Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
File:                     j1A71XPOETUXzWtM-jdKYvFeEsE.mft (raw, json)
Hash identifier:          qLR8eRiY3I86DC3puDYeddArP7IhC7rJNqQLqMH8wZI=
Subject key identifier:   0D:EE:46:B2:75:D7:44:73:82:AA:FE:75:4B:68:58:35:CD:F3:94:A3
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Certificate issuer:       /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial:       0650
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
Manifest number:          064B
Signing time:             Tue 12 Aug 2025 02:15:51 +0000
Manifest this update:     Tue 12 Aug 2025 02:15:50 +0000
Manifest next update:     Thu 14 Aug 2025 02:15:50 +0000
Files and hashes:         1: j1A71XPOETUXzWtM-jdKYvFeEsE.crl (hash: zQAa7Q9DUJUCOIxA/ebnRks1SdeGiNqpf/oSXITRpI0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 Aug 2025 02:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE44AF, serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
        Validity
            Not Before: Aug 12 02:15:50 2025 GMT
            Not After : Aug 14 02:15:50 2025 GMT
        Subject: CN=689aa3d7-325c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:03:f4:8a:7c:af:58:4a:02:24:f9:0a:ed:
                    56:71:b4:65:66:e8:68:e1:36:32:8c:49:fa:cd:25:
                    36:d7:2c:fd:27:ee:06:74:57:79:36:e3:35:9c:f2:
                    95:20:c9:4a:c0:37:09:40:9d:62:a7:74:f2:40:06:
                    8f:b0:4a:27:9e:df:a0:7a:28:97:e2:31:9c:a2:ce:
                    ca:cc:ed:06:e1:ef:cd:9d:d0:27:cc:65:26:b2:4d:
                    e1:2e:a7:51:fe:c4:a9:11:e6:eb:59:7b:78:31:82:
                    be:fd:d1:d5:07:34:98:43:9b:89:9f:1d:44:4d:c2:
                    32:92:47:a5:ed:fe:e7:72:9e:6a:df:3f:62:cf:b9:
                    6e:4b:c0:9c:f6:94:02:b5:f8:ce:9a:2c:a0:7e:c6:
                    64:f1:00:81:c1:df:5a:c6:01:c3:35:35:cb:e3:7a:
                    34:00:7a:14:0b:37:a0:4f:4e:ae:d5:35:32:ab:bf:
                    77:49:01:f5:29:39:b8:bd:17:e1:22:4e:ea:78:30:
                    f1:b4:44:98:ff:51:12:00:24:30:ef:71:15:88:81:
                    05:6b:cc:40:62:2b:a7:66:af:43:f0:a1:e1:f7:3a:
                    d3:90:14:f2:b6:29:40:f1:38:77:0c:35:80:52:c5:
                    f8:7c:3c:93:52:e0:48:f3:5f:14:10:fb:b9:6a:8a:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EE:46:B2:75:D7:44:73:82:AA:FE:75:4B:68:58:35:CD:F3:94:A3
            X509v3 Authority Key Identifier:
                keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:16:72:ed:2b:bb:8f:ba:3d:69:f2:33:41:e7:4d:08:bb:2b:
         3f:93:b8:b7:c3:ec:33:ac:00:5b:27:3d:f9:6b:b8:82:1a:8b:
         fe:40:4a:89:09:3f:4c:37:50:b4:e9:1c:91:2d:59:1b:5d:cc:
         92:0f:21:54:4e:48:b7:48:15:f8:b8:60:b2:9a:3b:83:77:f1:
         1d:20:8e:64:b3:22:06:8b:26:10:b5:b5:ba:ff:78:11:31:43:
         00:bb:bd:6f:27:c6:df:e6:ce:0f:c7:a5:21:2a:98:3c:81:9e:
         54:6d:fa:89:45:31:34:2c:07:96:96:86:40:78:19:77:5f:ff:
         58:0c:0d:e2:f7:73:28:72:88:ff:0a:cc:19:99:54:b7:9a:d9:
         0a:80:34:56:5a:d9:7e:47:05:27:64:d5:5f:76:4d:15:f2:98:
         3e:ef:00:f5:9a:95:52:ce:49:2c:b6:6c:a9:ab:ea:de:9d:50:
         4b:11:93:17:8a:b7:3f:8d:a0:a0:39:02:33:c9:5f:f4:c4:89:
         0d:e0:28:75:30:76:f4:1f:71:80:0a:da:42:2d:4f:53:65:d2:
         b8:06:25:6c:17:8b:a6:1a:5b:92:b1:d8:ff:90:c1:b7:75:ea:
         88:76:dc:11:19:0b:4f:08:72:10:0e:2d:02:d4:3e:76:52:00:
         05:6e:a7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:35 2025 by rpki-client