Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
File:                     vD3h6YQAgLg8ZSeM3qheopiClIE.mft (raw, json)
Hash identifier:          XsWOr8dfqoJB5aqioYbzOukTHXO6/nS4Qz2rKJT9jJY=
Subject key identifier:   59:0B:4C:FB:6C:D0:DC:59:0C:9B:10:2B:E7:0F:00:D6:FA:2C:6D:C9
Authority key identifier: BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
Certificate issuer:       /CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Certificate serial:       02A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
Manifest number:          02A2
Signing time:             Thu 31 Jul 2025 04:12:18 +0000
Manifest this update:     Thu 31 Jul 2025 04:12:17 +0000
Manifest next update:     Sat 02 Aug 2025 04:12:17 +0000
Files and hashes:         1: vD3h6YQAgLg8ZSeM3qheopiClIE.crl (hash: 6mqcaF8xBSa2NMyF+rBgQFau88hNWFwB5uCT95TIcC4=)
                          2: B8CAC7A2985B11EFB8B2954E762E951A.roa (hash: 0SM5T8NNVkyg9HDp47V5o7gPmb06fjxNsfa8bT7ZCeg=)
                          3: 878D493881A211EE930A1D244AD9E6FC.roa (hash: zLISAvhBvxTn3b4oaLe3yfM1aFnsxwTljhKhQX5W/BU=)
                          4: BC17C6B4985911EFB44BE2BE762E951A.roa (hash: Bo/5IgYc6mUDXUlEMJ0TGF8yZL8JGbJAqfj9nRlvJTE=)
                          5: 2710C32E985C11EF9F3C7A50762E951A.roa (hash: bmsEiP38JU+Ehb3iR+wE1cNU6seqsv/LKiiqBY7usJI=)
                          6: 02E6D31E985A11EF9E664242762E951A.roa (hash: kGG1RiMSP23E2TSxLvJ3oRzrbpa7GUjmAWIe62Zi+WQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCA07AF, serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
        Validity
            Not Before: Jul 31 04:12:17 2025 GMT
            Not After : Aug  2 04:12:17 2025 GMT
        Subject: CN=688aed22-1555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:57:f9:cb:ab:02:ac:ec:eb:a3:31:28:2a:
                    5f:69:1a:04:07:e7:49:69:ef:08:a1:7c:50:9d:4a:
                    0f:74:f0:95:37:03:cc:b3:17:cc:ed:d0:fe:47:8d:
                    d3:85:51:e6:47:a9:f5:1b:de:4b:32:0a:72:16:5a:
                    fa:73:a7:51:ed:3a:45:82:17:c6:a0:d6:f0:be:5a:
                    b9:fb:29:05:f8:5c:c2:36:c3:d3:03:86:7a:eb:91:
                    b8:38:f2:71:46:aa:6c:38:7a:84:14:06:46:af:34:
                    16:4f:68:65:ca:8d:15:57:6c:2c:83:3c:c5:32:46:
                    2d:2f:50:00:dd:3c:8f:fa:c6:ad:32:44:17:43:43:
                    36:74:e2:2e:72:d9:4c:90:b5:a7:af:96:5c:60:24:
                    77:4f:e9:5a:e9:5a:8f:f6:18:61:5e:7a:dc:0f:58:
                    00:71:97:c6:33:b1:14:8c:8e:cf:e5:74:15:10:d1:
                    de:e9:4b:14:d7:16:df:e3:cb:81:79:ae:67:f4:54:
                    3c:27:7a:3b:d3:6b:6b:1e:72:08:8c:ce:73:c0:00:
                    c5:91:bb:0f:33:72:f4:c2:7e:17:bc:a2:71:bf:33:
                    8c:4c:04:cc:88:b4:cc:f1:0a:b8:65:78:91:1d:0b:
                    58:5b:2b:e3:50:a7:19:93:ef:dc:16:13:5a:8f:c1:
                    84:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0B:4C:FB:6C:D0:DC:59:0C:9B:10:2B:E7:0F:00:D6:FA:2C:6D:C9
            X509v3 Authority Key Identifier:
                keyid:BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b8:d0:e2:2a:62:45:5f:b6:9c:78:cd:f2:25:5a:cc:be:5e:
         9e:22:fd:4d:21:b0:22:97:23:35:37:98:f5:ed:d9:32:4e:52:
         ac:e9:39:2f:81:f9:95:66:c7:f9:a9:a3:78:3d:af:88:63:a9:
         e0:3b:78:4a:bf:71:1c:e7:dc:d0:0b:72:bd:18:34:99:0a:3e:
         a8:bb:45:cb:17:3a:cf:86:96:cf:93:ba:1a:4e:54:2f:51:72:
         77:06:82:6e:17:ce:bb:96:bc:f6:e2:70:2e:86:fd:f7:59:82:
         cc:63:dc:56:80:ee:0c:a8:03:2a:31:02:63:c7:96:bf:37:ca:
         93:ef:45:59:23:fe:5a:bd:87:b1:db:a8:f2:67:5a:b8:48:86:
         06:0b:a9:9b:34:b6:5e:7c:9b:84:02:51:20:27:a4:a3:08:72:
         c8:a7:f8:cc:48:75:95:26:ec:a7:0d:e7:40:d2:76:ca:d9:4c:
         ea:48:f7:12:13:b4:f2:35:ab:8a:ed:bd:63:f4:0a:a9:70:82:
         a3:cb:81:80:78:34:e1:0a:4d:e8:03:0a:c0:c6:d8:90:16:6a:
         66:fd:74:e2:9e:7f:17:77:5e:62:bb:19:2f:2c:12:a4:50:ef:
         74:40:2a:d3:1d:f5:ee:1e:c4:93:fd:6f:6f:e7:b8:23:e4:4c:
         87:b7:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:20:06 2025 by rpki-client