Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
File:                     rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft (raw, json)
Hash identifier:          ccfgfIodx2mWfe2soXYXX5NSC9h7I0zwdhMIN85kXi8=
Subject key identifier:   BA:AB:F2:18:EB:6F:E0:17:5C:34:9B:5D:BA:94:2D:57:C7:CF:AA:6D
Authority key identifier: AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F
Certificate issuer:       /CN=F36A4C9EAF/serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
Certificate serial:       044B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
Manifest number:          0449
Signing time:             Fri 06 Jun 2025 03:03:30 +0000
Manifest this update:     Fri 06 Jun 2025 03:03:29 +0000
Manifest next update:     Sun 08 Jun 2025 03:03:29 +0000
Files and hashes:         1: rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl (hash: ilk3xJGzRyfQMzVP+6hRimoXFAU4M3m3T1ExgFMpPPs=)
                          2: 6ADD5F36276611ED8496B7E5F1222468.roa (hash: Qk4QPoBO37F+c6CTxiNXDVmzwT1MOwmXYJMKBjJSlEg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 03:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099 (0x44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4C9EAF, serialNumber=AEF7C777AC3636C67BAE8A0CC69E44638E9A009F
        Validity
            Not Before: Jun  6 03:03:29 2025 GMT
            Not After : Jun  8 03:03:29 2025 GMT
        Subject: CN=68425a82-2de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:32:4d:03:b7:d9:77:9a:76:6b:dd:74:17:96:
                    7d:72:b0:a8:84:f9:66:b2:97:4b:7c:da:26:52:44:
                    69:a3:fe:11:91:0e:ad:b4:60:74:a6:a5:e7:06:87:
                    79:1b:3b:e7:5f:2d:8c:34:84:ac:79:0e:e1:d2:f1:
                    64:50:24:6b:40:31:f2:4f:85:ee:58:ae:1b:9d:12:
                    ae:74:35:c2:d7:fe:37:0c:0e:1a:d2:25:2a:1a:d5:
                    73:70:8f:df:50:84:2a:81:86:f0:31:61:bf:85:30:
                    91:02:61:06:04:c8:c1:0f:08:a4:32:b6:aa:ab:24:
                    d4:c5:25:2c:bb:92:ca:51:17:5f:94:20:64:4b:a2:
                    0e:25:86:f0:d8:e3:05:e4:36:f0:d8:75:4d:60:4d:
                    87:e0:5b:bc:c2:4e:f4:b3:6e:99:b7:8e:5a:75:cb:
                    4b:23:d8:32:2c:8b:64:03:5d:a7:97:a5:8d:5b:c7:
                    8e:f0:f1:40:4b:01:5b:fe:e4:2c:12:6c:35:1a:9c:
                    31:d5:89:0d:b6:d9:33:83:6e:87:04:97:78:d2:a1:
                    40:93:81:b1:b9:0c:b2:1e:53:ee:4a:1a:a3:03:f9:
                    67:d4:e6:eb:a7:2b:9c:27:97:72:dd:dd:8a:dc:1e:
                    1a:73:f4:ea:28:82:9a:4d:85:3d:03:d6:e5:73:dc:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AB:F2:18:EB:6F:E0:17:5C:34:9B:5D:BA:94:2D:57:C7:CF:AA:6D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:C7:77:AC:36:36:C6:7B:AE:8A:0C:C6:9E:44:63:8E:9A:00:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rvfHd6w2NsZ7rooMxp5EY46aAJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4C9E/EA6F480C01B111ED8D98EB89F1222468/rvfHd6w2NsZ7rooMxp5EY46aAJ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:75:a0:7d:f5:dd:4a:81:d1:b1:2f:81:57:32:1a:86:bf:3b:
         5f:46:cb:65:ec:1c:e4:79:ae:a5:6a:22:e4:9a:3c:a2:b0:7a:
         17:5b:82:2d:d3:9d:f6:b1:0d:69:64:22:0c:a0:bb:be:7c:4d:
         b3:4c:13:34:5e:aa:cd:a0:f8:5b:ee:70:78:d5:7f:e2:ae:ed:
         60:86:73:05:a7:70:99:c4:f7:c8:f7:3c:b3:cd:27:16:0d:15:
         41:34:64:1e:df:84:47:fe:b6:0b:1f:34:32:c0:72:55:c8:9e:
         60:42:8d:bb:18:06:1e:a6:30:41:24:3e:f2:41:04:6a:ed:a3:
         6f:a4:e3:d4:49:a6:bc:ec:31:f3:db:97:5e:c0:a1:bc:72:69:
         a2:1d:39:73:a1:02:56:99:cc:3c:88:2e:42:5a:b9:03:2e:21:
         0b:79:c9:97:a2:0c:25:f0:a1:2a:82:7f:66:0f:8d:9a:55:7f:
         58:fd:d1:3d:db:a3:0a:f8:f0:0c:da:68:26:14:25:33:7d:0f:
         71:e2:ee:4d:e1:42:62:f1:05:da:f6:7d:4a:3f:08:a2:df:51:
         0f:11:a9:68:0b:6f:5b:52:68:ed:39:2e:08:1c:e9:c5:b0:8c:
         08:89:76:6a:27:be:d6:55:fb:e5:fb:25:a0:d1:2d:29:8e:43:
         48:80:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:17:22 2025 by rpki-client