Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
File:                     pmHmEV84xQtNTFvj-kiO2AWMwvE.mft (raw, json)
Hash identifier:          MzTp63m7U2rKjU/xf4KANCyZZ413WYRpxmh5DnFWCtY=
Subject key identifier:   F2:F8:E6:0D:0B:6F:51:45:BD:85:FE:08:D0:C9:7C:89:5B:A0:6D:46
Authority key identifier: A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
Certificate issuer:       /CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Certificate serial:       F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
Manifest number:          F5
Signing time:             Sat 14 Jun 2025 05:03:05 +0000
Manifest this update:     Sat 14 Jun 2025 05:03:04 +0000
Manifest next update:     Mon 16 Jun 2025 05:03:04 +0000
Files and hashes:         1: pmHmEV84xQtNTFvj-kiO2AWMwvE.crl (hash: aoqFAkuOPs2SsrbEfDAIrPCXYCU8vh0Qaw11srdXZtk=)
                          2: 84121498949611EFBE8BA57F762E951A.roa (hash: XaqvhZS4unq9+u8DbG/XQq/y/o0dswE+yS72E0NeXdI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672189AF, serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
        Validity
            Not Before: Jun 14 05:03:04 2025 GMT
            Not After : Jun 16 05:03:04 2025 GMT
        Subject: CN=684d0289-fd1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:26:97:de:c3:79:db:a4:cb:10:b3:b3:40:
                    58:7d:65:42:8e:cb:92:52:76:c8:16:c0:59:86:9b:
                    12:e3:e7:ac:86:11:d7:c9:c0:9e:66:3a:dc:0c:25:
                    de:06:cb:96:73:5d:91:a8:f9:ec:1e:6c:cd:9d:2d:
                    f4:65:46:cf:6b:df:36:a5:ac:48:19:d4:86:59:de:
                    85:d0:67:48:3f:57:dc:2b:0f:34:15:8d:ed:40:b8:
                    cd:61:8d:24:54:88:c2:d1:56:18:f7:df:ba:58:42:
                    29:f9:33:0e:e0:85:48:23:4b:5f:67:d9:7a:8b:cc:
                    93:84:74:ad:8d:fc:67:aa:92:b6:bc:59:85:99:33:
                    35:2d:0e:9d:75:3d:3f:f8:c2:41:bd:f5:ba:77:86:
                    a6:73:aa:42:b3:d0:26:7d:29:40:4d:65:a7:d2:fc:
                    4c:9f:48:4d:79:3b:c8:be:c6:e3:7f:04:e2:a4:7d:
                    cd:5f:bf:92:5a:6b:01:27:8f:a6:f8:80:99:22:1c:
                    9a:e4:50:ae:de:77:d7:c6:08:c2:ec:12:57:e9:1c:
                    a4:cb:b3:22:89:50:54:a2:f2:8e:4c:99:d8:51:8a:
                    ee:76:87:e1:a6:72:5e:0e:0c:ba:1b:21:62:85:62:
                    d2:7c:bb:75:90:3c:ed:26:95:b4:0e:24:02:cf:58:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F8:E6:0D:0B:6F:51:45:BD:85:FE:08:D0:C9:7C:89:5B:A0:6D:46
            X509v3 Authority Key Identifier:
                keyid:A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:64:94:2e:fe:f1:0b:ac:9a:92:64:92:0d:b5:8e:85:68:00:
         a8:33:31:bf:54:85:81:71:e8:f6:71:ea:63:47:3b:36:64:d7:
         9e:c9:4e:30:d2:a1:5b:9b:5d:37:ff:fc:f9:4d:96:c8:f2:10:
         4f:e7:04:b9:bf:43:3e:5d:bf:47:5a:2a:ee:db:c0:43:c1:40:
         92:92:c1:ab:88:15:b9:d1:99:e3:0f:b4:a7:be:d0:5a:0c:a4:
         ba:89:f3:3b:03:0a:59:5d:22:ef:8d:ad:20:71:24:e6:9b:2f:
         1c:21:a0:88:24:2e:97:41:a8:99:67:2f:f9:af:26:0b:ef:e6:
         5a:2c:71:25:3b:e6:0a:c7:2a:81:70:60:a6:53:0e:6a:a7:07:
         0c:49:f6:8c:6b:fa:13:3b:88:89:c6:0c:1c:5e:4d:5d:cc:61:
         33:22:55:0b:99:16:d4:71:94:b5:6c:f1:be:ad:cf:e2:8e:d0:
         ca:3a:9e:40:1a:65:f6:a4:00:01:bd:83:34:d4:ac:6d:de:44:
         6e:52:5f:99:36:e7:98:02:2f:25:fd:1e:cb:ea:e8:4f:6a:10:
         ce:a4:77:3a:d2:e4:03:8e:b1:4d:2e:8a:2a:59:c0:81:5f:13:
         5c:29:eb:3e:24:9a:1c:c6:f1:2b:2e:d9:bb:3f:dd:41:49:7b:
         01:96:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:16:20 2025 by rpki-client