Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File:                     Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier:          pfqAJOIZhGaY/wnl9XR59gxmPBfTtqznpvau9SADwnI=
Subject key identifier:   D8:96:DC:D3:51:B5:B5:2A:49:8A:22:DA:EF:54:DD:6D:7A:15:E3:4F
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer:       /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial:       03C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number:          03C5
Signing time:             Mon 04 Aug 2025 03:26:52 +0000
Manifest this update:     Mon 04 Aug 2025 03:26:51 +0000
Manifest next update:     Wed 06 Aug 2025 03:26:51 +0000
Files and hashes:         1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: 2CaG+FahVHPvhQs2iTYQvtZ7WUSKfrIe5HhXtawc+hM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
        Validity
            Not Before: Aug  4 03:26:51 2025 GMT
            Not After : Aug  6 03:26:51 2025 GMT
        Subject: CN=6890287c-8389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:87:97:12:4e:ef:3b:6a:f5:9d:ca:00:1e:
                    ee:6b:1d:70:26:e4:c4:c1:ec:ed:f1:51:cc:9a:27:
                    cc:76:59:8a:71:dd:3b:45:f2:a7:52:7f:81:08:4f:
                    0c:53:3b:73:35:32:2a:de:1c:24:0b:64:65:32:43:
                    8f:d6:f5:35:3e:ca:dc:7c:ac:27:f6:aa:eb:ae:c1:
                    3f:f8:18:a2:28:2f:4a:a0:b1:f2:ae:f9:00:c6:7f:
                    04:0f:01:f3:17:a2:3a:15:45:c2:7a:0d:c1:ef:73:
                    7a:93:97:16:7d:eb:ef:33:59:81:4e:60:4e:48:d8:
                    32:29:db:7a:5f:2d:81:2c:27:23:07:a1:5c:21:39:
                    ad:fa:04:7b:ff:91:a7:19:cf:f2:78:98:3a:86:aa:
                    82:2c:e8:0d:21:53:3d:37:17:2d:b6:ff:eb:91:29:
                    3b:36:17:14:fb:e6:50:76:8d:c4:17:bc:2b:b6:1f:
                    90:4a:dc:f3:30:94:d5:22:63:c8:c9:d8:1c:a3:29:
                    10:7d:2b:2c:69:29:52:08:e8:6e:15:19:5b:65:b7:
                    47:83:4f:7c:d1:81:24:26:b0:dc:5d:00:ce:38:a4:
                    71:9b:5e:bc:2e:e4:f5:4b:1c:9a:40:46:6c:c6:46:
                    d3:df:6f:7c:49:eb:2c:91:c2:bb:d2:44:6d:b0:2a:
                    ff:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:96:DC:D3:51:B5:B5:2A:49:8A:22:DA:EF:54:DD:6D:7A:15:E3:4F
            X509v3 Authority Key Identifier:
                keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0e:c9:4c:dd:c8:4d:7c:d3:5e:10:ab:3a:5f:23:49:5b:52:
         77:af:b1:a7:d5:1c:9f:bb:d9:f2:8f:ef:14:2b:ad:8e:28:1d:
         e1:7e:13:bc:62:aa:19:34:83:48:df:5c:55:39:3c:e9:66:09:
         55:36:aa:2a:fb:44:16:f2:10:cd:21:db:bd:76:0f:06:0f:a2:
         eb:43:3b:58:a1:fc:df:de:35:b7:2c:d9:a5:54:7a:d8:f6:6f:
         3d:41:39:d6:02:b7:49:7d:98:99:8d:19:8a:4a:a6:40:42:74:
         94:fc:e6:8d:3f:05:d5:19:8b:3d:42:41:f4:fd:ce:b9:8b:f7:
         4f:39:81:5d:00:88:a4:3f:15:63:d4:93:56:63:94:46:64:45:
         18:6b:b2:8e:63:1c:0b:60:12:d8:3c:b2:ea:de:3a:a2:09:f9:
         82:4f:7f:7d:6b:3d:16:00:25:60:17:5c:21:51:8e:00:be:0d:
         6a:28:37:7e:32:02:33:87:42:c6:d5:78:ce:fc:bd:da:c0:af:
         55:be:f8:14:79:78:33:da:73:ab:da:34:f9:94:4e:b1:d7:53:
         4a:5c:f1:d8:91:21:6c:25:fd:15:70:53:2d:0f:7b:84:91:bc:
         fc:ce:55:ad:6f:fe:8b:65:07:b6:0f:e0:6b:96:b2:a3:9e:83:
         3c:55:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:16 2025 by rpki-client