Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
File:                     qPP_zPK9bxc-V43OhiXgHFOX9zU.mft (raw, json)
Hash identifier:          COLjxwi6GH/E/Yf33X8bmd2nPzN+AYnAiM0HloTHN1M=
Subject key identifier:   91:45:45:06:83:6A:32:98:1B:12:A9:B4:AF:D2:37:64:0C:DD:68:85
Authority key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
Certificate issuer:       /CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Certificate serial:       0575
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
Manifest number:          0573
Signing time:             Fri 13 Jun 2025 02:37:01 +0000
Manifest this update:     Fri 13 Jun 2025 02:37:00 +0000
Manifest next update:     Sun 15 Jun 2025 02:37:00 +0000
Files and hashes:         1: qPP_zPK9bxc-V43OhiXgHFOX9zU.crl (hash: /s9DPErtUyqmOIMbBue9f3FDIkx3AOCuYLVZ00k0xyg=)
                          2: 7053DDBA207711ECA57B2A27D8A014CE.roa (hash: 8FwYiwQNn3Nk7JGlhTjNINHWw5iUKIWhAuMhk3sKQys=)
                          3: 5EE2F40CED9F11ED90CD53134AD9E6FC.roa (hash: 7NdUaz4rD9qpZUgGvl0CsoD0saUCFYGySX0YWVKqUtI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 15 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3684027AF, serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
        Validity
            Not Before: Jun 13 02:37:00 2025 GMT
            Not After : Jun 15 02:37:00 2025 GMT
        Subject: CN=684b8ecd-8051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:85:3b:c6:f6:5a:55:8d:a2:9e:2d:e9:8a:
                    a7:72:37:33:21:9d:c0:b5:da:38:b1:00:a8:b7:0f:
                    70:b8:cd:20:e3:5f:d4:1b:99:b7:21:05:6c:9a:4b:
                    43:7a:ce:bc:a6:24:4b:8d:c7:ad:56:9c:b8:14:9e:
                    94:45:7f:89:c3:ed:99:e4:0d:f9:57:ae:01:9e:c9:
                    9e:71:32:46:22:86:65:e8:5c:bd:bb:54:b5:87:91:
                    24:bb:e6:54:ea:16:27:86:17:50:b0:e1:ad:9c:13:
                    0a:17:25:67:ab:bb:65:ad:4f:b3:6a:90:01:02:c8:
                    bf:ab:d3:d9:80:67:03:ba:74:50:ce:bf:88:26:76:
                    e3:0d:ce:5c:3f:31:7b:b4:da:64:10:7c:c0:4a:1a:
                    09:01:d5:3a:7a:3b:6e:14:89:2f:5f:89:17:5e:93:
                    c9:2d:6f:69:52:1a:95:82:d1:f1:e0:de:da:b8:99:
                    9f:0e:0c:a9:ac:59:63:ee:f6:0a:fd:0e:e6:ea:98:
                    65:f3:5d:ea:ca:6d:aa:6d:59:69:e7:b0:54:c3:e4:
                    7c:c3:a8:bf:59:77:2d:17:de:09:ce:fe:34:8d:80:
                    e3:5e:0b:f6:e8:87:a9:42:0a:bf:d8:ac:d2:04:8b:
                    b4:74:f3:43:9a:72:c8:de:37:07:b3:a6:d1:a9:59:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:45:45:06:83:6A:32:98:1B:12:A9:B4:AF:D2:37:64:0C:DD:68:85
            X509v3 Authority Key Identifier:
                keyid:A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:df:2f:e3:a3:a4:4b:ce:83:47:0c:ed:b6:cd:ca:17:dd:68:
         51:b1:75:d5:84:2e:8d:c2:91:f7:96:4f:40:b7:4d:90:d7:6c:
         ba:95:88:68:e1:53:fb:29:eb:43:f3:9a:1e:2c:69:47:1a:35:
         aa:38:b9:d2:d5:b3:41:75:3c:9f:70:0b:12:24:0b:1d:ef:ba:
         5c:d5:74:a5:e2:2f:78:bd:45:05:c6:2b:da:a3:2f:35:24:c4:
         ac:e9:9d:77:41:3f:1a:7a:e7:7c:eb:fe:57:c4:ab:b7:f2:4c:
         21:62:67:41:b9:17:1c:79:9a:ad:bc:ac:22:1e:bc:a1:4f:0c:
         6c:49:5e:67:9b:58:99:e4:b4:fa:27:cb:d5:eb:e7:79:d3:8c:
         75:d4:78:b3:86:67:31:96:76:3a:e4:06:e4:cf:4a:76:e9:1c:
         3f:6a:4a:f9:43:5b:05:5d:61:53:d6:d9:c3:e8:4b:f1:13:13:
         62:51:eb:4f:b6:30:2c:ba:1e:f9:e5:f2:67:fe:c7:2c:32:79:
         53:94:11:0b:78:ad:5b:4e:38:1e:c2:8b:64:3a:72:a5:21:49:
         c6:5d:27:30:d3:82:7a:55:b2:d0:71:50:0f:07:bd:59:c0:4c:
         b2:21:9d:db:33:c4:ef:23:6b:25:66:ca:25:fd:7c:f6:49:a9:
         26:86:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:47:35 2025 by rpki-client