Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
File:                     pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft (raw, json)
Hash identifier:          WBWGRcxC252XQaQRfIdWHSJGC9NEMJ7GdUPTlKZmKHc=
Subject key identifier:   D6:DA:53:1E:FC:47:CA:B8:EE:90:EB:1B:FF:4B:1D:75:E4:A6:B7:3B
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Certificate issuer:       /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial:       0154
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
Manifest number:          0151
Signing time:             Mon 04 Aug 2025 04:57:02 +0000
Manifest this update:     Mon 04 Aug 2025 04:57:01 +0000
Manifest next update:     Wed 06 Aug 2025 04:57:01 +0000
Files and hashes:         1: pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl (hash: YqO+YoLG/vaSqkuQzTqBJxdrW0ARRKAhyyPgAiHQTCI=)
                          2: 3D6B042477A311EF8B65448C762E951A.roa (hash: TQ2pYgQMjddwwjuMRvhC7oG/YTmFbZhFUDTK4ehlRyY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6CA3AF, serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
        Validity
            Not Before: Aug  4 04:57:01 2025 GMT
            Not After : Aug  6 04:57:01 2025 GMT
        Subject: CN=68903d9e-2a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:48:e7:56:07:0b:1a:e2:7f:58:41:fb:2f:
                    06:aa:7a:13:ca:7d:b2:84:2a:13:9e:e2:42:b0:9b:
                    6b:87:23:83:92:88:8a:76:e4:8f:42:f7:df:cf:e5:
                    0d:32:b8:9b:9e:b0:83:6e:ad:97:1f:c0:eb:21:ed:
                    e5:5b:9a:0e:6f:e8:f9:14:0e:e0:8e:37:d2:b9:9a:
                    f6:d5:47:c3:2d:c1:dc:e6:4c:8b:85:0a:84:8d:11:
                    58:2e:95:ba:df:f7:ff:42:b5:82:d5:b9:c9:c2:ff:
                    23:a5:d5:5f:e6:e2:c3:55:aa:a2:fd:bb:1f:73:ae:
                    c1:0d:c7:22:13:c8:27:9f:98:45:94:9a:7b:c1:ed:
                    5f:61:12:26:29:39:db:32:a4:99:23:26:7b:9a:0f:
                    b6:b3:6f:0c:9d:01:40:bc:25:44:cb:9f:72:93:32:
                    9b:20:63:43:e5:5b:6d:71:95:5a:32:ce:4d:76:d5:
                    59:4e:90:0f:0a:12:32:41:45:b3:45:48:68:9a:9f:
                    f0:1b:2d:87:0f:07:d6:a3:dd:f9:dd:ea:b3:40:d9:
                    fe:76:ee:4d:8f:67:bd:bc:69:f1:e9:bd:d4:54:e3:
                    84:0c:80:2f:f2:6a:dc:89:af:2f:24:00:66:51:42:
                    64:44:c2:bf:13:87:2a:7a:53:01:e7:fd:3f:c9:f7:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DA:53:1E:FC:47:CA:B8:EE:90:EB:1B:FF:4B:1D:75:E4:A6:B7:3B
            X509v3 Authority Key Identifier:
                keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e1:bc:75:7e:3c:81:00:c6:ec:58:2e:98:75:18:0f:7f:7b:
         f8:fa:e9:c7:84:5a:76:27:5b:82:c6:82:3e:db:6f:dd:94:92:
         72:36:af:6b:ea:c4:90:7a:52:d3:7a:b3:2f:d7:8f:d8:c3:e7:
         1c:2e:d8:db:e2:9f:bf:9d:f7:07:cb:ef:0f:88:96:2f:80:c4:
         34:4b:16:6a:c7:77:11:8b:9a:51:ca:95:1f:69:a1:c8:3d:af:
         c5:e2:ed:ca:4c:d1:64:f8:79:42:4f:59:81:d6:37:2a:f0:53:
         86:bc:55:81:87:3c:e8:12:91:54:60:a0:1e:52:65:35:c5:e7:
         d8:ae:71:4c:ce:ae:90:55:31:f0:7b:c0:2b:cd:b1:d0:28:19:
         ff:7b:1f:cf:de:05:c7:22:f3:09:13:9b:07:c6:57:14:dc:68:
         2b:9c:96:4c:c0:bc:fd:a1:bd:bd:16:96:38:63:fe:a5:24:0c:
         54:62:4e:9e:4b:fe:ec:cd:2d:31:e6:10:8c:8b:03:ee:96:7e:
         ce:38:70:14:51:b9:d6:6e:5d:f7:49:85:d1:db:67:a3:e8:bd:
         51:24:e6:01:ee:dc:d4:9f:bb:d3:e0:b0:b9:9c:3f:e4:15:0c:
         9c:fe:2b:0f:a8:ad:52:a6:96:48:a1:38:81:1e:7f:a3:23:77:
         c8:2f:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:29 2025 by rpki-client