Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
File:                     JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft (raw, json)
Hash identifier:          y6EOpnhR/vf3WUAIzv0ZeAtspfaVNGWhSrqYHkvrgnM=
Subject key identifier:   00:75:60:DD:0D:6D:24:93:57:08:69:A1:D4:7F:70:61:28:D3:C9:59
Authority key identifier: 27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E
Certificate issuer:       /CN=F36AA6EDAF/serialNumber=27031675A295AFE3935D9F62261BD4868D144C4E
Certificate serial:       062D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
Manifest number:          0628
Signing time:             Tue 29 Jul 2025 02:20:16 +0000
Manifest this update:     Tue 29 Jul 2025 02:20:15 +0000
Manifest next update:     Thu 31 Jul 2025 02:20:15 +0000
Files and hashes:         1: JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl (hash: PvNRMqy++2+UuRCwtRKsZAsImAwF33OchOn/k0No07w=)
                          2: 1FFC4050D4D211EB8428B634F8AEA228.roa (hash: YxepH7+hLot/dgNBooYvnog3uH8tz5wlH0qu4u8Qo6E=)
                          3: F9D73EF2D4D111EB99268434F8AEA228.roa (hash: jO+1rjWEWMm+WY3oT+Y1Zmh3wgMMZTJ0o4Zk73LDsKY=)
                          4: A5363C324DF411EFB122684E762E951A.roa (hash: ivvBl4JvviLSTjgv3ZDij0GhU0YfxugCBNbi1Fs5qs4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 31 Jul 2025 00:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA6EDAF, serialNumber=27031675A295AFE3935D9F62261BD4868D144C4E
        Validity
            Not Before: Jul 29 02:20:15 2025 GMT
            Not After : Jul 31 02:20:15 2025 GMT
        Subject: CN=68882fe0-4831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:7a:b5:e3:55:23:9a:7d:de:42:c9:dd:11:
                    a0:b8:ae:a2:69:29:d7:25:04:77:51:24:e1:b9:d7:
                    3c:a2:84:34:cf:df:d5:46:04:4e:41:c8:43:0e:35:
                    07:14:b7:7a:5b:35:39:4c:7d:10:3f:0d:6b:16:47:
                    1e:91:12:29:c7:91:21:d8:30:71:cc:1b:c0:67:36:
                    2e:90:7e:57:82:97:cc:b0:60:11:bf:a1:be:50:27:
                    af:b1:8a:d7:b3:e5:a1:98:10:f3:62:1f:85:83:bf:
                    59:3a:bb:98:a6:c1:dd:43:a2:9f:c4:bc:23:97:13:
                    92:5a:c5:30:5d:b2:33:12:c7:32:31:08:1e:1d:7a:
                    10:95:ee:4e:5e:8f:ed:4a:25:7d:9f:92:a1:e3:0c:
                    83:4f:cd:34:41:34:a8:70:82:ad:4d:0d:ff:c5:42:
                    26:18:c0:a8:98:32:07:21:7a:1d:51:52:9b:5e:1f:
                    c0:f9:f5:88:b6:00:ca:f9:61:64:fd:61:a2:3d:d4:
                    87:18:e5:64:98:1f:11:a9:03:ac:34:ce:d8:28:eb:
                    73:38:2f:ab:24:13:7c:c5:93:a4:78:a0:34:a8:d7:
                    b4:44:a8:2c:4e:66:88:b0:d3:a6:97:7f:f8:d2:00:
                    3f:6a:dc:5e:e0:55:cf:51:11:45:0b:19:34:45:09:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:75:60:DD:0D:6D:24:93:57:08:69:A1:D4:7F:70:61:28:D3:C9:59
            X509v3 Authority Key Identifier:
                keyid:27:03:16:75:A2:95:AF:E3:93:5D:9F:62:26:1B:D4:86:8D:14:4C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JwMWdaKVr-OTXZ9iJhvUho0UTE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA6ED/561896D2C21911EB986A1B73F8AEA228/JwMWdaKVr-OTXZ9iJhvUho0UTE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:c5:09:6f:f5:29:8e:f9:37:48:89:83:d2:74:40:01:42:
         74:db:6e:3f:4d:46:72:34:63:b9:5c:8f:be:a4:92:3d:5d:8e:
         70:4e:3e:77:b8:75:b1:56:c8:6f:62:14:34:9b:6a:b0:ba:a2:
         1e:5f:a8:89:9b:62:53:28:de:9d:2e:db:1a:8d:60:ed:50:5c:
         1b:2a:16:d7:5f:12:ad:8f:42:55:17:33:0b:9e:5b:38:9e:9c:
         31:04:78:b8:8e:dd:43:0a:c6:f2:ff:97:40:80:a9:bd:b7:06:
         8f:71:67:c8:57:03:e9:a7:c3:26:5e:46:c2:ee:0d:a6:2a:d5:
         7b:81:af:a7:af:1a:54:ea:26:21:f7:43:5f:96:70:20:7c:d1:
         e4:ed:a8:60:7e:c1:b9:12:a3:0b:23:f4:2d:17:75:4d:e1:dd:
         c0:07:6e:30:77:31:97:2a:e5:dd:f7:95:42:10:28:d0:ba:ca:
         75:70:8d:38:47:9f:f4:d0:b5:08:b7:9b:28:c4:f2:19:39:e1:
         b8:a5:39:ba:4d:c2:13:ed:02:2a:cc:46:64:44:67:4e:9c:e1:
         89:da:21:e8:65:0f:95:f0:87:6b:1c:e2:59:35:cd:1a:0f:47:
         f2:20:38:87:1b:50:2e:9f:1b:ae:0c:48:78:08:8c:c6:a6:21:
         ef:db:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:28:11 2025 by rpki-client