Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
File:                     XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft (raw, json)
Hash identifier:          16TYCtQA2cBSaWEh2hJUu1i54sAJold7XLI/xaZ6hk0=
Subject key identifier:   83:78:0D:B8:66:10:DF:E0:6D:84:BF:D3:78:F9:CD:AB:8E:BC:17:2A
Authority key identifier: 5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8
Certificate issuer:       /CN=F365062AAF/serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
Certificate serial:       0346
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
Manifest number:          0342
Signing time:             Sat 07 Jun 2025 03:39:04 +0000
Manifest this update:     Sat 07 Jun 2025 03:39:04 +0000
Manifest next update:     Mon 09 Jun 2025 03:39:04 +0000
Files and hashes:         1: XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl (hash: rMpkxGmW2IxJgspmLwLIpXGIYwI6OVUVcUOyZDpMRjI=)
                          2: 1ED4202ECD7511EDB2ED6A96F1222468.roa (hash: 9yazktSrBnSqQLJYDiJlJ8U061x2FlDHFoEX+tDlWCY=)
                          3: 8981BFF8CD7511EDADBDC297F1222468.roa (hash: XHwwuY3b3DDaJzLvFzJY6Cge3h5RZq961ny7aXpfhL8=)
                          4: F9FA5CE6CD7411EDA8B70696F1222468.roa (hash: 8eDGMcM6rbtGPj7+umoDH74//2ioLQd3MbdNouRQeVo=)
                          5: 42F3F790CD7511ED90D70697F1222468.roa (hash: pBMuRG1HJgh4SVstyiUpIYlRbDo+xDDlMaQsl1/xXjw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 03:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365062AAF, serialNumber=5D254CBC9DCA24767E2486009680B743411F08F8
        Validity
            Not Before: Jun  7 03:39:04 2025 GMT
            Not After : Jun  9 03:39:04 2025 GMT
        Subject: CN=6843b458-9489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:6c:77:fb:b4:8b:72:bb:47:c7:80:d2:f3:
                    73:8b:17:b6:d1:45:99:00:7d:29:dd:33:8a:8b:a4:
                    8f:66:49:45:f3:ab:8f:df:ab:18:e5:7a:90:d9:53:
                    56:9f:dc:18:88:e1:fd:b1:36:54:8a:eb:42:36:fc:
                    8a:b8:c0:6e:5e:bb:51:fc:9e:bc:7e:44:d3:44:79:
                    a7:0d:39:71:3e:7e:6d:ee:df:86:e4:f8:26:18:1f:
                    e0:28:33:63:dc:f2:30:e9:ae:cd:c2:57:75:fd:bb:
                    a5:73:b1:80:8b:a0:ef:f1:bf:8d:ea:08:d2:7d:75:
                    58:40:bd:53:ab:4d:67:8d:0e:49:57:3c:cf:bd:43:
                    23:40:31:f6:b2:37:1d:a4:e2:1f:cd:29:3b:b1:4b:
                    77:be:fe:98:05:e3:34:40:91:97:aa:c5:c9:5c:c3:
                    45:e0:b4:f6:dc:83:c9:9d:7c:1b:7d:f6:2f:81:9c:
                    8f:fc:0d:16:d7:cc:a3:db:4f:65:92:e7:df:2f:36:
                    e2:4c:c5:b7:68:c7:01:64:98:ac:95:85:eb:fe:24:
                    56:8d:34:d9:30:c8:9c:d1:f7:7b:61:1d:a7:84:12:
                    6d:1c:95:1d:a4:8a:47:41:d9:e7:85:f7:d8:6b:12:
                    38:00:ff:a9:e5:d5:77:6e:c4:ea:49:b7:59:14:01:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:78:0D:B8:66:10:DF:E0:6D:84:BF:D3:78:F9:CD:AB:8E:BC:17:2A
            X509v3 Authority Key Identifier:
                keyid:5D:25:4C:BC:9D:CA:24:76:7E:24:86:00:96:80:B7:43:41:1F:08:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/D6AEAF64CD7211ED91BCCB8FF1222468/XSVMvJ3KJHZ-JIYAloC3Q0EfCPg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:46:32:60:f2:10:61:d8:fd:d9:ff:fa:f6:10:4a:8f:4f:d7:
         c6:51:ab:52:a8:68:73:cd:ed:6f:f6:a3:cc:95:bc:3b:95:ed:
         f8:ba:74:7f:3c:58:bd:20:a2:78:83:47:9d:d2:80:d6:3a:95:
         7e:e7:cd:20:5e:20:63:3b:f8:8c:e6:5c:1d:51:30:20:ba:ea:
         a3:38:f4:80:98:4d:49:ec:23:64:44:0f:42:33:f1:48:60:64:
         66:0d:a0:a0:b3:c7:1d:d7:0f:d4:9f:36:76:ce:35:ac:19:85:
         10:78:73:fd:8e:28:83:dc:ac:7c:3c:71:a8:09:8f:7e:6a:f5:
         0a:71:c7:79:f5:f7:d2:59:6f:50:6f:b0:c9:df:64:9a:25:2d:
         47:07:79:d8:16:6c:de:d9:22:96:b2:d9:dc:c2:50:d1:0b:64:
         19:38:2f:5a:c4:f2:c9:e8:42:05:77:ab:48:dd:31:b2:1f:16:
         89:e0:35:82:c5:2e:74:0c:f9:90:55:33:ff:ed:3d:85:d9:4a:
         c7:b0:4b:08:0a:96:9f:2d:94:1f:2b:b0:bb:10:e0:43:ea:36:
         59:b3:88:6d:53:89:15:e6:f5:bb:48:b8:86:b8:3f:53:e8:1b:
         5d:80:04:c4:b8:1f:95:d9:96:3c:f3:30:a0:90:99:7b:a7:9b:
         a3:ee:ff:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:36:22 2025 by rpki-client