Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
File:                     sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft (raw, json)
Hash identifier:          zE2V6Y4F2isKtij/WqNKZgtjvNAJvJozLrUqbntma8g=
Subject key identifier:   E7:16:FA:71:6D:67:68:4E:AF:B2:67:BD:50:45:48:C8:D3:2A:A4:BE
Authority key identifier: B0:F8:FF:A5:BB:CE:CD:31:3D:F9:8E:A4:4A:4F:3E:A5:CF:D7:C4:7C
Certificate issuer:       /CN=F36702EEAF/serialNumber=B0F8FFA5BBCECD313DF98EA44A4F3EA5CFD7C47C
Certificate serial:       0672
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
Manifest number:          0670
Signing time:             Wed 13 Aug 2025 02:11:24 +0000
Manifest this update:     Wed 13 Aug 2025 02:11:23 +0000
Manifest next update:     Fri 15 Aug 2025 02:11:23 +0000
Files and hashes:         1: sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl (hash: XN+3mbV2ZUGPmAApXrKQqP/M/tCEpK0dUFWSJyw8Jms=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 Aug 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650 (0x672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36702EEAF, serialNumber=B0F8FFA5BBCECD313DF98EA44A4F3EA5CFD7C47C
        Validity
            Not Before: Aug 13 02:11:23 2025 GMT
            Not After : Aug 15 02:11:23 2025 GMT
        Subject: CN=689bf44c-9215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:35:a3:44:c9:42:16:82:e2:38:b5:f9:2b:
                    01:5f:5b:ea:39:a1:3f:99:91:0a:2f:51:fd:14:87:
                    49:7e:cd:77:5c:c7:6e:d5:2e:50:79:64:8c:4c:27:
                    b1:b7:0f:01:68:e7:4f:ec:6a:29:fc:e1:bc:70:59:
                    55:c1:b2:8b:bc:ed:33:3f:a0:89:60:3a:77:48:61:
                    80:98:f0:49:d5:b2:ca:97:ba:ba:fe:55:fd:0e:60:
                    c3:1c:d6:c4:fb:d6:ca:43:29:b1:92:86:11:f1:e9:
                    e9:90:7d:6e:06:65:1d:31:cb:b7:50:14:10:6d:35:
                    0d:96:64:4b:f6:80:d0:d8:31:88:d0:6c:cf:4b:8a:
                    52:e7:41:80:dd:f6:a2:43:e5:ae:c1:bd:e9:ba:23:
                    64:7e:2e:84:0d:ea:92:0a:1b:53:b7:18:52:2d:c1:
                    ec:a4:9c:cf:d0:63:9a:a6:38:8f:57:29:25:dc:fb:
                    af:65:28:44:2a:63:57:a4:af:e1:5f:e7:f3:6f:a2:
                    70:6b:e7:5b:5f:b4:39:c6:17:a4:94:19:e1:20:5f:
                    4e:e5:b7:1f:7d:e3:68:df:3a:46:61:5b:9c:50:4b:
                    77:ce:f1:e1:29:0e:4a:36:08:4b:73:d5:a8:96:45:
                    b8:9b:de:d9:60:95:23:91:37:45:3d:15:d5:e4:a4:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:16:FA:71:6D:67:68:4E:AF:B2:67:BD:50:45:48:C8:D3:2A:A4:BE
            X509v3 Authority Key Identifier:
                keyid:B0:F8:FF:A5:BB:CE:CD:31:3D:F9:8E:A4:4A:4F:3E:A5:CF:D7:C4:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:63:d1:e0:6a:39:e1:38:f9:e1:8f:cb:af:55:67:65:32:d0:
         3c:18:2d:7b:52:21:79:8d:9a:b4:6b:c5:83:07:a8:da:60:5a:
         c1:36:4c:b0:94:e6:88:1a:66:7a:fb:57:d8:eb:50:84:46:73:
         07:7c:cc:b3:ac:61:d6:4a:b8:d9:82:28:9b:8f:74:8f:05:5b:
         db:50:b1:29:47:f3:e7:11:4d:ff:e0:94:08:a6:79:fc:b8:51:
         47:eb:35:d3:9f:72:ac:87:06:ba:83:b3:47:60:10:10:8e:7b:
         cd:c5:8d:60:dd:8e:fb:40:3d:93:e2:5e:48:f1:d6:92:d5:4f:
         6a:da:bd:0a:c2:df:b1:55:c9:97:6c:c9:2b:2b:43:55:55:ee:
         a4:36:6e:a0:69:b3:97:74:0d:c4:80:ff:dc:1b:2f:63:79:ff:
         5f:fc:97:7c:b8:f1:6f:36:a3:38:c6:b3:13:58:06:5b:20:f5:
         db:87:09:31:dd:a7:f1:13:9d:f2:6d:9f:d2:cd:8d:e7:38:91:
         42:d5:ec:f1:b5:c2:19:2d:13:f9:d0:fa:b9:b8:51:85:96:58:
         45:1f:59:6f:a6:b3:26:2c:fb:e3:fd:49:bb:26:1c:f8:15:31:
         79:9f:5a:78:d5:0d:3d:bb:82:7d:52:b4:ad:71:d5:c5:d4:b1:
         cb:c3:00:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:32 2025 by rpki-client