Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          HBObZDdlOYwaM8DsY4yoDD9BtFpslkTOmm0q5fOCaok=
Subject key identifier:   E1:25:F1:49:D0:33:3F:AD:87:E2:02:BB:B6:03:05:04:EE:28:B2:94
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       0816
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          0811
Signing time:             Wed 04 Jun 2025 01:45:40 +0000
Manifest this update:     Wed 04 Jun 2025 01:45:40 +0000
Manifest next update:     Fri 06 Jun 2025 01:45:39 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: UNKaia5wIeYgtZNIG8a4m7k3AR50gFFzN/z5TfK+TLY=)
                          2: C6A2BFC405E511EEBD45AA854AD9E6FC.roa (hash: Q1IVIvXiqdltQfSEHcyv3gRXZTV0bEmCpfge3Kg/Cb4=)
                          3: D7C38FFA755711ED8288669DF1222468.roa (hash: PQHxtKv0UDmTHySSXriAgQgTxVwVkFl4QLy3ZSWrPUk=)
                          4: 0BB5A474755811ED8757D89DF1222468.roa (hash: OhvKA82g/2G8xwPFY7Ln9+Cew82izds05rzgS/FGkpM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Jun  4 01:45:40 2025 GMT
            Not After : Jun  6 01:45:39 2025 GMT
        Subject: CN=683fa544-10b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:2e:87:00:13:d4:7f:1f:1e:d8:66:74:c6:
                    17:c1:98:c8:e8:c5:d9:e5:41:d4:7f:ca:c0:89:4c:
                    82:23:f7:26:43:9f:f9:58:d8:41:91:2b:09:53:b4:
                    74:2a:86:50:04:9b:43:cb:d3:d3:fc:63:f6:dd:63:
                    75:10:fb:5a:71:45:2d:76:5e:30:bb:6d:79:5c:1a:
                    a3:21:d7:63:fb:0a:a5:36:7a:a4:73:5e:d2:6f:f0:
                    8c:ca:d2:81:90:71:2a:40:b6:c1:44:fd:a6:d1:70:
                    db:be:25:93:04:f2:58:53:9a:53:c8:c2:64:72:7b:
                    0c:37:b6:47:64:d1:16:c0:3e:97:92:41:63:3e:f1:
                    c1:1f:aa:57:44:ac:b8:ac:27:75:50:75:a5:f3:89:
                    c7:79:7d:7e:6e:00:4c:44:40:42:41:4d:96:01:00:
                    37:e2:8e:c4:b1:8e:71:a6:cd:1f:80:a4:78:c5:dc:
                    f4:76:bf:19:8e:5a:a8:95:b3:c8:0b:62:4d:12:a5:
                    83:2e:5a:59:6c:8d:9d:ba:88:ce:81:1c:86:65:21:
                    64:4a:28:03:ca:99:96:3c:61:87:af:72:d4:2f:f5:
                    fb:2c:5b:2a:05:5d:f5:9b:8b:af:4a:04:f9:b6:d5:
                    17:55:f7:0a:70:fb:1c:e9:31:08:1d:4a:fa:61:18:
                    9b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:25:F1:49:D0:33:3F:AD:87:E2:02:BB:B6:03:05:04:EE:28:B2:94
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:36:87:a5:e3:11:8d:34:42:0f:12:93:09:69:95:dd:57:51:
         72:01:59:13:a0:e5:a2:af:73:ad:f9:53:23:4a:09:01:d6:4f:
         b4:08:5b:9d:df:9c:25:74:25:76:30:30:20:84:4c:08:44:6a:
         a0:46:ff:29:8c:6d:39:7a:5e:72:c6:2a:96:5f:6e:9a:17:99:
         00:09:3b:03:f7:16:4d:f4:21:a0:bb:99:f1:3e:e8:c3:15:a9:
         6b:09:f1:c2:c5:31:7a:95:d4:f3:b4:0a:e5:4a:cc:19:97:7d:
         fb:e3:19:3c:2a:9c:87:d2:68:46:b1:46:77:17:41:9a:68:97:
         7b:a2:11:2f:0d:2f:ff:6d:79:2a:99:5c:fd:a6:39:c9:a5:01:
         c8:51:23:9f:4a:b7:c8:06:17:05:f7:91:28:03:6b:1b:47:84:
         51:5e:aa:f3:a3:50:93:00:0b:1c:d3:67:12:40:8f:7f:51:8f:
         bf:c9:7b:63:d1:b2:47:cd:6f:8e:22:b1:6e:19:2a:72:ad:09:
         98:23:21:3c:35:19:4b:5e:ed:24:38:98:55:ae:a4:93:b6:d8:
         8d:d6:77:68:e1:39:c5:f5:2f:c3:de:9b:bd:d9:6f:4f:92:ec:
         7a:5e:97:06:9e:53:88:ef:8b:24:25:87:91:28:0c:9e:3b:e6:
         0a:9f:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:25:18 2025 by rpki-client