Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          EOKzYsMnpdOAyQRxYaAJnSrh/IQaWDL18qxb/BFKg3k=
Subject key identifier:   2B:0B:B9:9F:03:A6:CB:E7:0B:70:21:EA:48:1F:67:55:80:F2:B9:7B
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       08F7
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          08F3
Signing time:             Wed 11 Jun 2025 01:22:35 +0000
Manifest this update:     Wed 11 Jun 2025 01:22:34 +0000
Manifest next update:     Fri 13 Jun 2025 01:22:34 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: pvnc1RvoPkXjryjxdfeL+jbrWL2xkrRyqITxuFt9gX8=)
                          2: D327BE38980311EE8CAFD532D25BE465.roa (hash: S6gTdluMy3bxrOQWOaTfSvtXEYSyREhvKUaAZL3cXu4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 13 Jun 2025 00:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: Jun 11 01:22:34 2025 GMT
            Not After : Jun 13 01:22:34 2025 GMT
        Subject: CN=6848da5b-241b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:70:15:de:16:b2:29:d5:d9:67:db:c9:fb:
                    0c:4c:b3:e4:86:62:e6:88:f8:98:85:5b:ca:50:cd:
                    17:73:42:56:95:57:80:99:52:8d:26:b2:60:73:5b:
                    e9:d4:24:7a:3e:12:c7:9c:03:07:f8:9b:30:b3:39:
                    6a:8c:f7:72:03:28:71:54:85:bc:b1:a9:47:68:d3:
                    3e:06:b9:1f:3d:2c:88:bd:77:4c:c5:ec:30:1d:41:
                    02:dc:51:40:b5:ad:16:b3:c8:cd:81:81:05:c1:33:
                    27:0d:c5:f3:87:34:a6:24:ae:86:95:2c:24:18:4c:
                    b0:f6:1d:9a:d6:ec:8e:23:00:32:0d:3b:13:0c:68:
                    cd:5e:da:3d:06:d0:04:1d:be:c7:6d:93:54:be:4a:
                    be:d5:8a:fb:7a:e0:21:b4:f4:c6:7e:3e:de:d6:92:
                    a6:5e:86:4c:4f:d1:08:fa:2a:b7:fc:d1:d1:8b:ee:
                    03:ce:46:8f:6f:57:70:73:e2:6c:e6:49:4b:07:06:
                    12:75:06:44:04:a7:d1:21:ac:04:53:81:a2:a8:6d:
                    38:52:e8:01:15:29:81:0c:5d:b8:59:1b:97:29:69:
                    19:e9:f1:04:4a:bc:da:57:66:3e:ff:5b:7a:46:1a:
                    d6:b4:23:5f:2a:7e:a8:94:fd:8e:1e:7e:dc:f3:be:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0B:B9:9F:03:A6:CB:E7:0B:70:21:EA:48:1F:67:55:80:F2:B9:7B
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a8:95:30:c2:6d:e7:58:63:88:b4:53:f4:26:a9:9e:8c:8a:
         79:5f:f5:3e:f9:80:5e:e6:52:e1:68:fb:21:99:b0:3e:b2:21:
         08:c2:97:72:1a:bc:bb:ce:db:fe:31:ee:67:bc:85:1c:8d:1a:
         2c:5f:dc:f4:a4:18:5c:8d:6a:f5:0e:e5:1e:75:06:b6:ef:67:
         5f:24:b5:82:ca:0a:5a:a5:8b:66:db:3a:aa:d2:cc:bb:70:dd:
         f8:c8:5c:c3:8f:29:8c:4c:e4:8f:a8:a6:0c:31:99:a9:c5:8e:
         b7:fa:43:5e:bf:dd:5b:b7:63:6e:e2:bf:1d:ab:1e:df:19:7a:
         0d:c6:7e:1d:11:aa:8f:3c:4c:9c:fb:99:41:01:d7:0f:6a:af:
         1b:f8:29:b6:b5:2f:20:83:38:28:49:8c:8c:74:32:e5:8e:65:
         10:11:50:ae:c2:1c:dc:0d:d7:b2:07:3e:81:4b:5e:95:be:58:
         a1:1a:fd:9c:d0:85:ef:b9:13:68:1a:d8:3e:87:b9:2a:c7:76:
         68:49:18:06:18:22:df:ea:60:4f:c2:d5:e6:ec:f0:21:ca:02:
         e5:aa:ff:66:c4:7f:c8:cf:1c:87:52:49:fb:c7:49:6c:d7:80:
         5d:d7:ef:12:48:e0:b8:67:e5:88:69:7d:58:25:60:b1:2a:dc:
         d1:68:b4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:12:00 2025 by rpki-client