Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
File:                     0ffADvPrBuiBfP3B25YGBAfknA0.mft (raw, json)
Hash identifier:          rrJmQDKVWkkQzinUlH/MWkYG0BLVR6EP7NbeVO8GUuo=
Subject key identifier:   6B:D2:D6:43:04:EF:6E:13:17:BC:DB:9C:13:B4:2E:AA:3B:6A:92:70
Authority key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
Certificate issuer:       /CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
Certificate serial:       07D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
Manifest number:          07C2
Signing time:             Thu 31 Jul 2025 01:56:03 +0000
Manifest this update:     Thu 31 Jul 2025 01:56:02 +0000
Manifest next update:     Sat 02 Aug 2025 01:56:02 +0000
Files and hashes:         1: 0ffADvPrBuiBfP3B25YGBAfknA0.crl (hash: MuXRKDn6Kib0OjIunBfzO6QNMUkNDKmpaj5OIf956GM=)
                          2: 54D73B32D5AA11EE804D6FA3775412E6.roa (hash: oub8O6ESl+q+fLwREHJore+8A+bbiWh69N6JO+Ek91U=)
                          3: 2EFD35103D2311F0BEF197E3DAE4EC9C.roa (hash: VAuof8+c3AiuaINM/EubJN5Nhm7qUAQjKjM22LUdNQ4=)
                          4: AE414C1EFDCA11EFB623BE90762E951A.roa (hash: Y5HeKaAGek99xysljagPwhZ+CgojdV1z+NsdhuzC9jQ=)
                          5: B77376ACD5AA11EEB33131A4775412E6.roa (hash: zxfvPEymIGP+/7cg1EGEyQR/t5Gie6/ZfCLSy+jKY0I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364789CAF, serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
        Validity
            Not Before: Jul 31 01:56:02 2025 GMT
            Not After : Aug  2 01:56:02 2025 GMT
        Subject: CN=688acd33-faf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cf:64:69:70:ec:d6:5e:6a:2d:95:69:72:63:
                    df:96:e3:ff:90:bd:e8:20:1c:f7:d6:87:6a:33:00:
                    bc:d9:b4:b0:21:ef:72:1d:90:06:08:59:d2:b7:6a:
                    77:81:68:b4:99:1b:77:3c:1c:d6:2d:e8:96:66:99:
                    a6:fa:ab:12:37:54:da:81:0d:dd:7b:02:a9:13:37:
                    00:58:52:f2:67:49:61:cd:fd:72:86:9a:56:49:37:
                    46:5d:73:06:56:c6:3a:d8:50:b5:bc:28:01:c8:d6:
                    14:42:b7:8f:b1:21:7d:f3:f9:7e:7a:f1:df:f8:17:
                    c1:c6:c3:1d:90:26:b4:e4:6c:4b:a6:32:10:df:53:
                    10:51:17:66:ee:41:a1:ef:f1:58:9f:f0:c2:6f:62:
                    44:bf:cf:1c:41:8e:96:3f:31:a5:d9:9f:bd:41:bd:
                    5a:e1:a2:e9:46:09:83:99:93:e5:5a:ab:02:41:85:
                    28:f6:1b:b6:da:e3:45:e3:2c:dc:b0:f2:67:8a:87:
                    41:65:2b:0a:38:70:37:fb:ca:b4:88:34:23:11:81:
                    3f:e0:0f:16:2b:e4:46:df:0a:16:19:02:70:cc:94:
                    fe:01:e6:11:51:25:b5:fe:ac:19:5a:bf:20:21:47:
                    e5:d1:da:7c:f1:6a:3e:49:fd:d9:59:38:1e:4f:e3:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D2:D6:43:04:EF:6E:13:17:BC:DB:9C:13:B4:2E:AA:3B:6A:92:70
            X509v3 Authority Key Identifier:
                keyid:D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:74:43:4e:bf:e0:48:d1:dd:1c:71:d7:86:3c:47:0c:fd:7c:
         cf:57:a6:dd:32:09:69:da:f8:74:a2:02:18:19:53:d4:da:c0:
         05:48:42:b0:ff:45:7b:af:61:21:ac:d6:08:27:3d:74:c0:05:
         64:14:43:55:00:81:63:f4:94:8b:ed:f1:50:ab:d7:62:0c:6b:
         46:02:f7:1d:d3:d3:f1:fe:05:97:30:9a:3d:f1:16:f4:74:ac:
         8b:19:85:7d:1e:8a:2d:23:c0:97:4b:60:c1:76:10:d8:af:30:
         89:2b:e4:e4:89:f9:2e:90:78:07:ad:d3:28:8a:44:a5:0f:10:
         94:c5:d0:95:54:42:83:0c:79:27:0d:92:e4:f9:fa:55:e0:e1:
         fe:43:58:b6:45:94:a4:6c:1d:1d:76:0f:3a:e3:eb:0e:e4:7b:
         4e:97:94:26:c7:61:85:e1:81:d7:02:20:90:01:e9:36:89:15:
         a3:4b:10:78:a1:3e:75:a6:22:3e:7a:7e:21:29:fb:b2:31:ff:
         26:e6:59:0c:82:0c:d0:13:af:89:6a:dd:12:64:ff:c4:82:ca:
         99:a9:1c:0c:46:02:a5:b7:73:4c:78:aa:9c:b4:50:e1:96:e2:
         a4:b2:8c:65:fb:6f:d9:61:86:63:09:79:54:ef:1c:26:d8:e7:
         79:c0:7f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:33 2025 by rpki-client