Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          eF7gtBJW+bQYRj1CqeHMrIV/at27zYtFmUEcOStIfm4=
Subject key identifier:   5C:16:CF:BE:DB:B1:D8:84:F7:1C:A2:9B:D0:E6:EE:CD:A0:C8:23:77
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       0290
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          028F
Signing time:             Sun 10 Aug 2025 04:16:49 +0000
Manifest this update:     Sun 10 Aug 2025 04:16:48 +0000
Manifest next update:     Tue 12 Aug 2025 04:16:48 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: wNY3Kp2dfBAq0TRWlUNfTdWIZ0pupeX6gN/XQ0Bhefs=)
                          2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: Aug 10 04:16:48 2025 GMT
            Not After : Aug 12 04:16:48 2025 GMT
        Subject: CN=68981d31-d8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:cc:af:27:0d:48:43:88:43:85:2c:1b:13:
                    31:2b:d2:a4:dc:13:f3:c1:49:56:4b:38:d9:a7:4a:
                    6d:e2:a4:78:98:3d:d7:94:96:d4:d5:17:99:28:33:
                    f5:53:78:d6:ac:6c:38:2e:8c:b4:55:dd:bc:aa:cc:
                    05:a9:9c:99:ee:f1:c8:19:2c:2e:a8:00:09:e1:e3:
                    9e:98:92:8e:42:44:ac:80:06:7d:a3:95:05:14:35:
                    c6:a6:c1:d0:6f:34:2a:8d:ff:99:d7:c2:20:e5:9a:
                    bc:78:6e:cf:2b:77:f2:a0:3b:21:c4:fd:23:38:cd:
                    c2:66:92:bb:00:28:6b:94:c3:32:e6:86:e7:12:20:
                    32:f8:7c:8c:83:77:4b:87:02:8f:a9:43:64:1f:ba:
                    f0:80:87:dd:26:ad:56:c2:f9:03:8f:86:96:91:3a:
                    02:7d:9f:6a:08:45:a9:27:7d:16:e2:34:26:b3:a2:
                    f7:9f:23:4b:bd:fe:4d:65:7b:76:97:50:b2:33:51:
                    c0:0e:33:1f:33:24:c3:f2:c7:65:9d:f0:ac:18:a2:
                    9e:7f:c9:04:ef:c1:0a:fa:38:03:25:23:8d:9b:1a:
                    25:05:88:36:f3:82:ca:a7:10:ee:9c:0c:22:b4:52:
                    f2:0b:f7:9a:fd:15:74:c9:26:43:1e:b1:ae:66:3e:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:16:CF:BE:DB:B1:D8:84:F7:1C:A2:9B:D0:E6:EE:CD:A0:C8:23:77
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:39:c3:be:97:97:ca:c6:ce:5b:8c:0a:54:9b:ca:45:83:13:
         41:b9:a4:68:e5:86:c9:36:a5:83:1d:04:5a:79:31:5b:67:60:
         34:45:05:b4:70:01:7c:4c:f8:f7:b6:66:90:69:b4:3c:d7:8b:
         cb:75:fd:a7:8b:bc:ec:54:57:0a:9b:41:a0:3b:c2:32:5e:31:
         b1:b5:1b:97:75:86:e6:ec:aa:3d:1b:41:84:ce:36:d2:68:c0:
         35:f7:42:3d:d0:60:d7:fc:f3:0d:a7:20:36:75:85:fd:16:67:
         49:23:ad:db:ad:5c:33:e6:d8:df:1e:0b:c6:7a:ae:87:a0:9a:
         4d:fd:48:9e:df:af:a1:0d:53:64:9b:7c:c2:dd:b4:f4:d7:1d:
         96:ef:94:50:df:df:61:6e:28:98:ed:f8:0a:d4:2d:27:24:40:
         2c:fc:2c:60:d2:52:ad:c9:7e:e7:66:78:90:38:24:a7:84:d6:
         6c:c3:b6:23:1d:27:da:a5:ed:03:da:8f:d0:46:7c:1e:b1:8f:
         77:37:46:58:2a:7c:46:72:c7:82:ee:3f:ec:49:90:19:1f:c7:
         b0:01:c9:bd:43:73:77:65:0c:be:89:31:3f:dc:9c:cb:88:76:
         5a:ea:86:49:10:57:12:36:a4:02:1b:ca:5c:66:50:03:bf:ce:
         e6:51:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:10:50 2025 by rpki-client