Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          xnam4gFEnpcGWTeYSdEtE8MOerfgA92g1Re/tlrqCZc=
Subject key identifier:   51:F9:17:0D:C0:BE:62:B8:AB:5E:E3:F0:35:47:DD:BB:FC:AC:DF:0F
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       0669
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          0666
Signing time:             Fri 08 Aug 2025 02:12:43 +0000
Manifest this update:     Fri 08 Aug 2025 02:12:42 +0000
Manifest next update:     Sun 10 Aug 2025 02:12:42 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: oJOgaTZ8pi5P6aXywWpQlkoTWspovDmr8T3RKDnh16c=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 02:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641 (0x669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Aug  8 02:12:42 2025 GMT
            Not After : Aug 10 02:12:42 2025 GMT
        Subject: CN=68955d1b-a693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:70:ea:17:43:f8:fc:98:bb:ac:6a:57:e1:
                    a6:63:bd:ce:7a:67:ea:7d:ee:68:02:a4:6f:bc:79:
                    2e:41:86:8b:87:25:05:82:8e:52:aa:9b:b3:3d:fd:
                    b6:82:dd:97:7a:fb:99:cf:83:76:4a:e8:a8:2b:f2:
                    a7:e4:4f:01:f4:31:a9:03:64:6e:54:9b:a8:1e:0e:
                    d3:b0:4f:49:3a:56:57:16:38:3f:4a:17:51:71:83:
                    83:9d:4d:80:ba:67:8a:ca:04:94:20:99:16:da:41:
                    08:d0:7c:fc:9a:1a:85:a8:f4:bf:4d:46:f6:b2:76:
                    4b:3b:3f:fc:3d:b0:4d:68:c2:d7:20:59:bf:29:0a:
                    83:7f:6e:99:3c:86:b9:23:b2:4d:da:1b:68:ee:01:
                    4b:c9:62:3d:7e:61:4f:f8:8a:cf:4f:3a:63:2f:76:
                    18:dc:ab:f4:de:64:97:dc:1a:5f:26:da:91:f0:ab:
                    c7:51:81:00:22:3d:a6:f9:9f:a8:14:9e:a7:90:14:
                    32:1d:cb:d8:95:95:51:6d:a0:b6:2f:78:62:eb:03:
                    5d:2b:27:7a:62:76:3e:cf:b6:4e:91:fd:bb:ea:08:
                    e2:c6:df:32:a8:36:48:b3:e0:b8:f0:01:38:46:a2:
                    6f:27:f4:8d:a1:57:d8:16:95:a6:54:51:39:c0:01:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F9:17:0D:C0:BE:62:B8:AB:5E:E3:F0:35:47:DD:BB:FC:AC:DF:0F
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:25:54:c9:d0:96:53:3d:6e:2f:25:36:5c:fe:14:61:1c:ba:
         2c:81:1a:e7:4d:4d:e3:7f:cb:be:48:82:91:c6:59:7b:00:55:
         a0:c2:d0:d7:52:f5:98:08:cc:d2:e5:4a:9b:4c:07:d9:48:13:
         c1:c0:e5:53:43:e0:b9:7f:91:12:2c:34:96:fd:84:5d:c4:e0:
         97:8a:cf:dc:7d:88:9b:cc:90:f3:eb:69:37:fa:0e:56:75:47:
         a8:2b:4c:0e:0f:6b:5a:c7:a4:0c:49:9c:9e:b0:52:cc:6a:39:
         7a:6d:29:2a:93:6c:58:09:cc:a8:ac:52:61:e2:ad:8b:2f:5f:
         e3:02:93:cf:ad:78:cc:de:b5:73:34:85:c0:d7:89:fe:f1:35:
         a3:df:71:7a:ae:1b:22:54:80:55:20:37:6f:24:c1:c2:f9:4b:
         0a:76:1e:ae:88:84:3b:50:70:ce:d6:b4:cd:8d:4f:47:d4:70:
         93:45:fe:c4:16:90:4d:c0:f6:09:49:b6:25:49:f6:63:e0:c8:
         03:47:f9:d5:03:3b:eb:e3:b3:1a:e1:23:3c:b2:21:10:49:bc:
         d1:ce:85:6f:09:ae:76:27:c4:18:ff:e8:06:4b:31:84:db:39:
         0c:84:83:ea:fa:d2:3e:44:80:68:65:4e:85:5e:db:53:3b:13:
         53:c8:76:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:28:00 2025 by rpki-client