Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
File:                     JfCxDKLk37Or6AFrgxnhVRHDOhw.mft (raw, json)
Hash identifier:          /rTTpRi72uqvdoxPqsgbD1ukqZ03TQOq5X75ZZiIBRc=
Subject key identifier:   11:12:1E:B7:A5:49:93:F6:55:D2:75:00:47:85:F9:CC:28:1E:B9:56
Authority key identifier: 25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C
Certificate issuer:       /CN=F36374C9AF/serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
Certificate serial:       0E06
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
Manifest number:          0E03
Signing time:             Sun 08 Jun 2025 01:00:05 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:05 +0000
Manifest next update:     Tue 10 Jun 2025 01:00:05 +0000
Files and hashes:         1: JfCxDKLk37Or6AFrgxnhVRHDOhw.crl (hash: Z2z3w9UYCChqIYU2b/lKabz3a4GNaM+yS//Jo/cntyk=)
                          2: 95B9A0DC542E11E68362481EF8AEA228.roa (hash: 8UoC48UqoDeH69RSkPNH1+FjRJDyG7fYrZ/nLYWEfIs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3590 (0xe06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AF, serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
        Validity
            Not Before: Jun  8 01:00:05 2025 GMT
            Not After : Jun 10 01:00:05 2025 GMT
        Subject: CN=6844e095-3eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d1:57:f1:cd:a9:d4:8d:4b:fb:82:39:ea:5f:
                    76:af:24:d3:9d:ba:2d:3e:f7:63:d6:54:1d:22:20:
                    f6:9b:cd:bd:d7:fb:36:a2:b7:22:05:43:ac:73:30:
                    ef:ae:b3:a3:c8:30:b1:23:74:54:24:0a:37:47:d4:
                    87:cb:ed:e7:79:a5:b6:cf:f7:b0:75:b6:bb:80:8e:
                    c1:e6:2c:eb:9c:bd:8a:e9:44:dc:ec:4c:e7:f8:e4:
                    8d:09:91:96:e2:99:81:68:fe:94:eb:2c:ca:0c:85:
                    09:44:53:47:41:cb:ab:38:e1:0b:f4:52:86:a3:81:
                    ba:31:bd:e5:f9:1c:dd:c9:89:eb:f7:47:d1:0c:27:
                    8b:d8:b3:e0:2b:05:cf:d7:10:24:75:8e:73:d2:b4:
                    38:ed:f3:a1:6d:57:e1:d0:96:b9:4a:a8:ec:80:65:
                    c9:8b:3e:6f:ce:d4:65:7a:33:03:7f:6a:4f:e2:f5:
                    e6:94:45:4c:0e:17:b9:3a:35:a1:20:16:7e:54:45:
                    bd:56:62:f3:ff:f5:17:49:9c:bb:6b:3c:77:bf:46:
                    98:cd:fc:cb:ca:91:de:5f:98:97:24:63:2b:66:95:
                    5d:f9:cf:ae:90:6a:c6:b9:9c:3d:2e:6e:4f:b7:bf:
                    c7:23:cd:62:66:ce:b4:42:5a:57:89:73:1e:07:56:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:12:1E:B7:A5:49:93:F6:55:D2:75:00:47:85:F9:CC:28:1E:B9:56
            X509v3 Authority Key Identifier:
                keyid:25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:68:b6:4d:7d:f1:e6:77:31:dc:e9:79:b8:c7:38:ed:54:98:
         69:76:aa:8d:10:59:f1:d0:8e:c8:36:cf:a9:c3:5a:61:73:db:
         bb:e4:16:13:41:e4:05:13:11:d9:83:df:e7:29:a7:0e:18:ed:
         8a:58:fd:80:16:39:0b:28:fb:71:b2:fd:93:ba:fc:b3:69:0b:
         67:7e:f8:de:c7:b3:cc:15:20:7a:68:ad:ff:ff:1f:b1:12:d7:
         22:b3:c1:25:dc:57:46:10:07:7e:e0:bd:52:7e:1c:1e:04:dd:
         9b:87:5f:be:dd:a1:2f:3c:b2:a3:6a:b9:82:78:e0:ae:7f:b8:
         ab:e3:e2:ce:ba:60:ed:36:c8:e2:2b:5b:f6:75:9a:ca:ec:37:
         a5:51:85:4f:b4:bf:11:66:02:40:11:d3:f9:8b:29:a1:e9:16:
         ba:f0:c1:a1:70:5c:52:f7:0c:aa:9f:a7:e2:da:03:e5:69:f6:
         b4:e3:7e:3c:b0:68:d6:6f:79:95:04:a1:67:b7:88:1b:32:85:
         a3:68:e2:62:6e:56:3d:9e:f2:fa:ba:9a:39:a3:40:c5:93:57:
         f1:e3:ca:84:fa:e9:f5:da:b0:b8:65:98:c5:47:36:1a:50:b1:
         5d:b4:63:46:e1:7b:e9:f0:9f:16:d8:60:9e:b9:8c:68:28:85:
         3c:e3:5e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:16 2025 by rpki-client