Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
File:                     JLXuZ0cVou7uiGTqX17kcyPPdmw.mft (raw, json)
Hash identifier:          Ig+LBm8wjae57A9gGDlgb+C9WimFAVHRselAbJm9Png=
Subject key identifier:   66:88:7F:B3:6C:7C:77:86:95:3F:1B:11:FD:F7:18:7F:41:CB:36:0F
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       0163
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
Manifest number:          015E
Signing time:             Sun 27 Jul 2025 04:52:22 +0000
Manifest this update:     Sun 27 Jul 2025 04:52:21 +0000
Manifest next update:     Tue 29 Jul 2025 04:52:21 +0000
Files and hashes:         1: JLXuZ0cVou7uiGTqX17kcyPPdmw.crl (hash: KE7qE2pyOT+jT2C/kP5Nu3hol5DncKB1n7UzCJKN+d4=)
                          2: C8C3F9C2B0B511EF88E1CA4C762E951A.roa (hash: Mh36UH7NwuelUC3NMhOTPwUhu32iweIo8TXpZWT/LM0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Jul 27 04:52:21 2025 GMT
            Not After : Jul 29 04:52:21 2025 GMT
        Subject: CN=6885b086-76d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:75:6d:16:e6:f9:d7:0e:cb:b4:c7:6f:0c:
                    bf:5d:bf:f7:97:c9:41:96:93:fa:37:b8:5b:8f:f8:
                    99:c3:b6:3b:ae:69:6a:ed:68:e0:cd:9b:9a:d4:53:
                    4c:f1:dd:50:6c:e6:2b:09:88:62:ea:61:26:ef:71:
                    d3:01:48:14:b0:cb:79:ce:0c:bd:1d:57:02:03:81:
                    2c:28:06:52:5a:e0:6f:30:27:51:9b:f9:73:0e:93:
                    97:59:39:70:67:e4:74:34:3c:26:ce:53:c7:91:86:
                    d5:92:8e:14:6e:2e:70:8c:08:04:80:25:70:c3:95:
                    c4:45:d9:41:f3:02:83:5c:44:db:1c:6b:76:9a:21:
                    f9:d9:a2:ab:24:18:92:48:6c:28:11:a7:36:53:c1:
                    85:24:7d:11:29:1b:4d:6a:29:98:47:64:04:77:95:
                    aa:cc:bc:cf:0d:19:49:ea:15:7b:68:49:e5:89:ab:
                    7a:b5:27:42:d0:09:39:df:8d:78:30:a3:b9:b5:34:
                    d1:b1:67:64:2c:30:80:cb:7e:5e:93:56:e4:d4:55:
                    34:34:91:53:93:1c:b8:2a:3f:df:24:ec:bb:7e:30:
                    60:7b:12:9f:dc:41:4f:55:e2:a9:40:ca:db:d1:f2:
                    7f:8f:9d:ac:d2:44:bb:41:47:01:3f:4e:d9:0b:a7:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:88:7F:B3:6C:7C:77:86:95:3F:1B:11:FD:F7:18:7F:41:CB:36:0F
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:fb:92:d4:9a:cb:55:99:a7:d6:03:89:7f:f8:12:91:a3:ed:
         0e:49:91:2a:35:66:7d:2a:13:a6:1d:e3:bd:43:8a:5f:14:4d:
         08:ab:b5:2b:12:8a:ad:f6:73:7d:2e:cd:cd:74:e6:a8:80:7f:
         71:88:ab:d8:17:da:2e:62:17:25:a1:a6:e0:6f:01:57:b9:6d:
         01:e7:4b:8f:6e:5c:24:df:bf:84:1b:43:6c:84:4f:73:8a:a5:
         b5:e7:f4:13:eb:a9:3b:66:96:ba:6f:75:4d:60:93:87:da:33:
         ee:65:45:54:07:4b:2b:90:87:a7:e2:55:d0:4f:11:86:ea:fc:
         65:e4:6c:3a:38:d6:5f:bd:b3:93:12:71:58:ae:c6:4b:0e:c0:
         3f:fe:74:9b:71:32:b6:1e:49:dd:a3:a6:a6:56:b0:4b:71:08:
         58:24:1a:52:87:8d:c6:ad:18:4f:e6:06:16:40:e0:ad:0b:ed:
         48:ba:91:4b:2a:29:48:ca:e1:e2:6f:e3:03:43:ad:fe:58:fa:
         f9:b8:cc:ae:92:7d:e1:3c:d6:ee:e6:5b:c7:d8:e3:c4:12:cf:
         eb:94:b6:2a:2f:09:52:9b:b5:f4:bb:0f:74:d2:5a:64:fe:55:
         6e:0c:4e:e5:43:b1:9a:c1:9f:bf:da:29:06:82:19:e1:97:9f:
         be:4f:21:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:58:22 2025 by rpki-client