Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
File:                     eRR9PW5TftaH0IV7r4SSgRj9pOU.mft (raw, json)
Hash identifier:          4E1dfF3PdRK9z9auRr0+t6QF0x+1/5+tEVelDcLt/y0=
Subject key identifier:   B8:52:22:60:80:E0:3F:B7:CD:4D:F4:8B:2D:C5:27:1F:F7:DD:C7:B3
Authority key identifier: 79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5
Certificate issuer:       /CN=F3688163AF/serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
Certificate serial:       01F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
Manifest number:          01F2
Signing time:             Fri 13 Jun 2025 04:28:29 +0000
Manifest this update:     Fri 13 Jun 2025 04:28:29 +0000
Manifest next update:     Sun 15 Jun 2025 04:28:29 +0000
Files and hashes:         1: eRR9PW5TftaH0IV7r4SSgRj9pOU.crl (hash: 3wziibLh0ixlGvkyolAGP8UiYwGx59Ld2TZVJLRL4Ek=)
                          2: E8A5A2BCCBC911EE8E9BEF77775412E6.roa (hash: uW1ZZtqf2li8jzBd7IN42gC/xPbqnD5CcVOfHA/YQtE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 15 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688163AF, serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
        Validity
            Not Before: Jun 13 04:28:29 2025 GMT
            Not After : Jun 15 04:28:29 2025 GMT
        Subject: CN=684ba8ed-fe5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:94:a3:5f:5d:94:c5:7d:54:12:eb:3d:4d:
                    24:f7:30:ce:0a:b3:9b:8c:8f:b6:5e:97:85:97:e9:
                    c0:59:30:b2:ba:f8:fd:31:04:e2:0a:58:71:86:f5:
                    a5:6c:e3:0b:be:47:0b:58:70:86:0d:f5:22:a8:02:
                    82:33:06:c3:01:73:8d:73:c1:07:a9:99:1e:b5:a2:
                    d3:e2:30:30:41:e8:fd:61:72:8d:42:da:e7:ba:b0:
                    2a:f2:c5:43:7f:a4:f0:3e:3c:2b:46:fd:b0:a9:4d:
                    a7:28:92:8f:02:e6:fa:eb:65:28:1e:8c:93:35:37:
                    cf:0a:91:91:85:8f:16:8e:14:bd:9f:03:76:8e:12:
                    50:c1:0c:ff:a8:ea:3c:52:7f:c2:97:98:81:ee:c6:
                    f8:7f:a0:3c:70:d7:2c:6a:36:55:84:98:65:6e:01:
                    83:31:29:26:0d:fe:ca:7e:3d:f6:0d:38:cf:72:06:
                    c1:9f:33:c1:6b:d9:c3:45:59:77:09:88:41:a6:02:
                    b6:70:75:d2:06:9d:ae:c9:29:a5:18:09:d3:46:3c:
                    99:1d:f6:c3:b5:2d:df:41:6b:55:e7:b5:5f:4c:85:
                    dc:a3:b9:1d:5d:aa:01:2e:86:e2:31:bc:11:df:66:
                    9f:cc:2e:b6:d9:e6:01:da:38:84:50:6f:ee:86:97:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:52:22:60:80:E0:3F:B7:CD:4D:F4:8B:2D:C5:27:1F:F7:DD:C7:B3
            X509v3 Authority Key Identifier:
                keyid:79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:8c:4c:e2:36:a3:03:94:0f:56:f0:4a:64:34:d5:1f:f7:2c:
         8d:52:35:d6:28:f0:b8:f9:d1:8a:cb:7d:8e:20:32:a6:57:f4:
         18:94:5c:41:62:79:e4:be:75:5e:f5:23:72:8d:eb:f0:91:48:
         6d:cb:e9:a4:ba:8d:9e:c3:35:46:44:5a:c7:77:b5:cf:99:d1:
         72:95:f5:15:dd:fc:b2:24:92:b7:ee:78:9f:58:ab:8c:2b:01:
         6a:19:4f:aa:44:c5:af:ba:ef:0e:f1:1c:22:91:12:e5:49:d6:
         dd:0f:ea:53:58:7f:99:c7:50:88:c0:70:b2:17:b2:51:a7:2c:
         c4:58:9b:49:de:eb:7a:6c:4d:7c:8c:e2:8e:38:3e:97:70:37:
         30:46:fd:d9:8e:43:b4:00:40:10:bf:50:37:e1:42:4f:a7:c8:
         a4:db:f5:fe:bf:4c:71:32:5a:9b:14:e4:53:7f:eb:98:8b:56:
         91:46:d5:74:5e:fc:64:01:0a:b9:3a:66:25:26:f6:db:a2:4b:
         89:c6:f2:6d:6d:bf:4a:d4:56:82:40:f8:fc:f9:e0:24:74:0f:
         dd:f2:70:1f:de:f7:45:3d:04:26:5b:7a:fa:58:88:03:8e:43:
         58:e1:e7:22:88:0d:c0:14:81:59:bc:df:45:56:d0:e9:8c:38:
         a0:25:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:04:48 2025 by rpki-client