Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File:                     XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier:          oXxIkqFhy8yTOdm/39HuWBuSpy1GmR+UwFfnqgdGIaY=
Subject key identifier:   36:36:41:4D:FB:EC:B0:E8:74:52:1A:80:8D:C7:09:70:60:82:81:78
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer:       /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial:       0890
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number:          0884
Signing time:             Sat 07 Jun 2025 01:39:57 +0000
Manifest this update:     Sat 07 Jun 2025 01:39:56 +0000
Manifest next update:     Mon 09 Jun 2025 01:39:56 +0000
Files and hashes:         1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: 3aHlfD110eSARP7OQP+5VQYqp87D6PHCaFQ9aE7RoWY=)
                          2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
                          3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
                          4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
                          5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
                          6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
                          7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
                          8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 01:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192 (0x890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
        Validity
            Not Before: Jun  7 01:39:56 2025 GMT
            Not After : Jun  9 01:39:56 2025 GMT
        Subject: CN=6843986d-737a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:be:a0:ca:ce:52:19:56:35:4a:fa:14:96:
                    64:59:98:79:31:78:33:24:ce:26:60:71:ba:b1:9e:
                    d6:47:c6:60:5d:99:cf:ea:d6:8e:18:4f:14:b4:29:
                    9f:42:18:0f:99:8f:fe:bb:09:e8:1c:3f:5a:86:52:
                    ef:76:97:e5:cf:02:7e:86:b5:63:60:2d:26:7a:54:
                    b6:dc:e7:c0:47:0c:f1:6f:fb:d6:f9:38:55:b1:e5:
                    ab:a7:71:13:8c:2a:c6:3d:38:c4:30:62:b6:00:cd:
                    b0:20:4b:11:62:a6:6d:e2:0a:53:c2:e2:ad:42:f1:
                    2b:f5:56:ba:0b:57:3b:56:1f:d5:13:ad:80:ef:d8:
                    32:f8:5f:ff:59:62:03:b1:7c:d9:62:37:1a:d1:12:
                    d1:64:1a:b1:53:70:ed:81:0f:9e:fd:b7:bd:39:fd:
                    79:2f:a7:d8:59:42:51:35:55:5d:25:17:2c:83:e6:
                    18:63:4f:95:c6:93:51:a7:ef:7e:9b:a5:9f:50:e6:
                    9d:34:23:04:56:07:f1:c3:3c:b1:14:66:03:e6:fe:
                    f4:f3:b9:42:30:2c:95:d4:8d:c7:8d:b6:a2:ba:13:
                    08:01:8b:d7:32:ce:83:81:ac:41:2f:55:e4:55:bb:
                    5c:b1:d9:93:86:40:83:94:97:c6:86:5b:26:55:66:
                    f1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:36:41:4D:FB:EC:B0:E8:74:52:1A:80:8D:C7:09:70:60:82:81:78
            X509v3 Authority Key Identifier:
                keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:51:89:f4:ab:98:8c:4c:d8:f3:1f:0c:6c:43:08:23:fc:3c:
         c5:9c:c3:0d:b6:d1:8b:e4:75:c4:70:1a:96:3f:c9:96:d8:0f:
         6e:2c:d7:e5:a7:8d:7a:db:25:cd:7b:81:f2:63:a9:5a:55:ab:
         0c:58:9d:9a:8c:3d:ae:d9:c3:91:85:91:15:4a:9b:5a:48:82:
         bd:b5:22:4a:6a:18:40:a1:86:b8:5d:ca:2d:57:9a:d4:8b:f8:
         df:19:ea:36:71:ad:19:1f:cd:d3:fe:9b:43:44:fd:05:b8:e9:
         34:19:66:05:1f:43:ef:7c:75:32:96:13:d0:8d:78:5e:c6:7b:
         64:c0:1d:14:1a:5f:c4:a6:10:aa:29:39:f4:f0:cb:08:3e:5c:
         1d:0d:58:9c:58:6b:e8:55:1a:67:1f:2d:ef:05:78:22:bc:c8:
         27:b7:df:89:4d:cb:f1:0a:da:0d:55:2e:19:48:b4:26:66:1a:
         81:67:08:3e:38:e4:8a:d4:25:a9:96:01:92:84:78:47:8a:92:
         23:ef:ad:5a:c1:c6:71:75:4c:63:11:d2:62:5d:ab:da:71:de:
         27:62:6b:38:9d:6c:a0:f1:4d:40:74:f8:09:38:e9:d1:39:87:
         a5:21:3d:26:43:fb:bd:34:4c:ae:7f:b2:ff:e3:7a:69:ec:fa:
         0e:b2:e6:8a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODU4OEVBRjExMC8GA1UEBRMoNUNBREEzMkNGQjAwMUFCQTZFNEM5RjUyMTNEOTI4
NzY1QjE1QTMzNzAeFw0yNTA2MDcwMTM5NTZaFw0yNTA2MDkwMTM5NTZaMBgxFjAU
BgNVBAMTDTY4NDM5ODZkLTczN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLIb6gys5SGVY1SvoUlmRZmHkxeDMkziZgcbqxntZHxmBdmc/q1o4YTxS0
KZ9CGA+Zj/67CegcP1qGUu92l+XPAn6GtWNgLSZ6VLbc58BHDPFv+9b5OFWx5aun
cROMKsY9OMQwYrYAzbAgSxFipm3iClPC4q1C8Sv1VroLVztWH9UTrYDv2DL4X/9Z
YgOxfNliNxrREtFkGrFTcO2BD579t705/Xkvp9hZQlE1VV0lFyyD5hhjT5XGk1Gn
736bpZ9Q5p00IwRWB/HDPLEUZgPm/vTzuUIwLJXUjceNtqK6EwgBi9cyzoOBrEEv
VeRVu1yx2ZOGQIOUl8aGWyZVZvFNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUNjZB
TfvssOh0UhqAjccJcGCCgXgwHwYDVR0jBBgwFoAUXK2jLPsAGrpuTJ9SE9kodlsV
ozcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg1ODhFL0EzODIzOTU2Q0IyRjExRTk4OTBEMUIyN0Y4QUVBMjI4L1hLMmpM
UHNBR3JwdVRKOVNFOWtvZGxzVm96Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hLMmpMUHNBR3JwdVRKOVNFOWtvZGxzVm96Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODU4OEUvQTM4MjM5NTZDQjJGMTFFOTg5MEQxQjI3RjhB
RUEyMjgvWEsyakxQc0FHcnB1VEo5U0U5a29kbHNWb3pjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFUYn0q5iMTNjzHwxsQwgj/DzFnMMN
ttGL5HXEcBqWP8mW2A9uLNflp4162yXNe4HyY6laVasMWJ2ajD2u2cORhZEVSpta
SIK9tSJKahhAoYa4XcotV5rUi/jfGeo2ca0ZH83T/ptDRP0FuOk0GWYFH0PvfHUy
lhPQjXhexntkwB0UGl/EphCqKTn08MsIPlwdDVicWGvoVRpnHy3vBXgivMgnt9+J
TcvxCtoNVS4ZSLQmZhqBZwg+OOSK1CWplgGShHhHipIj761awcZxdUxjEdJiXava
cd4nYms4nWyg8U1AdPgJOOnROYelIT0mQ/u9NEyuf7L/43pp7PoOsuaK
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:44:29 2025 by rpki-client