Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          2rJKeAeL3v+QEm6HV7sI4FD7BShSKW+q5pO8TzHJHfo=
Subject key identifier:   81:0B:40:6D:49:F8:E7:6D:CC:94:20:72:72:64:BE:49:DA:76:62:F2
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       0316
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          0312
Signing time:             Wed 04 Jun 2025 03:41:53 +0000
Manifest this update:     Wed 04 Jun 2025 03:41:53 +0000
Manifest next update:     Fri 06 Jun 2025 03:41:52 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: LVGUBhUc9hzIgc2B9zdJWfzS5DsUshhvmsp502vUeIQ=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: Jun  4 03:41:53 2025 GMT
            Not After : Jun  6 03:41:52 2025 GMT
        Subject: CN=683fc081-f30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:ca:54:0f:66:9c:ce:fb:7f:15:fb:cc:51:
                    b5:12:be:05:02:a5:8f:5f:17:8b:af:e3:6d:39:f6:
                    e8:ff:78:c9:f8:65:8f:da:68:be:11:40:ee:38:a0:
                    69:71:1f:90:f8:bb:21:57:14:04:9f:de:0c:b3:77:
                    37:11:b5:0a:76:59:d0:8b:75:6e:2f:4e:8c:94:6f:
                    63:d7:b1:78:31:3d:09:16:21:69:4f:4b:ee:42:6f:
                    78:58:f5:69:e7:f2:ce:18:bb:6e:bb:d1:19:a6:e3:
                    7a:15:50:42:dc:fc:66:00:6e:f7:9f:41:af:df:95:
                    73:51:ca:d6:64:d9:b3:c2:17:a5:da:89:e5:e9:36:
                    5e:7d:bb:0e:6f:91:7a:c8:84:20:a3:6b:6f:d8:10:
                    88:f7:32:50:cb:13:7f:7b:6b:b0:cf:d9:1c:47:bf:
                    4e:72:09:8f:75:20:37:f6:44:d1:10:ed:80:01:b3:
                    b8:1b:3c:5c:66:b3:87:0c:c3:7c:85:d3:3c:f6:7f:
                    39:4c:ae:fa:db:0c:76:17:58:0b:b1:15:ab:fa:b4:
                    a9:db:d8:06:7b:fc:a6:47:b2:12:af:13:10:7b:e4:
                    43:d1:d7:39:1e:37:c9:2f:78:66:2b:3e:fe:64:81:
                    a4:f2:12:0f:fd:50:df:ae:e4:f1:70:76:fb:74:49:
                    b9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0B:40:6D:49:F8:E7:6D:CC:94:20:72:72:64:BE:49:DA:76:62:F2
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:25:b6:e0:45:33:48:a2:59:91:97:7b:2f:9d:78:90:e5:a6:
         e4:5e:66:c7:dd:c4:5a:cf:48:62:d2:d3:24:99:e4:69:b8:13:
         1d:b6:49:af:12:fe:65:b5:e1:cd:6b:ef:66:f3:90:83:44:50:
         54:47:a5:72:2c:ee:4d:ed:2d:5e:72:c8:cf:7c:88:34:16:47:
         f5:cc:66:6d:e1:7c:2f:08:b4:ff:a4:d1:a3:cb:41:19:25:ad:
         7a:79:38:19:96:54:ac:43:b1:12:36:27:6a:03:6b:fe:90:e8:
         9f:df:00:13:d4:9c:9d:1c:4e:2b:98:6f:8e:8b:ca:d7:5d:22:
         66:cc:c8:42:88:7b:59:74:14:de:f8:36:4a:5e:ff:a8:37:a1:
         fb:ce:c6:2f:f1:63:6f:81:23:5a:82:19:37:52:29:72:cd:8f:
         b4:5f:bb:4e:8f:04:7f:f1:2f:bf:38:3b:ac:27:65:30:14:61:
         96:b5:2f:d1:98:91:5c:95:a8:0a:24:2e:ce:26:cd:f8:38:5a:
         a7:04:42:79:d7:78:3a:f8:8e:c1:97:55:8b:77:88:18:0e:da:
         78:1f:71:04:51:49:a5:6a:81:ce:11:9d:91:b5:17:69:f0:06:
         80:ac:fd:e2:3a:a8:d1:b7:6f:ae:ad:44:4b:9c:0f:b3:4a:1d:
         c8:79:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:03:34 2025 by rpki-client