Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
File:                     JLXuZ0cVou7uiGTqX17kcyPPdmw.mft (raw, json)
Hash identifier:          E0wWcfHZWSaw996TopgorHCxTGke9yS98UIsN0KYoQM=
Subject key identifier:   C0:04:11:7E:FB:A3:03:32:DC:BC:14:6E:6E:76:A0:55:4C:48:BE:7B
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       012D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
Manifest number:          0128
Signing time:             Wed 04 Jun 2025 04:49:10 +0000
Manifest this update:     Wed 04 Jun 2025 04:49:09 +0000
Manifest next update:     Fri 06 Jun 2025 04:49:09 +0000
Files and hashes:         1: JLXuZ0cVou7uiGTqX17kcyPPdmw.crl (hash: jD3JBDGKmbsRhDktU44203wPmCVf/IEgGLfkCabp8iQ=)
                          2: C8C3F9C2B0B511EF88E1CA4C762E951A.roa (hash: Mh36UH7NwuelUC3NMhOTPwUhu32iweIo8TXpZWT/LM0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Jun  4 04:49:09 2025 GMT
            Not After : Jun  6 04:49:09 2025 GMT
        Subject: CN=683fd046-23d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:c8:71:37:85:c4:ea:65:96:25:50:b3:e4:
                    34:7f:26:80:a3:93:34:76:ee:62:1e:1f:0a:9c:80:
                    72:d3:7c:7f:2b:f6:fe:a7:b8:da:17:74:0d:97:f0:
                    9c:8f:c9:8f:09:1e:56:7d:3a:87:11:ef:75:9a:43:
                    32:2c:f0:38:36:7e:cb:27:f6:24:c0:51:b0:1b:1f:
                    d6:be:38:82:b0:0c:c2:c3:1e:82:96:94:29:75:b4:
                    9e:23:7d:4e:ad:2e:91:b1:89:7d:2b:94:da:6d:43:
                    d1:be:58:1f:a8:cf:a0:15:b1:e6:ef:26:eb:d1:c1:
                    ce:29:fd:e8:8f:d9:8c:f3:14:83:a5:b1:df:75:c7:
                    15:68:db:9f:92:f8:29:26:5c:39:9d:8e:3a:24:c1:
                    3d:04:eb:bd:f0:07:08:c0:44:f6:d9:fe:92:cd:d5:
                    f9:e1:82:87:21:ca:5a:a7:cb:21:00:cc:0c:a4:7e:
                    7a:a0:aa:c5:a7:62:c1:3b:d1:27:48:a3:9a:18:59:
                    d5:54:89:e0:e6:d4:81:bf:90:1f:0d:93:da:5b:04:
                    4e:1d:b3:21:68:41:51:b2:6f:56:0d:55:7e:b7:b9:
                    a7:39:a1:d4:23:2b:62:8c:d7:94:d3:56:72:a8:ed:
                    41:96:3f:6f:fb:c9:a5:04:ab:0f:62:66:62:96:c5:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:04:11:7E:FB:A3:03:32:DC:BC:14:6E:6E:76:A0:55:4C:48:BE:7B
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ae:f6:65:34:66:b2:0c:4c:80:de:e1:98:4b:ea:20:64:76:
         b0:fe:65:de:5e:7c:ae:a1:25:6f:e7:a8:d0:84:e1:ff:d7:b7:
         87:67:05:a7:8c:0d:e3:d4:57:f2:d1:f4:a6:b6:59:e8:ff:0c:
         bf:7a:95:d5:b0:3f:36:6f:d7:cb:61:38:10:15:d7:48:46:61:
         66:37:3a:f0:b5:fb:e3:e9:f7:fa:a7:c0:57:1c:e7:9f:36:ef:
         09:5b:04:ac:18:05:78:20:1c:a8:dc:ab:a6:32:24:54:c9:4d:
         37:8f:73:3a:dc:25:9b:f1:d2:a1:e4:d4:dd:7e:47:06:22:bc:
         73:97:51:b2:be:9a:01:0b:9b:c3:34:13:f6:02:0b:cc:37:ca:
         70:37:7c:d0:e8:c6:d9:06:42:4e:b1:17:0d:d1:f8:8c:7c:40:
         98:e4:0e:7f:7e:4a:1a:bb:24:65:c5:69:60:f7:39:84:b6:6a:
         f1:08:c4:7e:15:ee:68:c3:fb:04:2a:b4:fc:52:70:6f:be:6b:
         50:32:9b:13:42:d2:9a:08:8f:ea:de:12:1d:da:fb:e9:d6:a7:
         3d:9b:39:6c:90:46:cc:2a:0a:a0:4c:5f:ce:92:ae:ca:7a:57:
         34:42:6a:88:e8:cd:b5:c4:98:20:2a:ca:54:34:3c:2e:21:a6:
         1b:35:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:08:38 2025 by rpki-client