Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.mft
File:                     48qwYej4izcp5wmOfReIqfb_C0c.mft (raw, json)
Hash identifier:          6hQMXGQzbTojmpJB3T3JWLjgdBKC84BtlaHgj5V/FNY=
Subject key identifier:   43:28:FA:95:34:35:D4:12:10:0E:1A:28:DA:8F:78:B8:44:A8:14:9F
Authority key identifier: E3:CA:B0:61:E8:F8:8B:37:29:E7:09:8E:7D:17:88:A9:F6:FF:0B:47
Certificate issuer:       /CN=F36939A6AF/serialNumber=E3CAB061E8F88B3729E7098E7D1788A9F6FF0B47
Certificate serial:       0397
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/48qwYej4izcp5wmOfReIqfb_C0c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.mft
Manifest number:          0397
Signing time:             Mon 04 Aug 2025 03:32:17 +0000
Manifest this update:     Mon 04 Aug 2025 03:32:16 +0000
Manifest next update:     Wed 06 Aug 2025 03:32:16 +0000
Files and hashes:         1: 48qwYej4izcp5wmOfReIqfb_C0c.crl (hash: L1MfEjA2Q6flCzWWojKHcR5vS3ISxT5Bu1uhrcvLkSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/48qwYej4izcp5wmOfReIqfb_C0c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AF, serialNumber=E3CAB061E8F88B3729E7098E7D1788A9F6FF0B47
        Validity
            Not Before: Aug  4 03:32:16 2025 GMT
            Not After : Aug  6 03:32:16 2025 GMT
        Subject: CN=689029c1-466f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:46:be:fe:c8:59:e5:62:e7:cc:37:1e:56:
                    4b:1d:ce:79:15:53:f5:cb:04:58:00:b8:77:31:13:
                    15:15:5e:4d:ae:cc:13:ec:e5:7e:ec:43:53:1f:0c:
                    70:56:87:da:d4:22:5c:c1:e3:9b:50:b9:cd:60:6e:
                    9f:60:1d:cf:47:f3:20:0d:96:1d:76:ab:4e:ac:b0:
                    a7:4d:37:a9:8b:e3:c6:5f:cd:5d:dc:8c:d4:24:cf:
                    86:d8:c7:b3:97:31:80:1b:d2:51:f5:f0:32:ab:a1:
                    f2:9c:0e:0d:0e:73:0d:b6:8b:cb:fd:2a:2a:e4:ef:
                    bd:2a:0d:fe:ae:af:55:07:50:a0:c7:18:50:ac:3c:
                    4d:94:05:63:31:aa:ad:8d:6f:d0:f5:04:07:32:79:
                    21:e4:a4:9f:ff:c6:9f:6e:f5:3b:4e:80:cc:7e:b1:
                    94:bf:e0:1e:45:a9:3a:b2:3f:73:8d:b3:95:df:3e:
                    fc:78:4d:3f:a1:94:c7:c4:30:4b:35:d1:5f:7c:b3:
                    f7:9b:3b:cf:71:84:14:85:dd:6c:88:e8:72:57:3b:
                    51:bd:70:43:89:14:90:02:6e:09:9d:75:e0:1a:1d:
                    bc:7b:d3:be:3d:0b:bf:94:54:37:5c:52:5a:e7:9a:
                    0f:67:cd:e3:18:33:38:8a:89:4a:80:2f:13:d6:e8:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:FA:95:34:35:D4:12:10:0E:1A:28:DA:8F:78:B8:44:A8:14:9F
            X509v3 Authority Key Identifier:
                keyid:E3:CA:B0:61:E8:F8:8B:37:29:E7:09:8E:7D:17:88:A9:F6:FF:0B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/48qwYej4izcp5wmOfReIqfb_C0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:13:b2:ae:e1:f2:8f:54:0d:a6:6d:66:bd:b9:2d:af:49:73:
         ec:a5:7c:16:6d:9b:94:fc:1a:9c:7f:f6:7c:a6:62:1b:35:ef:
         0a:da:89:74:4d:ff:30:54:be:33:6e:e4:3c:d7:48:ed:a5:4d:
         16:aa:9c:fd:af:cd:86:0a:76:1c:9f:c8:76:7b:b2:39:2e:45:
         da:7b:99:be:2a:1f:b4:17:a0:9f:1b:fe:70:87:35:b4:b9:b2:
         a7:e5:17:12:ec:16:33:8c:44:42:55:17:fc:ce:ed:73:df:c5:
         88:28:f1:20:fa:ef:eb:21:5c:e1:3c:aa:1f:5f:f9:43:f3:7b:
         21:23:b9:b7:79:09:f6:9c:9b:06:f2:fd:4a:35:aa:ac:f2:6d:
         f7:9c:3e:0d:b3:f4:0a:2a:63:e2:4e:5d:3a:1b:2f:fb:ef:3b:
         5f:97:f3:8a:52:b3:ca:71:b4:ab:ca:f3:3d:2a:ae:bf:a5:e8:
         f8:06:8c:fe:bc:06:5e:12:68:51:a1:8f:eb:83:c8:84:36:4b:
         4d:df:f5:4e:53:4f:a3:cd:63:93:5f:c6:d4:ba:4b:fe:73:a9:
         cd:34:21:b6:1e:33:84:f6:b3:e6:01:9e:40:06:60:6c:68:4b:
         60:60:cc:a2:bd:b4:08:51:fe:83:bb:8b:75:8a:46:91:ca:c8:
         f9:49:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:54 2025 by rpki-client