Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
File:                     M9k2dXxyMpyzVJDsNDXRPytwToI.mft (raw, json)
Hash identifier:          UZymiYT/YUsWCRdjGusp0pCAQk975d/jIetO4iKX6Bs=
Subject key identifier:   EB:CF:1F:98:28:A3:52:64:41:85:B7:B7:26:00:6B:55:7E:EB:CA:C0
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Certificate issuer:       /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial:       0104
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
Manifest number:          0103
Signing time:             Sun 27 Jul 2025 05:05:48 +0000
Manifest this update:     Sun 27 Jul 2025 05:05:47 +0000
Manifest next update:     Tue 29 Jul 2025 05:05:47 +0000
Files and hashes:         1: M9k2dXxyMpyzVJDsNDXRPytwToI.crl (hash: eC09va2H14Zfplh9KaaUQWswbBJVBJcu44Jeqcwqqbo=)
                          2: 2E2B725AEEF411EFBCFA6F43762E951A.roa (hash: pbm0HU0V1QcdM+FCx6QyJP3O4fULzd1SgmZHd7KGnyo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C51AF, serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
        Validity
            Not Before: Jul 27 05:05:47 2025 GMT
            Not After : Jul 29 05:05:47 2025 GMT
        Subject: CN=6885b3ac-e011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:eb:3f:74:4a:ea:0c:f9:19:cc:c2:85:45:
                    eb:9a:72:78:a7:83:12:12:0e:09:12:11:a8:98:aa:
                    b0:a0:11:7b:6d:84:c1:77:1f:1f:cb:e8:b5:61:b2:
                    f7:3d:b9:1d:cd:d4:a6:26:9a:2a:bb:39:04:ef:4f:
                    5f:ae:26:2e:26:d5:5f:aa:f4:d2:ca:bd:f7:29:30:
                    cf:10:fb:1f:72:9c:89:d8:f6:c7:30:d4:f8:8a:fb:
                    88:7e:46:7f:1a:82:a9:3b:2e:0c:56:b7:d9:58:ca:
                    d6:23:f1:ad:a7:fa:e0:d5:23:89:7f:f2:26:b1:40:
                    53:0e:5a:d0:1a:46:f8:b7:ad:2e:df:95:b3:88:10:
                    cd:4c:ad:33:a5:ac:23:e1:26:2a:ad:98:e3:af:00:
                    4f:65:cc:d6:56:ca:5a:34:44:ed:07:de:85:6c:cf:
                    49:8a:c7:33:dc:75:d6:e3:68:8c:02:98:ff:40:23:
                    82:dd:ca:03:5b:97:1e:95:b8:9a:99:e3:f2:6a:98:
                    d8:68:77:58:90:25:5d:44:aa:4d:7b:62:95:0d:a8:
                    9c:3c:69:a0:13:10:a9:20:8a:56:e4:9f:81:62:2c:
                    39:5a:de:05:59:13:a8:51:98:01:90:71:5f:d2:6e:
                    6a:bd:fc:6d:2e:8b:38:e9:44:72:29:73:59:5a:f0:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CF:1F:98:28:A3:52:64:41:85:B7:B7:26:00:6B:55:7E:EB:CA:C0
            X509v3 Authority Key Identifier:
                keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:69:a9:ac:7f:48:6a:20:c4:36:b7:a6:dd:34:2f:d9:ae:e5:
         2d:42:a1:d9:29:38:8f:70:d3:39:22:d5:b7:56:13:a4:7f:f1:
         b8:5f:20:7f:45:89:0e:16:e2:94:d8:80:af:12:64:07:c1:51:
         20:47:84:64:52:a1:58:b7:5d:45:10:90:9d:a9:f5:99:e9:b6:
         27:96:59:87:e4:1f:0a:ee:15:84:19:7d:6d:39:eb:5b:f9:eb:
         28:5f:d2:40:fa:c5:0d:0d:82:dc:ba:3b:fa:3a:99:50:21:92:
         37:e9:c2:4a:ce:12:8d:fc:10:e5:f2:bc:0f:c5:b0:2a:1f:15:
         c5:c5:5e:6b:bb:43:3d:84:d1:06:55:08:5a:ff:4b:66:05:d0:
         a7:36:e3:ed:e2:df:11:06:da:d8:11:19:79:06:ee:26:c0:01:
         89:aa:11:48:b1:2d:dd:dc:99:b0:3b:72:a8:95:61:dc:c8:6e:
         6a:e9:ae:23:9c:08:4f:88:32:ae:e9:cf:f9:bf:8b:d4:8e:fa:
         69:1c:66:f5:ff:b4:0b:eb:c3:9d:df:38:94:ef:5a:df:41:8c:
         b8:13:1e:26:eb:1b:92:fd:fb:fd:ca:3d:77:bc:70:bf:1b:ca:
         28:ff:07:4f:5d:23:aa:5e:f2:ef:37:7b:8d:15:c4:78:52:0c:
         0d:c5:6a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:38:13 2025 by rpki-client