Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
File:                     4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft (raw, json)
Hash identifier:          /4hATW+0t9NVtSjwRR7+KAckbbGuj1ZF0fGuNrRTccI=
Subject key identifier:   C1:FB:D8:F7:D6:8D:EF:A4:70:B2:54:E6:BF:77:6C:CA:23:6F:8D:03
Authority key identifier: E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66
Certificate issuer:       /CN=F3639454AF/serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
Certificate serial:       0496
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
Manifest number:          0494
Signing time:             Sun 10 Aug 2025 03:07:27 +0000
Manifest this update:     Sun 10 Aug 2025 03:07:26 +0000
Manifest next update:     Tue 12 Aug 2025 03:07:26 +0000
Files and hashes:         1: 4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl (hash: jHlTMs1tVre/Gr5I8WPh7vhj+s3yb9glIlZLR2akTYw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639454AF, serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
        Validity
            Not Before: Aug 10 03:07:26 2025 GMT
            Not After : Aug 12 03:07:26 2025 GMT
        Subject: CN=68980cef-4bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:6e:0b:c7:3e:09:00:ec:80:c5:75:65:7c:
                    04:04:79:3a:bf:30:e7:6a:83:55:61:fb:bd:cf:78:
                    a3:78:8a:57:42:0d:0c:f0:af:57:35:6a:3f:19:53:
                    bc:77:e5:ef:28:b4:3f:e4:17:ca:01:b7:ed:04:2c:
                    da:d6:15:8e:b5:35:94:f2:4b:cc:5e:47:44:87:82:
                    e3:34:89:7c:c4:29:b7:f7:f8:eb:ae:d4:3e:91:53:
                    80:f2:77:05:2c:6b:02:1e:12:2d:7d:95:3e:17:7c:
                    9a:ae:1d:02:24:64:bd:9b:85:89:7d:ee:37:50:3b:
                    ea:1b:bd:b6:e0:b8:c6:e9:f3:46:07:09:8b:69:51:
                    62:9b:40:ea:32:88:ef:04:9a:56:e1:37:29:ea:2b:
                    f9:c0:68:3f:30:65:20:74:c4:72:92:ee:05:37:b6:
                    ef:d1:d5:50:b3:88:3b:21:62:d9:40:53:f3:33:36:
                    79:70:1e:2b:27:e0:a1:df:5f:e3:cc:10:6b:30:c6:
                    51:ac:6b:d5:75:3d:ab:49:fb:93:c4:0c:f4:1d:02:
                    36:74:f4:e4:ee:0a:2c:c7:16:51:f3:93:56:bd:cb:
                    ee:f6:f9:d8:f4:d6:4b:71:d3:54:ce:a2:76:1f:1a:
                    cf:71:72:82:97:77:cd:3e:22:5a:2d:c3:00:95:87:
                    f7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FB:D8:F7:D6:8D:EF:A4:70:B2:54:E6:BF:77:6C:CA:23:6F:8D:03
            X509v3 Authority Key Identifier:
                keyid:E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:14:5b:33:b7:48:6b:dc:a4:c3:82:66:16:47:6e:10:b4:d6:
         44:dc:c4:e4:ce:93:c3:90:4d:90:4a:79:f4:81:72:28:82:1a:
         f7:08:76:29:31:e0:cd:44:f3:5e:95:9b:b1:40:81:07:da:66:
         a5:18:90:c7:6f:25:c8:39:89:bb:72:c9:09:37:c3:28:a4:4c:
         4c:b7:ec:8b:2b:c0:1e:2f:7d:1d:f1:21:f8:7d:24:8f:cc:8a:
         57:d6:97:b4:ae:93:02:5f:51:84:c9:15:f6:81:a3:3c:88:d6:
         dd:75:57:49:4d:dd:dc:53:26:ee:09:38:ad:5a:32:f6:3b:97:
         07:6c:f5:fc:70:8a:55:76:4a:5d:1b:1a:ab:57:c0:7e:f5:b6:
         dc:de:99:bb:38:e5:fc:18:6b:e0:fa:19:f6:a8:12:16:13:e8:
         26:cd:86:9e:f6:8d:fa:1c:90:28:f6:d0:82:4b:f6:93:ec:a5:
         9d:3a:79:e3:6e:8f:49:be:7b:b9:cf:fd:fe:f7:f8:d1:cc:2d:
         80:4c:25:95:7f:f6:09:44:dc:4d:d3:56:80:e4:78:3c:6e:6a:
         71:b3:54:7b:92:7b:78:6c:65:96:dd:79:37:09:ce:b6:22:47:
         49:e7:37:f5:cc:03:df:a2:6a:0b:75:3e:c4:9c:a6:e7:fa:20:
         94:80:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:52 2025 by rpki-client