Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.mft
File:                     FoOpIVfO4CWeNogNq-AWtt216c4.mft (raw, json)
Hash identifier:          JSVzPT6X3avMjLGln4y8TnBstiSZ2DUdAsxiQ+rQfTE=
Subject key identifier:   99:8B:AD:F6:4A:B5:4C:6C:37:B7:27:F8:A3:EE:18:4E:D2:24:F0:D4
Authority key identifier: 16:83:A9:21:57:CE:E0:25:9E:36:88:0D:AB:E0:16:B6:DD:B5:E9:CE
Certificate issuer:       /CN=F361452CAF/serialNumber=1683A92157CEE0259E36880DABE016B6DDB5E9CE
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FoOpIVfO4CWeNogNq-AWtt216c4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.mft
Manifest number:          27
Signing time:             Sat 09 Aug 2025 05:37:23 +0000
Manifest this update:     Sat 09 Aug 2025 05:37:22 +0000
Manifest next update:     Mon 11 Aug 2025 05:37:22 +0000
Files and hashes:         1: FoOpIVfO4CWeNogNq-AWtt216c4.crl (hash: vY36PQ0OkeEmoPS1EazoApblFXgVU3CmsyNHcST9aY8=)
                          2: 013BE36857F111F0A64336CDDAE4EC9C.roa (hash: HJ3Xli5fQd3z30iTvANZSqI66ie7lcQ+mUYXKi9CwdA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FoOpIVfO4CWeNogNq-AWtt216c4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361452CAF, serialNumber=1683A92157CEE0259E36880DABE016B6DDB5E9CE
        Validity
            Not Before: Aug  9 05:37:22 2025 GMT
            Not After : Aug 11 05:37:22 2025 GMT
        Subject: CN=6896de93-403a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ea:c8:81:f6:0a:af:05:74:86:6b:8e:95:42:
                    2c:aa:8a:10:06:ef:21:1d:54:57:de:14:cc:88:ab:
                    3a:d2:a1:29:f3:f2:53:fa:0e:92:b3:4b:f5:39:35:
                    29:3f:b3:a2:65:ed:d6:90:fa:9f:74:29:4a:86:bf:
                    f9:73:39:c2:22:66:da:53:17:53:f0:c9:4a:0e:15:
                    fc:f6:c3:2a:16:d2:8b:4a:8a:c5:f4:f1:3d:7d:13:
                    b8:5c:00:f2:11:86:24:d8:74:2b:4d:0a:12:6a:e9:
                    82:76:ac:fc:66:46:5c:55:4a:bb:37:0f:fd:47:f0:
                    ff:1c:c1:18:a3:87:5b:f2:fd:81:4d:88:16:8c:82:
                    5f:57:3e:b5:ce:bf:73:18:bc:6f:92:29:db:5b:2f:
                    e3:53:bc:93:51:39:83:09:53:ba:0c:4f:5e:05:9f:
                    e4:c5:ae:af:43:32:ec:07:54:3a:35:b7:f5:61:c2:
                    b0:ee:20:c3:ac:9e:5d:8b:ec:11:30:26:89:16:0c:
                    f6:d7:1f:b9:79:04:cb:b1:84:1d:07:50:1c:f9:b5:
                    4d:58:02:73:9b:58:8c:8d:d0:aa:ce:07:a1:dc:be:
                    c8:c8:eb:40:eb:65:ce:14:8b:fe:7f:bf:ec:48:a9:
                    c9:03:db:d0:2d:17:52:5e:eb:bd:2b:3c:4c:c8:2e:
                    71:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8B:AD:F6:4A:B5:4C:6C:37:B7:27:F8:A3:EE:18:4E:D2:24:F0:D4
            X509v3 Authority Key Identifier:
                keyid:16:83:A9:21:57:CE:E0:25:9E:36:88:0D:AB:E0:16:B6:DD:B5:E9:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FoOpIVfO4CWeNogNq-AWtt216c4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361452C/15F0402057F011F0AF4575C8DAE4EC9C/FoOpIVfO4CWeNogNq-AWtt216c4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:37:26:1c:05:4a:81:42:bb:b8:d5:2a:55:b5:c4:0f:df:3c:
         72:8a:4b:3e:82:9e:b9:5a:41:61:38:92:cd:99:3f:6a:aa:6f:
         aa:79:78:e4:98:19:c9:80:8c:fa:70:82:f1:4c:23:0d:3d:29:
         c9:db:b7:d2:91:8a:41:73:aa:63:60:db:3f:97:b3:77:5a:41:
         e0:94:7c:b6:b9:a7:23:65:fd:19:9c:09:99:0e:37:d3:a4:2a:
         c5:2d:13:0a:ac:a5:e2:cb:23:f4:81:7d:0e:e0:b6:b3:9e:7d:
         94:82:80:98:75:17:74:a0:22:7a:f1:9c:14:75:ac:54:4b:4b:
         15:50:b3:90:4d:7a:a8:28:b9:35:6d:43:0d:14:23:3d:f3:6c:
         0b:39:d6:e2:b0:ab:1d:07:28:b3:8a:18:a5:1a:e8:2a:d1:1b:
         5c:2d:96:aa:09:19:7e:e9:57:c8:78:0f:31:c1:f2:f3:7e:2d:
         5d:b4:7f:05:30:1b:da:91:96:2b:3a:af:b3:ae:79:17:60:9d:
         d0:89:c4:93:9d:99:d5:72:3f:0f:f4:ba:2b:00:b0:64:c8:d3:
         4f:af:93:39:8e:62:a0:ae:3e:41:2e:ea:b4:c2:c3:c0:74:4d:
         e0:9e:c3:b5:a2:33:25:ac:99:37:91:9f:ec:85:05:49:e6:18:
         5d:77:5b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:42 2025 by rpki-client