Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
File:                     J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft (raw, json)
Hash identifier:          lEB8yhzdw5zBiu9s50Zox+BRXieBa6MB4eXIYThH4lc=
Subject key identifier:   13:4C:F6:1C:AA:8E:2E:4B:38:38:DD:4B:07:B9:FB:67:9D:B8:FD:39
Authority key identifier: 27:D3:56:42:EC:54:30:E9:53:76:A5:7D:53:1C:20:CA:BA:38:4C:CC
Certificate issuer:       /CN=F364E2C5AF/serialNumber=27D35642EC5430E95376A57D531C20CABA384CCC
Certificate serial:       04CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
Manifest number:          04C8
Signing time:             Sun 27 Jul 2025 02:54:34 +0000
Manifest this update:     Sun 27 Jul 2025 02:54:33 +0000
Manifest next update:     Tue 29 Jul 2025 02:54:33 +0000
Files and hashes:         1: J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl (hash: 9yPI5FqCfc77eaUXXcBd6oih5EgZKnrG7XVQUfdaa2M=)
                          2: CBD4BB4EC7A411EC8C7F26F9F1222468.roa (hash: lyiXm98/99h1BTS8mv1keKXy/3hq5R//wYwELeO8tdI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E2C5AF, serialNumber=27D35642EC5430E95376A57D531C20CABA384CCC
        Validity
            Not Before: Jul 27 02:54:33 2025 GMT
            Not After : Jul 29 02:54:33 2025 GMT
        Subject: CN=688594ea-c8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:10:46:9f:94:97:e9:49:20:6b:a8:1a:d8:99:
                    2a:49:17:43:4c:f1:dc:ae:7e:a5:d3:80:8d:6c:c4:
                    bb:b5:78:77:aa:5d:f8:52:75:da:98:2e:66:80:e2:
                    a4:22:67:c2:3c:6b:a5:fb:86:1b:36:bf:c7:65:d0:
                    72:3d:8b:91:3b:21:46:6b:c7:bc:24:59:0e:fa:ac:
                    0d:65:53:c4:96:fb:84:38:d2:03:a3:e3:bf:37:f3:
                    5a:62:d0:75:1e:6b:f0:e6:f6:1c:9e:25:73:06:64:
                    0d:f8:73:7a:2f:d9:83:1e:96:c5:f7:da:32:37:92:
                    78:48:8b:7e:9b:ad:f7:3a:ae:aa:4f:8e:20:37:7a:
                    a9:36:34:b6:61:e7:16:35:99:f3:62:48:64:56:5d:
                    59:14:c1:bc:f1:6f:32:fc:2a:f3:4c:97:bb:65:27:
                    5d:50:57:6c:77:95:ec:f5:f8:eb:08:b7:ef:c1:7f:
                    81:9f:3f:f0:cf:aa:a6:12:90:7b:98:cc:a4:d6:3e:
                    ff:3e:de:55:ce:0f:fb:9d:0d:78:f5:3a:f4:a7:ad:
                    54:38:72:28:0e:c0:3a:26:b5:4d:92:83:c8:f4:e6:
                    ab:46:ab:ad:4d:22:8e:ae:c1:83:fd:af:01:02:6f:
                    32:39:47:c5:49:0f:a5:08:80:97:0a:25:43:a1:c4:
                    e2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4C:F6:1C:AA:8E:2E:4B:38:38:DD:4B:07:B9:FB:67:9D:B8:FD:39
            X509v3 Authority Key Identifier:
                keyid:27:D3:56:42:EC:54:30:E9:53:76:A5:7D:53:1C:20:CA:BA:38:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:75:b2:3c:0b:48:b1:f8:b4:d7:b7:9b:43:09:d0:6d:33:9e:
         25:44:7c:db:a7:ba:cd:db:b3:f4:e6:c1:28:00:c3:00:3b:98:
         97:ea:a8:d7:05:51:da:19:dd:a2:4c:0b:3e:78:95:74:1d:fe:
         af:b0:a0:3d:ca:b6:b0:f0:6f:2e:18:ec:ac:9f:15:a4:bd:fd:
         99:67:c2:2a:9a:2f:96:63:cd:e1:0e:6e:23:f8:d2:45:89:06:
         a0:aa:13:7d:c6:0c:fe:97:9e:2d:ad:0b:f6:cf:10:84:e1:56:
         26:e2:30:16:73:c2:30:60:da:c9:ae:2e:17:49:b1:99:ae:15:
         e8:66:df:10:64:1a:42:a4:b4:1a:97:d6:4c:c0:b7:73:e8:13:
         2b:a7:97:06:1f:4f:0f:29:b3:7a:d9:3f:9a:c0:a0:50:03:21:
         34:d8:5f:45:3a:a9:34:82:ec:5c:12:6a:ba:0e:7d:50:1a:93:
         60:3e:a3:0f:fe:0a:3d:6d:65:5a:b5:c3:ec:65:f7:8b:7c:6c:
         fd:3b:2f:da:98:c7:0e:d6:21:16:6b:f2:8d:4e:73:4b:69:b8:
         c2:00:af:c7:56:ef:ec:17:e6:fa:a4:bb:42:a8:cd:92:d1:e6:
         23:38:94:55:01:30:df:fc:63:53:df:6e:64:87:d6:90:68:d0:
         86:1f:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:29 2025 by rpki-client