Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
File:                     y4hYdSezg5FswLHYhmZTwzQx5F0.mft (raw, json)
Hash identifier:          NvJT0zJcd5n47ZWbXmN6oEllsnQ4FRXTCos73AQ5ACY=
Subject key identifier:   37:B4:5C:2C:DA:C3:FC:40:C4:79:4C:6C:6C:91:54:E0:D3:C4:98:2A
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Certificate issuer:       /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial:       0785
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
Manifest number:          0782
Signing time:             Wed 04 Jun 2025 01:51:13 +0000
Manifest this update:     Wed 04 Jun 2025 01:51:12 +0000
Manifest next update:     Fri 06 Jun 2025 01:51:12 +0000
Files and hashes:         1: y4hYdSezg5FswLHYhmZTwzQx5F0.crl (hash: mx2Aw6nPGjyz8giIlNjO0IWNzg2P4ctah1AMEt9LYKg=)
                          2: AE18FBD67CA911EEB6D3DD404AD9E6FC.roa (hash: EUXpIG95DQgNgpSPlS78r4ZPbIQJ7nP3j1DIht+45k0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663CEEAF, serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
        Validity
            Not Before: Jun  4 01:51:12 2025 GMT
            Not After : Jun  6 01:51:12 2025 GMT
        Subject: CN=683fa691-db6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:b2:d6:87:45:c8:f3:27:fa:ed:91:42:00:
                    a1:fc:90:05:a8:72:df:3a:89:83:20:1f:31:5e:d1:
                    75:96:15:d0:16:5c:7c:4d:fe:8f:88:13:d6:5e:06:
                    a7:24:d4:01:be:3a:9d:75:68:53:9a:39:5d:06:75:
                    76:fc:c7:42:92:4c:02:ed:ed:8d:8b:7f:8b:91:82:
                    2f:fc:0b:b4:b6:e1:e1:e4:bb:6f:90:52:f4:ea:17:
                    11:c5:12:de:b5:e2:b2:b3:70:f2:11:48:51:b7:80:
                    ae:92:ed:54:9f:d2:92:65:3c:b2:31:11:14:20:fd:
                    f6:2c:d8:0b:2b:4c:6a:cd:b5:61:7b:3d:d4:11:2f:
                    a1:fc:e4:03:42:d9:b4:65:40:16:92:a2:a4:08:35:
                    b6:de:50:11:86:74:d6:9f:5e:c3:ce:36:2f:db:8f:
                    c5:4d:73:da:77:1c:a1:28:4d:ca:b1:9b:2e:60:91:
                    4b:77:91:26:0e:20:01:38:fe:58:64:80:98:d0:77:
                    37:42:17:64:db:bb:b4:17:6e:9d:97:b1:9c:50:c6:
                    65:fe:61:3a:55:bb:57:c9:a5:61:43:31:18:3b:75:
                    8a:7e:6d:ca:e5:63:2b:5b:a5:97:de:c2:c3:bc:74:
                    2a:31:c5:e3:45:12:6f:58:00:ee:66:b0:64:fa:d5:
                    64:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B4:5C:2C:DA:C3:FC:40:C4:79:4C:6C:6C:91:54:E0:D3:C4:98:2A
            X509v3 Authority Key Identifier:
                keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:42:93:df:c9:74:f9:07:46:0a:f0:a3:2b:cf:65:df:7b:ea:
         13:00:48:d2:25:72:67:3e:9b:90:36:7e:0f:79:75:5a:f3:0a:
         35:14:3c:f9:9b:5e:4d:e0:9e:29:30:77:bc:5b:00:48:c3:7b:
         85:6e:34:32:81:f0:54:f5:12:d5:71:db:8b:8d:b8:0b:27:9f:
         bb:df:4a:d4:37:97:ca:fa:d4:97:02:8e:ab:0f:3c:71:e1:13:
         7a:ff:09:2a:87:1f:c0:0b:d0:ba:81:cb:dc:4d:22:4c:71:81:
         82:a6:a6:c8:c9:4b:f1:18:99:26:65:52:cf:75:71:ad:da:4a:
         08:1e:a1:d9:8b:21:a4:68:43:4f:49:b4:27:da:1e:eb:79:64:
         0b:25:c6:1b:39:14:8a:86:29:f2:d7:99:f5:65:68:82:95:5a:
         ad:b2:dc:a5:ce:e6:53:91:26:e5:aa:4f:44:42:5e:61:c0:ea:
         37:0b:50:36:64:52:b9:2c:d9:9b:92:60:62:b0:f4:e2:05:94:
         95:5c:d2:19:ef:0e:d6:54:0a:7f:00:35:24:ab:24:15:25:eb:
         bb:d0:ee:90:5e:d8:6e:76:fe:5e:ab:bb:f1:cf:b8:cc:bc:4b:
         d9:06:b0:c9:9b:7b:2a:72:6f:ab:07:f8:d5:2b:bf:b6:50:cc:
         4d:8a:3b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:10:13 2025 by rpki-client