Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          /Ai7WiiZ8XpMYQUPOCWySONdH6lO0cseUJmn8N7QxII=
Subject key identifier:   7D:4C:0B:98:45:C5:1C:EC:20:1C:4C:E7:67:C5:B4:CC:1F:8D:CE:D8
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       0242
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          023D
Signing time:             Fri 08 Aug 2025 04:25:15 +0000
Manifest this update:     Fri 08 Aug 2025 04:25:15 +0000
Manifest next update:     Sun 10 Aug 2025 04:25:15 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: /Q2REHHdG/muPq13b0pF/tYWcW3G4caJZWmn9qjomYs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 04:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Aug  8 04:25:15 2025 GMT
            Not After : Aug 10 04:25:15 2025 GMT
        Subject: CN=68957c2b-bc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:53:28:f5:2e:0c:96:40:a8:3d:8a:00:d1:ff:
                    7e:9e:ce:84:13:a1:0d:55:a2:08:19:b0:7d:3d:88:
                    54:60:15:4b:e3:a6:75:9b:d4:1c:1b:23:76:85:31:
                    82:86:85:6b:41:ab:25:17:ab:a8:ff:e7:f6:f6:19:
                    72:9d:89:59:34:0e:cd:6f:16:db:a9:f5:44:7b:e2:
                    6a:5e:dd:29:2b:1f:f3:dd:cc:45:89:72:24:c9:a9:
                    7b:ce:b7:43:f6:9c:5f:6d:a7:f4:14:29:3b:23:c2:
                    3a:0f:15:3e:22:8e:88:cf:a5:f4:a6:0a:41:9f:9a:
                    6c:79:d9:9d:21:92:95:00:cc:7f:2f:2d:46:8c:13:
                    9f:c7:ce:d5:a5:dd:87:a1:fa:52:28:d0:d8:2b:6f:
                    3b:d1:a0:df:02:ad:4a:9a:a3:7f:17:31:10:8e:23:
                    ce:e1:00:05:33:57:31:14:9f:d8:12:4b:13:22:46:
                    d1:81:95:96:75:6c:31:4a:d8:4e:b5:6d:6c:95:cc:
                    f2:d5:55:d3:06:b2:c1:49:59:69:86:41:7b:03:b0:
                    ce:6f:54:35:5f:7b:fe:7a:b9:12:08:49:89:ce:d1:
                    44:6c:07:ec:7f:f9:ba:eb:d7:20:40:c1:8c:74:8d:
                    f7:b8:41:97:6c:a2:5d:95:a4:be:f5:83:df:50:f8:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4C:0B:98:45:C5:1C:EC:20:1C:4C:E7:67:C5:B4:CC:1F:8D:CE:D8
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:39:8e:49:8c:81:24:ce:2a:67:db:1f:f0:cb:a3:6c:29:2c:
         41:e5:b7:d6:b9:a6:f6:90:56:ee:db:30:b5:07:e1:e6:99:72:
         6b:ce:b2:2f:52:f1:b7:c6:6a:e8:6d:67:a6:cb:2d:56:2d:9b:
         76:8e:6a:72:36:12:4d:0c:75:3f:d7:ac:7f:14:a1:8c:62:b0:
         53:84:cf:4f:9e:22:bb:c5:d0:e4:b3:3a:9f:94:3b:b5:ec:48:
         28:5d:a6:c7:12:8e:58:cd:ea:5b:ae:da:4d:18:01:e6:b8:a6:
         6c:78:0d:cf:1a:b1:86:98:1b:5e:d4:7d:64:69:dd:be:d4:39:
         7c:db:49:8b:01:01:97:3e:c9:9a:66:81:eb:b7:cd:86:13:7f:
         88:69:9b:c1:b9:4d:56:bb:d1:3a:11:36:ac:21:09:3c:62:a2:
         81:28:d0:68:54:f4:f8:27:53:29:63:36:09:75:f0:cc:92:84:
         d4:f3:03:f6:97:27:1f:39:dd:9e:28:98:6a:74:bc:99:d3:67:
         49:47:7a:2f:d2:10:25:69:4e:69:2a:b4:70:39:83:bd:6e:49:
         42:b3:49:53:4b:33:72:85:51:39:a4:95:09:ab:48:65:60:ff:
         64:97:46:15:fa:0f:a0:fc:8b:9a:0d:33:a8:09:26:0f:c4:8b:
         1d:a7:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:15 2025 by rpki-client