Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.mft (raw, json)
Hash identifier:          TYHRb/xSycPbfukbi+hCk9E6SZsDWYWaoS3igiNqUkI=
Subject key identifier:   21:D5:FB:38:BC:2B:8E:91:2E:A3:0C:43:8B:C0:DB:68:21:95:9E:84
Authority key identifier: C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Certificate issuer:       /CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
Certificate serial:       0215
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
Manifest number:          0213
Signing time:             Wed 04 Jun 2025 04:15:55 +0000
Manifest this update:     Wed 04 Jun 2025 04:15:54 +0000
Manifest next update:     Fri 06 Jun 2025 04:15:54 +0000
Files and hashes:         1: x_9uywvS7BI1alQX4xxzC5BQlBE.crl (hash: SXkcOx8wEf3oCkvXddhCZVQyRV390rtpqVxLRLwrLb0=)
                          2: 209064A80ECA11EFA0FB8D6C017001B1.roa (hash: SYHt2ENsggByHF7FNfIiJDtYCTGlxeYoFHTIRbjH6Hc=)
                          3: 3906A38AAD5411EEB67B65B2775412E6.roa (hash: ReFNAC4d+VQBlR/AEunK+azob89VljT5w2yD48BTB3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AF, serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
        Validity
            Not Before: Jun  4 04:15:54 2025 GMT
            Not After : Jun  6 04:15:54 2025 GMT
        Subject: CN=683fc87b-ff3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:72:4d:28:98:96:03:88:0b:c4:2c:21:30:
                    a6:e3:f6:a7:f9:5a:b4:4e:e5:34:88:2c:98:fe:02:
                    79:95:bb:b7:e2:69:63:01:f1:e6:d5:c8:1f:b1:7e:
                    95:b9:b8:9e:fb:4d:c6:0c:68:52:84:d6:21:2a:79:
                    64:87:4c:a8:21:f9:33:c8:9a:55:b3:8b:4f:0a:20:
                    7b:33:55:d2:df:fd:10:2c:cf:ac:77:db:5a:51:35:
                    f3:f2:2c:5e:5e:59:d2:24:53:ab:0a:57:28:11:9b:
                    39:b1:75:77:02:f0:09:c8:7b:e7:42:0e:87:cd:63:
                    53:ff:f6:23:2b:7c:46:7a:a5:46:1c:b5:6f:67:0c:
                    5d:f2:f5:a2:08:60:d9:a5:93:28:6e:66:c9:74:f5:
                    d5:ce:d0:07:37:77:53:e8:05:41:c0:e0:5d:3b:a8:
                    44:bd:72:f3:5d:00:1b:d8:11:31:4f:16:1b:50:1d:
                    40:73:02:2c:00:c0:5e:67:01:31:1b:64:21:c7:4e:
                    01:aa:f9:39:d6:f9:ee:1e:5e:27:ca:6f:6e:32:5f:
                    f1:f2:86:fc:72:d0:1b:f6:89:64:bb:33:28:0a:b7:
                    78:8d:99:55:7f:e1:08:a6:2e:80:55:9c:b1:84:0a:
                    ae:8d:86:17:65:4f:73:23:18:32:dd:88:9f:e5:2d:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D5:FB:38:BC:2B:8E:91:2E:A3:0C:43:8B:C0:DB:68:21:95:9E:84
            X509v3 Authority Key Identifier:
                keyid:C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:d4:e9:5d:f9:5d:f7:79:ac:5f:5c:2b:dc:4f:1a:1d:ac:
         35:56:bd:1a:1b:54:77:2b:ad:73:57:16:ac:59:a3:1f:81:3c:
         f9:19:e7:e5:e1:ab:96:98:06:2e:04:01:56:64:6c:7c:c7:8d:
         bd:97:73:6d:f4:e3:87:53:f3:cf:29:7b:6a:83:39:8e:4d:85:
         d7:df:b1:fb:2c:ad:6c:91:8c:c7:9d:49:50:d6:f6:22:ae:1d:
         bf:17:21:98:8c:49:f7:14:25:fb:3f:f9:a4:3b:c0:b7:af:54:
         36:e2:53:07:db:a8:bf:34:f8:1d:28:9e:11:38:a3:57:fb:20:
         83:ec:3c:d5:3e:db:f1:9a:9b:61:62:33:44:c2:da:0c:b2:5d:
         c7:61:11:41:b9:94:20:9b:50:25:46:80:ad:ab:8b:38:f0:ef:
         2f:bd:76:97:05:12:8e:12:fd:89:d7:d7:bb:95:32:42:77:d1:
         c9:e6:f7:6d:ca:c9:45:81:0b:70:5e:f6:78:c0:2a:7a:ab:69:
         9c:35:e8:16:cc:a9:33:60:f3:fa:cd:15:73:b8:70:ee:1a:ce:
         59:92:a1:a3:e3:48:a3:59:7c:19:3c:68:c4:c4:ff:89:21:f3:
         2c:54:da:86:4f:c8:d6:05:7c:d7:e3:97:27:cb:8c:40:7c:45:
         e7:2e:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:00:11 2025 by rpki-client