Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
File:                     RQb8pqpV74TTpMAErIOrtQvu07k.mft (raw, json)
Hash identifier:          BjH/oDlAmzle64GtOuVrB4hox/T7488AMhtsRcvZ5AI=
Subject key identifier:   05:CD:AB:58:E4:AA:86:84:88:57:42:81:4D:52:92:37:B0:AA:09:4A
Authority key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
Certificate issuer:       /CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Certificate serial:       04CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
Manifest number:          04CB
Signing time:             Wed 04 Jun 2025 02:49:14 +0000
Manifest this update:     Wed 04 Jun 2025 02:49:13 +0000
Manifest next update:     Fri 06 Jun 2025 02:49:13 +0000
Files and hashes:         1: RQb8pqpV74TTpMAErIOrtQvu07k.crl (hash: vP+onBWyZ23VIsv4q2VKzR9WFFWfYPWAx5QYmN+uzDM=)
                          2: 9DDD28FC9A3111EC8707D1B65A40D577.roa (hash: FZcB4QBBqx/jYH6PVYH2VRq/gBlCUQZrKAZfwhy/+S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1228 (0x4cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AE0AF, serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
        Validity
            Not Before: Jun  4 02:49:13 2025 GMT
            Not After : Jun  6 02:49:13 2025 GMT
        Subject: CN=683fb42a-df91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:da:60:70:a6:f0:50:cd:98:8e:00:36:fe:
                    f1:9b:b7:ae:9b:a7:a8:02:77:10:4b:e7:da:77:a2:
                    ac:e7:f0:02:03:98:25:f7:0e:45:eb:70:fd:8e:48:
                    99:54:63:07:a9:f6:c8:ba:5a:e7:0e:96:1c:b2:c0:
                    90:5c:05:66:21:b2:dc:49:e6:a7:39:b6:23:e2:86:
                    2a:33:3b:19:05:43:f0:b6:8c:63:37:b1:b6:94:38:
                    eb:93:58:18:6e:05:df:99:7a:86:37:13:99:c2:c6:
                    0e:0b:52:38:fc:0d:f5:f7:3d:d6:46:8f:8e:d9:2d:
                    6b:d3:8f:5f:56:16:00:f4:9a:40:aa:72:ed:bb:f7:
                    e7:50:ba:c8:65:73:c3:b2:b6:72:07:93:26:74:5e:
                    d2:09:5c:5f:b3:b6:cc:6a:73:5b:e3:3e:db:bf:89:
                    bf:cd:7c:fe:32:19:f1:22:11:0e:a5:62:64:c5:d5:
                    36:9a:c4:62:3d:72:14:48:7a:4e:8f:1b:2b:1e:38:
                    7f:bb:3e:0c:2e:99:34:af:e6:d1:3d:5b:76:dc:66:
                    0b:d9:bf:ee:f6:4e:9b:50:d7:6c:24:c4:14:18:73:
                    b0:58:60:27:b3:e6:25:21:b6:04:a8:a0:0f:a7:1d:
                    63:a3:7f:e9:5d:94:c9:41:f6:7b:ab:03:90:8f:bd:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CD:AB:58:E4:AA:86:84:88:57:42:81:4D:52:92:37:B0:AA:09:4A
            X509v3 Authority Key Identifier:
                keyid:45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1d:37:e1:70:6a:48:21:65:38:cd:67:dd:7f:24:d3:c7:c9:
         19:62:d3:d6:6f:8f:ca:eb:14:a7:25:0e:ac:fd:e7:a6:ab:fd:
         a9:9c:22:7f:11:05:d9:2c:30:aa:6e:5e:60:99:7e:85:31:5f:
         f3:7a:eb:90:3b:71:40:df:5d:4e:5d:51:93:f3:c4:5e:a5:4a:
         93:6b:70:f9:dd:5e:f7:40:1d:8c:53:39:74:c1:e1:40:29:c9:
         8a:dd:e7:75:6c:f2:73:a0:5e:ba:c6:87:fa:33:b6:5f:72:89:
         3f:a7:6b:ee:75:59:66:d3:f2:ad:ce:49:e5:d8:1d:9d:d0:4a:
         76:05:b3:4a:a4:22:e8:d2:88:82:15:1e:dd:47:d5:f9:a8:ef:
         f5:78:0d:0a:9e:00:09:65:66:be:2b:88:40:e0:96:80:5c:91:
         67:f0:79:b2:dc:2b:a1:ec:ff:3a:2a:4c:69:2a:72:b6:46:f8:
         09:ca:60:14:fc:c2:0e:12:c5:67:1a:ae:ae:09:02:4a:f3:7b:
         66:fe:cc:3a:63:2b:08:35:8a:72:1f:0e:5c:ec:1a:3c:0f:44:
         8b:32:3b:42:9c:59:dd:bc:d2:fa:01:98:ef:9b:1d:48:cd:94:
         c9:d1:6f:1a:63:6c:36:2e:c9:ca:f2:1b:65:9e:76:cd:5d:0e:
         b0:99:66:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:45:58 2025 by rpki-client