc:2b:3a:b7:0e:c6:f0:1b:c4:90:78:3d:4a:
         a7:97:9f:6d:75:64:95:6b:5e:01:f9:7e:f6:87:d4:f3:24:a9:
         c9:f5:2c:bc:98:21:f3:8a:7a:4c:d8:a4:2b:bc:ef:76:26:1b:
         ea:46:02:06:7a:1a:fb:df:3f:58:11:02:cd:15:2f:b5:ab:83:
         f9:5f:8d:9a:ee:ce:33:1a:1b:3d:c9:44:3e:6d:0e:65:99:e6:
         a1:5d:3e:ea:55:96:fb:f6:65:18:9b:34:08:78:93:54:5d:e0:
         98:b5:18:03:42:6f:c2:bf:48:cc:46:13:5e:80:3d:20:42:c8:
         1a:f8:fe:3a:1e:f7:0b:90:7a:9d:87:96:5b:02:ed:d1:ee:cd:
         47:7d:1a:0f:5f:14:89:fd:9b:5c:d2:01:8f:c9:53:bb:09:f1:
         c8:86:78:1e:26:3d:2c:1f:8c:38:7e:70:5a:34:9b:e7:11:80:
         e1:ea:1d:87:ae:ed:68:f4:b0:0a:8b:69:f7:71:4e:75:4b:9a:
         bb:70:2e:a0:27:00:d2:1e:ad:8a:22:8c:c3:82:b1:53:9b:62:
         53:19:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:21:33 2025 by rpki-client