Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
File:                     xlOxWlDuQwH_JY2KKnwYY4PFDro.mft (raw, json)
Hash identifier:          XrryBiCKgHGFCeqTIsmHLCX+HT4Ax/DzENp7QEIqBJA=
Subject key identifier:   FF:4F:37:6B:D5:CE:DD:BA:14:4E:B8:AC:D7:10:A5:DD:B8:11:4F:73
Authority key identifier: C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA
Certificate issuer:       /CN=F367D68CAF/serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
Certificate serial:       0625
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
Manifest number:          0624
Signing time:             Sat 07 Jun 2025 02:14:13 +0000
Manifest this update:     Sat 07 Jun 2025 02:14:13 +0000
Manifest next update:     Mon 09 Jun 2025 02:14:13 +0000
Files and hashes:         1: xlOxWlDuQwH_JY2KKnwYY4PFDro.crl (hash: kr4dXSOPR5cdDs8xcumC/BHF8hwLBvnd4iC4P0RWaUw=)
                          2: 69EE67B4920711EBA4D68A7DF8AEA228.roa (hash: PWOhXQJ0fibjAAccGAeAnloClqV+BwPlt2KmVpD849M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 02:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1573 (0x625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D68CAF, serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
        Validity
            Not Before: Jun  7 02:14:13 2025 GMT
            Not After : Jun  9 02:14:13 2025 GMT
        Subject: CN=6843a075-7842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:d5:f6:58:87:5f:be:e2:6a:48:94:7a:3f:
                    18:65:06:03:50:b8:60:e3:bf:33:ef:d9:f1:47:b1:
                    c9:1c:bc:64:bf:bf:c7:1a:b3:bc:ea:c9:60:82:8c:
                    bc:51:24:5c:8a:57:e8:64:3f:f4:61:40:c3:e4:63:
                    a0:32:29:8f:d2:10:10:d1:c8:11:6e:9b:37:f4:fc:
                    14:a5:25:33:57:3f:b2:55:49:59:1b:e9:85:92:5b:
                    c9:52:03:8a:b6:ab:54:f2:6e:3f:ac:77:2b:ce:70:
                    6f:4d:f3:12:56:dd:b8:f4:8e:dd:08:5e:35:8a:14:
                    a8:fa:86:e7:4e:b2:33:33:82:c9:f3:dd:4c:76:a2:
                    21:77:95:37:ae:f4:94:39:c2:d8:8c:7d:ee:bc:8f:
                    c1:11:8b:0a:92:8f:0c:63:62:4c:f3:db:62:21:c8:
                    0a:78:89:5f:1f:04:08:1d:a3:2a:34:e0:ee:c3:f2:
                    07:60:68:02:f1:21:35:6b:04:2d:ee:c8:84:ca:10:
                    72:fd:bb:f7:52:6b:34:47:47:3f:c5:9e:41:a2:0a:
                    af:d4:fd:ad:b2:bb:2e:10:b8:44:87:11:d1:4c:11:
                    69:6e:c5:30:db:70:b6:b7:de:f1:d9:5a:54:c7:dc:
                    1b:57:4a:22:83:85:a3:38:41:4a:8d:99:eb:9d:74:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4F:37:6B:D5:CE:DD:BA:14:4E:B8:AC:D7:10:A5:DD:B8:11:4F:73
            X509v3 Authority Key Identifier:
                keyid:C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b6:c3:11:31:42:f4:35:2e:af:63:5c:a6:e9:e1:66:4d:67:
         f2:40:09:d2:1a:08:bd:34:b6:c3:1d:15:9d:48:ab:4c:af:76:
         21:42:e7:5a:0e:dc:f5:d0:1a:ef:f2:b1:9c:ad:9c:2f:34:78:
         db:62:e1:d6:be:79:ef:19:78:6c:cf:05:0f:3f:ba:da:d7:7d:
         6b:f3:71:de:64:ab:6e:38:2a:07:ea:86:37:d8:1d:a5:bc:0e:
         82:70:36:aa:ae:cf:cb:3b:4a:49:ba:1b:2b:f0:66:49:98:4f:
         41:55:0d:eb:c0:72:26:47:79:ab:50:30:c5:c5:f7:0d:5f:be:
         46:c7:bd:b5:1e:92:f6:a8:9d:e4:a1:0c:e5:2f:d2:79:ad:b3:
         7b:9d:24:01:ab:85:74:6b:be:c8:03:f4:0a:c6:fc:0f:3a:40:
         c4:34:99:6b:88:78:01:74:88:67:58:b9:68:a6:eb:80:10:d9:
         81:0e:0e:af:db:a7:18:66:d8:83:54:f0:c5:1c:a2:4c:22:db:
         68:22:d9:4f:61:5f:bd:10:18:de:66:8d:73:47:14:d9:df:22:
         94:4b:d5:c5:fd:26:6a:60:9a:d3:e0:47:ac:18:cc:03:bb:9b:
         6a:37:4d:24:55:87:57:04:34:67:ff:09:52:71:e2:6b:70:63:
         76:84:03:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:24:20 2025 by rpki-client