Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
File:                     _p4BMgoOlVJFOamGqPA_ketPwy0.mft (raw, json)
Hash identifier:          v1O0nayhWbs95pcoSNPqNCaGj8BHb1Y2TwwQcU4VWBc=
Subject key identifier:   F1:94:71:30:B0:83:26:B6:8D:64:62:2F:C2:58:C2:1B:A9:AE:94:53
Authority key identifier: FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D
Certificate issuer:       /CN=F368D658AF/serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
Certificate serial:       01EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
Manifest number:          01EA
Signing time:             Wed 04 Jun 2025 04:22:37 +0000
Manifest this update:     Wed 04 Jun 2025 04:22:36 +0000
Manifest next update:     Fri 06 Jun 2025 04:22:36 +0000
Files and hashes:         1: _p4BMgoOlVJFOamGqPA_ketPwy0.crl (hash: 0DGsG+ZtnTgHozrzl+cd8UIX9NcgRaXhI5NrLZLASX0=)
                          2: 311C4904CA4B11EEB1A20B86775412E6.roa (hash: 6Jipg/U2Wzl+hCZ+uZdXwq1gTXKTDFOFMoiu2FzO3Lc=)
                          3: DC6D06E4CBEB11EEA9655CAB775412E6.roa (hash: rI3Z0thMS8kcuZHwZrlMXa6Fqk3EKGjdiGllXF+/6As=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D658AF, serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
        Validity
            Not Before: Jun  4 04:22:36 2025 GMT
            Not After : Jun  6 04:22:36 2025 GMT
        Subject: CN=683fca0d-80ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:57:ad:31:f2:72:85:4d:0f:0f:e7:5b:9d:
                    60:d9:1d:41:a5:c3:c1:7d:a1:ae:25:58:6f:c4:e2:
                    56:e9:61:a4:6e:8d:7f:85:22:da:6e:c4:7e:41:70:
                    4c:71:94:6b:41:fe:a4:25:38:d9:62:36:8f:b4:03:
                    94:af:4a:aa:9a:20:c2:37:d9:40:4c:da:30:01:77:
                    e5:25:68:91:48:6b:e6:11:23:13:74:94:6a:9d:f2:
                    4b:52:e1:03:85:84:1f:c5:b6:80:fd:46:5d:1e:c6:
                    d0:27:0d:01:23:3c:5f:54:7a:da:57:6d:17:0b:33:
                    ac:54:d1:27:83:cd:67:78:2d:a7:40:32:c0:22:33:
                    d8:89:36:da:ad:85:39:25:57:5f:fb:e3:e0:30:a8:
                    9b:1a:b9:98:9e:a2:53:dd:de:9c:84:15:50:46:71:
                    3e:ac:e0:53:78:84:5f:87:e5:f8:48:72:71:fc:77:
                    cc:54:23:6b:6f:d7:d4:c8:a7:5b:fd:8b:61:6d:b3:
                    3f:c2:0b:b6:8a:54:64:d0:95:3f:e8:ac:fe:20:d1:
                    98:d8:1f:65:50:d6:41:bc:56:9e:a0:d2:98:bc:47:
                    9e:07:de:c6:01:94:ff:a6:78:cd:b0:cc:9d:c2:1e:
                    10:9e:9b:81:3f:61:f5:56:bf:28:dd:d0:fe:60:16:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:94:71:30:B0:83:26:B6:8D:64:62:2F:C2:58:C2:1B:A9:AE:94:53
            X509v3 Authority Key Identifier:
                keyid:FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2f:16:26:db:2e:16:40:cd:54:3b:60:71:31:89:e1:0e:7d:
         92:8e:79:36:d3:a6:b7:d8:d5:87:7f:e2:7e:3f:22:a7:15:d3:
         24:74:90:39:f0:51:1d:d7:33:29:23:32:7f:9b:17:75:30:29:
         30:ee:a7:1f:dd:90:71:fa:d7:40:35:85:35:c4:5d:46:f3:f9:
         3f:f3:56:63:79:f9:14:25:b8:bd:45:6a:71:51:85:24:1e:38:
         ae:4e:f6:d5:3b:e6:6d:e1:43:28:a5:62:9e:5e:86:3e:c4:3e:
         33:15:c7:94:81:09:5f:9b:82:46:2b:ce:8b:cd:6d:23:7f:0c:
         95:55:d0:d3:a7:0a:fb:bf:9d:1b:7c:14:1f:b5:b3:a2:43:62:
         fb:f1:36:66:1c:ea:62:b5:b9:87:fc:a8:ac:a1:7b:71:e5:80:
         19:ae:85:b8:68:ca:d3:4d:66:4f:d7:be:b7:7c:fb:9a:cc:93:
         96:9d:5d:94:46:c1:39:18:ae:ac:2b:3f:db:e7:27:f2:8e:61:
         7d:3f:1e:7a:0b:9e:aa:a9:53:02:fa:51:ff:2b:73:ff:d3:44:
         c5:dc:54:a8:08:85:e9:49:31:56:ab:a5:80:60:71:84:08:28:
         e1:da:56:62:8e:d7:9b:f5:40:fb:db:48:4c:08:ff:a2:23:0d:
         6d:9d:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:00:18 2025 by rpki-client