Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File:                     kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier:          9XknJYAotnpN6feJUVG0wMSiIs0yhyeGIQeavE9O42Y=
Subject key identifier:   A5:CB:EE:81:43:89:24:19:4D:9F:29:34:0C:79:AA:CE:F9:C1:D4:66
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer:       /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial:       0638
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number:          0636
Signing time:             Thu 07 Aug 2025 02:16:42 +0000
Manifest this update:     Thu 07 Aug 2025 02:16:42 +0000
Manifest next update:     Sat 09 Aug 2025 02:16:42 +0000
Files and hashes:         1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: 802P1NYAip0e15dGgfIswiNMkoN8M4+yFz1Fgt3gSNI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 Aug 2025 02:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
        Validity
            Not Before: Aug  7 02:16:42 2025 GMT
            Not After : Aug  9 02:16:42 2025 GMT
        Subject: CN=68940c8a-a4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:74:6a:14:aa:df:43:e4:17:6d:22:0b:39:
                    3a:50:43:a0:86:3d:94:db:aa:b9:6a:28:51:19:2d:
                    72:b5:ec:87:1f:fb:8c:56:55:a7:39:72:7e:82:96:
                    7b:9d:dd:73:ef:48:32:25:79:8d:ac:3d:39:24:9f:
                    4a:eb:f0:6f:f2:64:68:07:fa:54:b3:06:9c:17:a8:
                    e9:b1:c4:5a:b9:73:8c:af:f3:ff:5c:dc:f2:6c:bd:
                    6c:e5:25:b2:9d:c5:f4:7b:66:df:c1:03:52:bb:34:
                    52:61:a9:d1:b0:3b:64:2b:4d:31:f7:34:45:1d:2f:
                    fc:3a:88:08:db:56:48:68:7c:23:fd:9b:99:18:83:
                    a4:fa:39:58:eb:78:e2:df:7c:36:0e:dd:9b:23:a8:
                    6c:1a:19:1a:c5:eb:32:92:fe:ba:c3:a2:54:f5:01:
                    72:ea:37:c8:6f:1f:48:a2:91:a2:e8:23:7d:6a:dd:
                    61:da:f8:d5:24:1d:8b:cf:78:7e:17:34:a8:44:30:
                    db:62:80:e7:b2:48:68:92:ef:0a:41:ae:fc:0c:b4:
                    43:4c:ae:6a:c7:e7:0f:85:c0:c5:bf:e5:e5:e1:20:
                    f7:2d:75:db:3d:3a:ae:c9:69:22:3b:8c:54:3d:05:
                    2a:87:9c:9c:5a:4e:a3:18:6e:01:45:8a:00:99:e0:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CB:EE:81:43:89:24:19:4D:9F:29:34:0C:79:AA:CE:F9:C1:D4:66
            X509v3 Authority Key Identifier:
                keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:3a:ac:17:85:bf:40:d6:92:19:7f:fe:5c:18:af:98:89:
         21:a3:95:e0:1e:42:dc:8f:7a:15:77:9c:6f:17:5d:12:0c:8d:
         bd:62:56:7e:98:cc:5d:ce:e4:fa:41:73:a8:ae:3b:f1:0a:08:
         e6:c1:c4:4d:b8:17:38:0b:b0:5b:de:e3:e8:c9:94:91:42:63:
         95:21:93:ee:6e:e5:69:05:60:b6:8a:be:03:ad:4f:9b:6c:e1:
         7a:26:88:5b:9c:a7:7e:f6:29:f2:d2:4c:c3:f3:c9:f9:2c:99:
         9c:7d:7a:28:bd:f3:0f:3a:27:69:5a:7a:4d:e8:51:8a:ee:48:
         76:54:51:ba:f4:af:f0:7d:1c:d8:51:ca:5e:73:9c:59:bd:54:
         0f:68:87:d8:c3:42:94:d6:cb:68:e1:a2:a1:11:f9:84:d0:4c:
         3b:15:1e:14:41:b3:9a:46:b5:df:c7:27:a8:0b:20:4e:3d:fc:
         3c:e7:80:34:c1:4d:ff:f5:7c:87:46:d7:4b:c4:03:09:b5:32:
         4e:5d:59:63:3f:d9:a8:24:c0:76:ad:87:2a:3a:ad:5e:f5:fc:
         c4:9d:48:7e:27:cf:ea:e5:72:95:8b:cc:de:c2:1f:2d:06:f6:
         dd:6d:a1:ef:4c:3d:3f:96:92:81:a3:95:b1:80:41:ff:84:f6:
         04:79:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:01:52 2025 by rpki-client