Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
File:                     7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft (raw, json)
Hash identifier:          OcDLlbxE9bgtppMTStFD5VeHKEGJUyJCnjtASIkoIL8=
Subject key identifier:   5A:9D:87:A6:F7:BE:3F:B6:AA:7B:4B:87:9B:0A:89:6E:AB:C8:0C:F9
Authority key identifier: EE:B6:77:AA:50:CB:C6:9C:6D:BD:BF:69:5C:A1:99:D7:E1:47:A8:94
Certificate issuer:       /CN=F364E699AF/serialNumber=EEB677AA50CBC69C6DBDBF695CA199D7E147A894
Certificate serial:       024A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
Manifest number:          0249
Signing time:             Sun 08 Jun 2025 04:09:16 +0000
Manifest this update:     Sun 08 Jun 2025 04:09:15 +0000
Manifest next update:     Tue 10 Jun 2025 04:09:15 +0000
Files and hashes:         1: 7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.crl (hash: Juap9IQCgt0IhnlZ5zH1UBwBEvYnUBk54IVElSSQxcg=)
                          2: 5B2E23D224F711EFB578AD317DDC24C2.roa (hash: dJqx2tIQdNKOhw5rXNRRGr+piGM3e2LGv8rFqRIxuKM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E699AF, serialNumber=EEB677AA50CBC69C6DBDBF695CA199D7E147A894
        Validity
            Not Before: Jun  8 04:09:15 2025 GMT
            Not After : Jun 10 04:09:15 2025 GMT
        Subject: CN=68450cec-d79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d4:7a:50:f1:2a:7f:37:db:66:b3:4a:c8:9c:
                    69:fc:98:fa:fb:55:a7:51:4c:8d:11:5a:83:0a:cd:
                    63:c2:97:fe:25:da:e4:d9:c3:68:48:6b:54:64:cf:
                    2e:a5:24:91:7d:17:7d:15:79:bf:c4:cb:fa:a2:04:
                    e6:90:65:7c:fc:04:2a:ac:db:11:4f:be:7b:ae:81:
                    03:90:43:dc:aa:fe:3f:6e:fb:4e:02:26:3f:1e:d8:
                    32:47:fb:8d:6b:da:b8:fc:0d:58:e9:04:0c:b5:91:
                    44:76:6b:8e:67:49:25:46:c2:fc:4e:76:03:bb:e0:
                    b7:64:60:9d:da:a6:81:01:4b:09:e7:03:52:be:6d:
                    fc:e4:d0:25:73:0e:a8:83:ed:e8:18:09:1f:77:02:
                    b9:ea:e3:c6:7e:05:40:d8:2f:65:b3:30:ab:9e:9d:
                    96:52:9e:b2:3a:38:5c:6b:4e:bf:96:a7:01:a4:44:
                    90:21:a5:17:8b:27:14:f2:2a:8c:ee:98:97:03:52:
                    24:31:25:c4:b6:d2:72:17:00:31:7b:4b:11:10:c6:
                    00:53:d7:df:3d:44:6c:20:c7:1d:31:24:a0:7e:34:
                    15:b0:13:bf:5e:8e:1f:16:88:36:66:5d:a8:09:1b:
                    f6:9c:43:21:05:cc:8d:4d:72:43:1d:47:0c:86:7c:
                    db:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9D:87:A6:F7:BE:3F:B6:AA:7B:4B:87:9B:0A:89:6E:AB:C8:0C:F9
            X509v3 Authority Key Identifier:
                keyid:EE:B6:77:AA:50:CB:C6:9C:6D:BD:BF:69:5C:A1:99:D7:E1:47:A8:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4e:97:81:c2:aa:22:c5:84:ac:68:03:4f:81:ef:fb:85:ef:
         6d:ea:8f:a5:dd:4e:45:a7:79:8f:11:e7:2f:74:64:3d:aa:ab:
         76:a1:5d:da:a6:9d:e7:75:36:9c:1c:16:85:d3:e1:38:85:7d:
         76:6c:21:50:8e:74:50:32:ad:43:e3:02:64:05:ee:e3:cf:34:
         0d:b7:b0:9f:91:3d:74:5c:c2:a4:5a:17:ff:0b:ab:5a:24:50:
         c6:2e:6f:8b:be:d2:cf:36:3c:a0:e7:15:25:2e:b7:5f:78:a7:
         34:5d:5e:70:e8:94:29:a1:e6:e8:eb:df:f2:12:0d:51:60:98:
         cb:79:1b:28:5e:da:70:0a:e8:4c:9b:43:8d:86:49:6f:d2:87:
         15:78:07:56:be:32:48:7c:4a:8f:77:8c:ef:87:8c:39:22:78:
         d8:3a:d0:3c:72:98:c2:91:fc:fe:05:b2:0a:bb:ca:bf:8d:7d:
         69:5f:66:e5:a4:05:7c:04:12:81:d6:36:ba:12:1e:b3:e2:6d:
         ae:f1:3f:26:0c:7c:9f:f4:4c:53:1e:0b:5e:c0:39:fa:95:52:
         ce:93:1d:17:e4:24:fe:03:ed:d1:c1:5c:61:ea:06:a2:d4:f5:
         cb:cf:c4:97:a6:f0:04:10:6e:72:e0:f0:5b:98:8b:74:13:bd:
         18:b3:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:35:24 2025 by rpki-client