Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File:                     JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier:          QrVfw0ZLyp1BIcMGabvELsZnIZaaQnOGKjgTKEJbPmM=
Subject key identifier:   D9:31:EA:18:91:D1:11:28:8C:B6:A5:50:A9:14:D0:59:43:E9:17:DC
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer:       /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial:       023C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number:          023A
Signing time:             Fri 08 Aug 2025 04:22:07 +0000
Manifest this update:     Fri 08 Aug 2025 04:22:07 +0000
Manifest next update:     Sun 10 Aug 2025 04:22:07 +0000
Files and hashes:         1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: dZj3Pvow6dv8z4dLSsW51nVnZYgTi83G39b+blxGS7g=)
                          2: 3FF210A8625711F08B604AD6DAE4EC9C.roa (hash: zNyQHQEUKkigM9g+wWCSuCKgDN1DQE+TD5fh7VtDwxw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 04:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
        Validity
            Not Before: Aug  8 04:22:07 2025 GMT
            Not After : Aug 10 04:22:07 2025 GMT
        Subject: CN=68957b6f-3b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:cc:e7:8d:85:17:58:a8:60:a8:19:c1:e2:
                    d3:8f:42:f0:3c:01:79:32:4b:3b:d9:15:51:78:01:
                    e3:02:a3:97:df:3d:90:82:eb:bd:f9:d9:4c:6a:a5:
                    4b:eb:e9:40:b9:7c:7f:11:76:fe:ca:57:df:fd:64:
                    a6:bd:e2:b5:23:20:dd:81:79:14:57:9c:13:cc:31:
                    b8:30:03:3d:9d:46:6c:73:85:25:db:c9:5b:ea:bf:
                    83:5c:65:2d:39:2b:05:2a:4b:84:5e:a3:ef:16:fc:
                    2f:fc:50:94:0a:2a:00:aa:7f:da:fe:97:fc:44:17:
                    52:15:90:9b:d8:07:8d:b7:7f:9a:4b:46:fb:15:e3:
                    5f:c0:d1:b7:9b:68:24:d6:42:dd:d0:b3:ae:e6:39:
                    3b:1b:c5:e9:0b:61:f9:e4:66:2f:b6:e9:f7:68:7f:
                    21:cd:c0:a1:1e:51:ee:3e:af:60:73:12:2d:c9:96:
                    c0:07:29:47:25:6d:6f:62:c2:0b:29:3a:54:6a:0e:
                    82:3c:52:19:f1:36:ca:90:cc:5a:a4:75:9b:f4:e9:
                    3c:a8:9d:99:a2:be:9f:6a:8b:a2:da:89:2f:33:f1:
                    ba:fb:ad:a7:33:36:94:46:89:b4:00:45:ea:5e:2f:
                    c1:5b:f7:56:78:da:02:19:ae:52:07:da:16:49:89:
                    2f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:31:EA:18:91:D1:11:28:8C:B6:A5:50:A9:14:D0:59:43:E9:17:DC
            X509v3 Authority Key Identifier:
                keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4e:13:38:2d:37:95:fe:e3:56:40:94:e3:d5:8f:24:d0:18:
         f7:a9:24:cf:bf:4c:58:15:d2:12:76:f2:a9:a6:46:fc:77:5f:
         b2:61:05:10:b9:04:60:bc:e4:8c:7b:1d:9b:30:7d:1a:e2:c7:
         55:60:b1:ce:74:60:bc:21:15:15:6d:48:af:71:94:af:14:47:
         ff:e6:55:da:fb:48:9e:a8:e4:13:d8:69:27:73:99:50:42:1f:
         30:40:d4:2d:2a:a0:9e:98:73:70:22:ca:ae:e6:67:12:ac:a3:
         1c:3c:86:5e:9c:4d:09:ef:7c:ff:96:5b:0c:6c:96:f9:db:8b:
         01:8d:9c:f0:6c:34:51:be:b4:3d:71:9d:2f:73:6b:00:64:37:
         ad:eb:69:8b:fe:ca:f4:34:c5:5b:e8:69:98:9f:a8:a1:08:a1:
         73:bf:8b:f3:8d:18:74:ba:42:b1:22:9a:5a:17:89:43:ad:28:
         82:49:f8:c8:bb:f5:81:6f:8c:64:1e:8e:d2:d8:0b:2c:f7:fb:
         68:d9:ae:eb:ed:4c:01:cd:6d:eb:8c:f8:b5:30:fe:f1:13:6d:
         c8:b3:e5:9a:dc:2a:d9:bd:7a:4c:5f:3f:8f:78:d9:19:36:2a:
         be:80:45:f6:eb:99:07:f7:fa:dc:3c:81:c4:c6:8e:90:ea:bc:
         ee:21:75:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:14 2025 by rpki-client