Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
File:                     pyKwoONloK3D2e6zzL_MBi2Q76k.mft (raw, json)
Hash identifier:          MJqWN3AGqUwo4MmrYip4qtpW51GUUWxT/cayQoyY2uc=
Subject key identifier:   8A:AD:7B:9B:02:02:6A:15:82:C6:0B:46:B8:7B:D2:34:93:20:A6:CE
Authority key identifier: A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9
Certificate issuer:       /CN=F363BEDERI/serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
Certificate serial:       0154
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
Manifest number:          0153
Signing time:             Mon 11 Aug 2025 05:04:11 +0000
Manifest this update:     Mon 11 Aug 2025 05:04:10 +0000
Manifest next update:     Wed 13 Aug 2025 05:04:10 +0000
Files and hashes:         1: pyKwoONloK3D2e6zzL_MBi2Q76k.crl (hash: LYD59iVOEqT8jLk7K20wN6D8p+xG/WPL4kjCKYFRWvE=)
                          2: 94C2BDF04C7F11F0BE0543DADAE4EC9C.roa (hash: 3YaFLxVNUkbWE76XdYz35Qs+t/X1QWUU2Sxhtna54Xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
                          rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 05:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BEDERI, serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
        Validity
            Not Before: Aug 11 05:04:10 2025 GMT
            Not After : Aug 13 05:04:10 2025 GMT
        Subject: CN=689979cb-e296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:3e:82:01:6d:0e:71:5a:d2:89:3c:9a:21:
                    c8:aa:aa:cc:ab:94:27:67:db:fb:66:b3:08:61:ba:
                    36:70:16:fc:91:0b:92:5a:c9:8a:3c:df:f8:cb:22:
                    32:03:2e:ce:07:6c:e1:8b:cb:9b:ef:71:f7:a4:da:
                    cb:f5:4f:ac:54:03:5b:5a:6c:e2:b8:41:5c:95:71:
                    a2:ac:00:13:b4:e4:46:00:e7:f2:a8:62:0d:cd:2e:
                    ca:74:23:e8:2c:3f:4d:71:38:31:ad:fc:53:4b:68:
                    10:dc:fc:9a:06:ce:04:86:ca:10:6c:c2:78:bd:bf:
                    bd:06:b6:8b:67:61:3c:31:ed:3e:9a:78:02:fa:ed:
                    57:28:be:6d:9e:ff:cc:70:1b:1c:b8:33:a6:0b:8e:
                    5f:2e:92:73:5f:e2:cc:b9:a0:14:73:09:8e:77:09:
                    c2:ba:63:77:36:c6:eb:8f:48:b7:02:95:54:48:4b:
                    0d:35:3b:c2:0d:f5:af:e5:df:e9:3c:f7:91:d6:5c:
                    04:a4:d1:f2:80:d3:31:bf:32:21:1e:58:32:62:f6:
                    f0:fe:97:a4:84:2d:d8:f7:08:13:74:55:7f:e5:f5:
                    9a:ea:77:a5:8c:0c:6c:ad:c7:af:ce:a9:60:da:71:
                    77:62:28:0c:e8:70:05:71:95:f3:c0:55:b3:11:a8:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AD:7B:9B:02:02:6A:15:82:C6:0B:46:B8:7B:D2:34:93:20:A6:CE
            X509v3 Authority Key Identifier:
                keyid:A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:75:9b:11:fb:79:50:81:f5:64:dd:99:1f:97:dd:58:68:da:
         aa:ca:b3:4d:be:e0:c6:f0:36:ae:bf:70:ce:2a:fc:25:29:b8:
         c4:bd:32:5f:ab:80:79:2b:32:07:ac:4b:33:92:62:71:bc:40:
         a7:6d:c8:03:34:96:df:db:b9:65:59:64:fe:ce:64:5f:e3:33:
         c9:2b:5f:19:13:7b:df:58:5a:8c:13:e5:04:9d:a1:cc:f6:3d:
         e1:47:2a:0a:52:fc:f3:14:36:d4:6f:7a:4d:33:ca:89:8c:2c:
         8f:59:28:63:c3:1c:8e:b1:7d:d8:73:66:cb:42:66:07:33:79:
         f7:55:9a:91:ab:a1:79:93:e8:f5:bc:a8:14:1a:9a:dc:73:78:
         fb:07:3d:4d:49:50:65:57:24:14:e7:26:cd:1f:da:1b:b1:7e:
         6c:d4:e1:bb:5a:be:d2:4f:fb:2a:b3:39:6d:64:2b:63:38:b9:
         13:3e:78:6a:2e:48:2e:37:fa:7f:47:10:b1:12:47:c3:fb:ec:
         0e:f8:c5:47:bb:41:1d:d7:8d:79:f1:a5:c0:15:6f:8c:86:06:
         0f:bb:7e:1b:28:07:08:78:c9:be:d9:12:74:cb:10:d7:66:b4:
         75:2a:0a:72:8e:c3:ae:67:4f:56:74:fb:d1:31:78:76:d1:36:
         44:e0:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 04:11:26 2025 by rpki-client