Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File:                     KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier:          2t+4znSwFsJv3rDP3WN5M6QM8fUWqg6rNW40icmADDU=
Subject key identifier:   30:C1:BC:97:AD:80:17:82:C1:6F:5A:52:A6:26:51:43:36:D9:81:D4
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer:       /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial:       04C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number:          04BC
Signing time:             Thu 31 Jul 2025 03:01:00 +0000
Manifest this update:     Thu 31 Jul 2025 03:00:59 +0000
Manifest next update:     Sat 02 Aug 2025 03:00:59 +0000
Files and hashes:         1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: U+eoQxrY8tzd2/xmxZ8Qb27KlMhn+0O2KLdDfPVUzag=)
                          2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
                          3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
                          4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
                          5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
                          6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
        Validity
            Not Before: Jul 31 03:00:59 2025 GMT
            Not After : Aug  2 03:00:59 2025 GMT
        Subject: CN=688adc6c-3356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:57:b2:ec:4c:7c:37:d8:bb:10:68:16:ad:
                    0c:44:72:10:73:ff:ab:a4:e0:e2:2f:ca:a4:24:8b:
                    d3:83:a8:e5:58:bc:6e:7e:8d:81:c8:71:e2:10:20:
                    68:5e:41:66:2a:db:96:0a:5e:5b:c8:92:02:89:f5:
                    4f:65:42:4a:bc:27:32:6e:c2:0e:e7:d2:20:41:7d:
                    c3:79:aa:9b:32:0d:4d:ef:eb:c3:da:65:5b:1e:04:
                    12:83:db:49:a7:4b:da:fa:ac:2e:61:49:5c:54:b7:
                    8b:cc:2e:46:a4:b6:7d:55:60:2d:42:f8:7a:86:34:
                    a8:db:6a:c3:ec:48:52:01:a6:b3:49:06:bd:6e:1d:
                    48:8b:1e:c3:7b:fa:ae:7e:c1:7b:37:7a:fd:5c:00:
                    49:86:dc:b5:bc:dc:cf:87:dc:89:bd:a1:45:d5:10:
                    74:b2:86:c5:0d:9b:69:2e:8b:e8:34:6d:4b:23:ec:
                    9a:50:f4:b3:bb:f3:c0:a8:50:4c:52:35:14:42:14:
                    2c:99:a5:ce:ba:9c:2e:c7:07:dc:b6:f8:98:a0:43:
                    f6:49:5d:4b:32:e4:f9:f5:55:3f:c1:b9:d7:a5:96:
                    73:79:0e:86:b2:bf:82:99:a2:16:51:f2:a5:7e:5d:
                    cc:57:39:33:6a:06:0d:ac:d7:d1:63:51:68:52:8f:
                    f3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C1:BC:97:AD:80:17:82:C1:6F:5A:52:A6:26:51:43:36:D9:81:D4
            X509v3 Authority Key Identifier:
                keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:6c:04:39:a7:d5:63:67:37:2b:d1:ae:f2:96:a2:77:b4:dc:
         5f:6e:fd:a4:ae:70:41:e1:8c:93:3e:fb:10:d8:85:4f:65:7e:
         56:17:ca:69:65:1b:c6:63:6f:ea:c2:ae:2d:d4:29:d3:c8:2c:
         f0:52:2f:06:a5:a2:d3:81:0f:9f:be:ae:a4:e4:b6:7d:01:2b:
         af:c9:c2:02:d9:ea:57:5d:af:ea:0d:14:25:28:a7:c2:7e:47:
         91:02:16:31:7f:a9:97:e4:45:b1:fe:3b:0f:6c:ab:ae:43:ad:
         28:ac:da:63:ab:b3:9a:4a:e5:36:ba:31:7b:35:a4:29:e6:d2:
         7e:b4:ac:84:14:55:a7:3e:4a:62:28:eb:59:54:db:1e:9e:23:
         55:fa:88:70:42:7b:44:af:c7:f1:36:88:09:93:94:98:0a:4a:
         27:ed:1e:c5:26:2d:b8:d2:9a:97:0e:d9:98:01:ae:d2:83:ee:
         32:8d:b0:8c:5b:21:30:4c:b5:e8:7f:c6:4d:82:d0:3c:21:1e:
         31:c9:8b:4d:8a:ef:87:68:05:68:db:07:78:31:50:5a:58:8a:
         fe:8e:79:45:92:58:4b:57:99:30:42:fd:03:55:fa:9e:8c:56:
         cf:2b:e3:d7:fd:8a:53:b3:3e:43:4d:2f:5d:a2:e5:fa:8d:60:
         b7:25:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:18:17 2025 by rpki-client