Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
File:                     xKeWHgAqqJ1QvqIlLU-Use72aiM.mft (raw, json)
Hash identifier:          lEr4oZ7Uh5xKy262BBJzT3t0QOlLeIErMVN4QZ5hnSg=
Subject key identifier:   98:EA:52:F2:C1:75:9D:65:9F:F7:B1:B4:5E:35:A3:DC:F8:D6:2F:4D
Authority key identifier: C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
Certificate issuer:       /CN=F3667885AF/serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Certificate serial:       05C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
Manifest number:          05C7
Signing time:             Thu 31 Jul 2025 02:34:13 +0000
Manifest this update:     Thu 31 Jul 2025 02:34:12 +0000
Manifest next update:     Sat 02 Aug 2025 02:34:12 +0000
Files and hashes:         1: xKeWHgAqqJ1QvqIlLU-Use72aiM.crl (hash: Iv0PZm7YFe/Y5zgSCKcmOPfUXqC5X+faU2VQ8o3mOYo=)
                          2: 0974EE44692C11EFB84E09BE762E951A.roa (hash: umDKOoC9/WNBFwfe+01c/iCxCRQnfD2hLqhhCsHnBu0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3667885AF, serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
        Validity
            Not Before: Jul 31 02:34:12 2025 GMT
            Not After : Aug  2 02:34:12 2025 GMT
        Subject: CN=688ad625-b51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:08:6b:60:b6:cd:14:1f:66:3b:62:af:65:82:
                    c5:9b:47:16:40:40:b0:89:de:78:a7:9b:21:00:28:
                    30:59:10:12:09:32:aa:22:e4:59:7f:f8:85:20:85:
                    ea:28:a8:39:90:ba:0e:e3:e0:df:9e:64:69:c9:2e:
                    a1:90:de:d8:79:a7:8a:1a:85:d8:51:23:e7:86:1b:
                    e5:c0:af:fd:98:bb:ba:c6:3a:88:d1:4b:35:a7:2f:
                    74:23:6e:1a:da:60:97:04:2b:9e:56:75:4d:2b:cf:
                    ea:5e:85:8c:8b:30:69:b1:21:42:27:55:20:40:74:
                    6d:a9:93:cc:7c:57:30:34:e0:41:54:76:2d:d2:23:
                    35:5d:9b:5c:0b:e9:fd:31:55:88:4d:ce:99:0d:f7:
                    62:b5:f0:92:b5:73:c5:ad:7e:0b:ae:dc:02:e0:dd:
                    50:57:4f:2e:fc:47:9c:56:2f:e0:71:56:0d:a3:a1:
                    70:3f:0e:5e:9c:ba:de:fe:7b:53:52:d3:f5:64:16:
                    43:60:89:5c:b9:a7:3b:6e:c7:82:e6:ef:c9:50:1f:
                    1a:41:c8:8e:e8:ac:f6:9f:8c:da:92:fb:66:c5:d9:
                    08:ab:ab:9b:c1:cc:bc:c8:dd:09:7b:68:99:4d:45:
                    b2:e2:02:8f:bd:b3:9f:e0:85:10:96:cc:5a:0d:2e:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EA:52:F2:C1:75:9D:65:9F:F7:B1:B4:5E:35:A3:DC:F8:D6:2F:4D
            X509v3 Authority Key Identifier:
                keyid:C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:6f:09:f9:2a:32:3f:48:19:08:3b:58:bf:6a:bf:4b:5d:5e:
         fc:52:a9:6a:9c:32:b4:ff:48:93:b1:95:1d:33:f8:d1:29:7d:
         10:33:8e:6b:41:f8:c9:0a:96:36:95:b3:56:2b:d4:7e:e5:94:
         3c:f8:ee:99:71:8e:06:d8:6d:19:a0:cb:49:66:61:55:46:bb:
         bc:ba:a5:b3:52:99:0e:6b:c6:9e:65:c1:12:3b:14:37:96:20:
         44:a3:c4:23:2c:a1:ef:75:d4:6d:a4:bb:9a:4d:95:7e:d4:de:
         eb:6c:23:a8:4a:56:df:7b:9a:00:a1:02:c1:61:c7:60:02:c0:
         d6:9c:f5:c3:52:39:21:2e:da:4b:ef:dd:a3:ee:db:75:ed:fb:
         d2:63:b5:30:6f:d0:9e:dd:fe:fc:d4:b0:c1:0f:f8:ca:ca:2c:
         50:09:44:f3:3d:d5:22:7b:28:03:ea:2d:48:00:2f:c4:25:63:
         35:11:81:17:73:c6:65:ea:dc:f5:ae:d4:bb:ef:08:4a:29:89:
         af:0c:61:80:60:6c:48:9d:42:0f:5f:eb:e6:eb:c8:4c:de:40:
         c4:37:c1:d8:2e:c5:74:2d:61:f0:86:f2:33:f8:bc:df:b2:43:
         2a:5d:5b:19:d5:65:5f:da:0d:dd:dd:d4:c6:e1:92:aa:4a:fa:
         2d:e9:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:14:48 2025 by rpki-client