Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
File:                     fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft (raw, json)
Hash identifier:          wP4GPsezaMQztDWGT98TLxcLfjoOwoxCgL+O7KKrcL0=
Subject key identifier:   A1:A2:D8:19:C0:E5:A5:6F:91:A5:7F:26:D3:6B:76:A9:99:D7:C6:F8
Authority key identifier: 7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4
Certificate issuer:       /CN=F3691DC2AF/serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
Certificate serial:       05B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
Manifest number:          05B4
Signing time:             Sun 10 Aug 2025 02:38:08 +0000
Manifest this update:     Sun 10 Aug 2025 02:38:08 +0000
Manifest next update:     Tue 12 Aug 2025 02:38:08 +0000
Files and hashes:         1: fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl (hash: 1U7LbFKhNdOURSYGiblOLYthG0Q/PRgCg0FmSv2a3IY=)
                          2: CA1FC8CC1A1E11ECBF7CA134D8A014CE.roa (hash: 89ZoBOyWvLwCDH6XINtqPI4XAUHBP8Wb3FK9Ykris/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691DC2AF, serialNumber=7C7AF8609B6FBD56BCC0244CD32D60FFE85F9EE4
        Validity
            Not Before: Aug 10 02:38:08 2025 GMT
            Not After : Aug 12 02:38:08 2025 GMT
        Subject: CN=68980610-c66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ef:4e:40:15:e5:af:fb:94:0f:3c:52:e3:e7:
                    a6:58:dd:92:60:3b:9e:e4:39:0e:75:fc:38:d0:31:
                    ae:f4:4c:fc:b8:3f:ca:d1:63:0a:a3:e1:0c:03:45:
                    a7:5e:fd:3e:36:9a:5f:4e:c7:ab:50:bc:df:d1:41:
                    f4:4a:3e:96:af:88:95:fe:72:a2:aa:04:57:62:18:
                    f6:b1:55:40:a2:a3:4d:1e:60:42:81:cf:aa:ca:aa:
                    73:69:a0:b8:fe:01:79:58:14:34:8d:af:ed:97:c4:
                    c9:28:87:b4:27:b5:0e:56:cd:88:09:60:f5:12:c2:
                    3f:5e:18:84:96:70:2c:ec:5e:01:9d:6f:4a:02:68:
                    51:03:9c:10:87:87:27:3e:a6:2f:39:4c:48:ba:a7:
                    f0:0c:a6:da:40:e1:5f:96:12:1a:6d:5f:66:fe:e8:
                    31:60:07:36:d5:40:5d:57:6e:de:5b:39:ab:1f:ab:
                    74:ea:0a:ff:64:03:96:93:de:ea:d0:d7:4c:e8:85:
                    9c:be:c7:50:ea:81:96:de:50:7f:13:71:b6:77:49:
                    67:f8:43:b6:e3:70:df:8c:5a:86:7c:5e:e4:b8:87:
                    cd:c5:e7:3a:73:f5:47:83:df:3d:d3:aa:01:51:fb:
                    d3:dc:c5:06:a9:62:83:70:13:9c:f4:15:a5:8d:bd:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A2:D8:19:C0:E5:A5:6F:91:A5:7F:26:D3:6B:76:A9:99:D7:C6:F8
            X509v3 Authority Key Identifier:
                keyid:7C:7A:F8:60:9B:6F:BD:56:BC:C0:24:4C:D3:2D:60:FF:E8:5F:9E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691DC2/A12171821A1E11EC8D345D34D8A014CE/fHr4YJtvvVa8wCRM0y1g_-hfnuQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:36:e8:75:18:62:f6:5f:08:21:21:24:66:cc:f1:29:df:2e:
         30:3d:6e:e1:40:a9:30:29:6a:66:94:ea:cd:50:42:a7:cb:5f:
         c8:33:5d:da:54:2c:2d:ec:ab:55:a4:c3:26:a9:2c:3e:5d:5c:
         02:c6:8d:35:e7:17:28:51:26:bc:07:7e:26:08:cf:3a:4c:71:
         ec:d9:f3:94:bf:e3:e2:ed:47:3d:68:f2:1d:76:89:42:e2:ce:
         65:31:4c:cd:7d:d6:98:af:71:05:e7:7a:62:92:89:0f:33:a9:
         af:27:6c:21:15:72:1b:a9:ed:e9:ff:9e:64:3d:5e:ba:99:80:
         ce:ab:c8:9e:0e:11:5b:f9:77:38:1b:1b:49:05:55:9f:81:97:
         63:85:bf:01:a2:c8:1e:e2:6b:d0:be:b7:66:a8:9e:22:7e:2b:
         6a:02:c5:a3:01:b2:fd:89:fc:e9:f9:b9:45:12:6d:fe:e0:64:
         9e:b9:53:ae:4d:e7:42:66:e2:8d:69:c3:10:16:65:19:d9:6a:
         5a:9c:90:d9:dc:3d:b8:70:5b:fa:6e:fe:2a:29:dc:e9:6a:e7:
         b7:06:c8:79:91:65:06:3b:65:c7:82:b0:41:f7:8a:d1:88:3d:
         61:e1:46:55:b3:b6:bc:39:05:08:cf:45:10:73:74:66:de:ef:
         a8:c3:ea:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:17 2025 by rpki-client