Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
File:                     X2s0EhZiPYWnTyzopeKbXurPolM.mft (raw, json)
Hash identifier:          9kyfUKxctl1ojTr0EXQXlwTB2GlRTu1Cw0Fg/ssrUhY=
Subject key identifier:   23:E1:B5:BA:C0:CD:3B:FA:04:1B:77:9E:72:18:B5:84:C7:25:66:51
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Certificate issuer:       /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial:       0411
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
Manifest number:          040F
Signing time:             Sat 07 Jun 2025 03:12:47 +0000
Manifest this update:     Sat 07 Jun 2025 03:12:46 +0000
Manifest next update:     Mon 09 Jun 2025 03:12:46 +0000
Files and hashes:         1: X2s0EhZiPYWnTyzopeKbXurPolM.crl (hash: YPUAOzDa4AhA97JOkpKnYe8SCTYVpvWuATnQjkscPSg=)
                          2: 55A54EE42E9611EDA379C780F1222468.roa (hash: 92dmko5SHijeHZEqNigi1tIoOa55D1fkpQHQwRV5fc8=)
                          3: 189309602E9611ED8FED3480F1222468.roa (hash: 9thUVnLZZ7EOpFloeIsOWtyUvJheIIw/Jl2bg+WHMIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 03:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C632AF, serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
        Validity
            Not Before: Jun  7 03:12:46 2025 GMT
            Not After : Jun  9 03:12:46 2025 GMT
        Subject: CN=6843ae2e-139d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:30:54:c0:83:ab:37:87:22:d8:80:c5:fe:
                    83:5c:75:fb:c5:ab:92:05:51:6f:c0:56:f6:90:7f:
                    86:c7:55:58:1f:55:13:53:4f:ac:9e:db:00:6d:9e:
                    0e:80:98:e7:f5:47:6e:3e:70:b5:cf:72:90:63:0a:
                    ac:f5:ff:8c:df:00:8a:c2:8e:60:21:a4:24:84:e7:
                    fb:09:2c:d9:0b:1e:f1:38:aa:cb:c5:0f:df:dc:4e:
                    aa:41:4e:51:09:f8:ef:bf:1e:ea:d2:3c:a0:aa:c7:
                    b5:3e:be:d5:80:63:b0:57:76:b0:3b:bf:10:94:06:
                    7c:a7:bc:f8:1e:14:89:e3:80:10:9c:11:34:54:56:
                    5a:dd:7b:82:87:e9:f8:c0:18:4b:24:aa:4f:ae:e3:
                    93:38:72:64:8f:b6:d2:d4:83:e7:39:59:13:6c:bf:
                    3f:d5:32:99:e0:57:83:3f:59:24:09:7a:80:9c:63:
                    d7:44:92:79:8a:f8:d4:4b:94:40:45:50:bb:97:f3:
                    6e:0d:f8:c9:f5:eb:12:f4:d5:c4:46:09:e7:b8:94:
                    7f:e2:8a:09:1b:34:d2:1e:22:d4:f0:54:b0:97:c5:
                    2c:e2:0a:a4:ec:95:f0:be:ce:85:ed:22:33:86:86:
                    e3:f0:a0:9a:d9:02:91:de:8b:0e:32:ad:9e:f9:0b:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E1:B5:BA:C0:CD:3B:FA:04:1B:77:9E:72:18:B5:84:C7:25:66:51
            X509v3 Authority Key Identifier:
                keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e6:1a:16:72:e8:41:63:93:fd:72:1f:b7:48:a3:32:04:7e:
         3f:b8:84:cb:ab:9f:bb:0d:2a:62:a8:80:47:66:90:7a:8d:ce:
         bf:fc:bc:9d:27:8d:d9:6d:87:5f:8a:3b:0d:c3:57:04:cc:3a:
         ee:63:f8:72:75:37:b6:b8:a2:c0:68:ae:a1:4a:8b:59:3b:6c:
         e8:88:f9:c8:55:99:51:61:0f:40:bf:6b:9f:64:f6:f8:9d:12:
         26:f1:97:89:72:16:9b:ed:3a:6f:51:23:eb:91:7c:f5:fe:1d:
         35:bf:bf:78:af:3a:4c:71:e4:34:63:98:77:5f:2c:88:84:d6:
         d7:4e:c5:31:e4:5f:f6:d8:c6:20:a7:63:01:06:69:23:0f:4f:
         8a:f2:4b:95:50:24:8e:d3:be:44:5f:4e:37:d2:f1:de:4a:e9:
         d0:6a:98:4f:3e:27:36:26:a0:93:ec:b4:a7:92:79:16:67:b5:
         b4:59:d7:31:5a:20:e0:8a:44:a8:82:3b:b0:e8:3c:d5:97:3e:
         86:b1:8b:46:ac:05:67:92:0e:5a:14:ce:59:82:08:83:eb:87:
         55:ca:b2:7a:54:51:1e:b7:7e:71:5b:c6:35:d9:49:06:80:90:
         d9:72:10:4e:66:2a:a0:18:4a:b6:e6:9b:12:9a:0b:9d:45:18:
         1f:5e:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:39 2025 by rpki-client