Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
File:                     8ZI823Vz-wlzku4GArwdsbV78OM.mft (raw, json)
Hash identifier:          FMvIsuzQ3hqSBplXjlHrSi9v1WbXU5jNqCsmVgdXJ+Y=
Subject key identifier:   3E:CA:9D:F9:C2:EE:06:9C:6F:B3:59:3D:BC:93:FB:5A:D6:72:EB:40
Authority key identifier: F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3
Certificate issuer:       /CN=F36F731FRI/serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
Certificate serial:       02F2
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
Manifest number:          02F1
Signing time:             Sun 10 Aug 2025 04:04:41 +0000
Manifest this update:     Sun 10 Aug 2025 04:04:41 +0000
Manifest next update:     Tue 12 Aug 2025 04:04:41 +0000
Files and hashes:         1: 8ZI823Vz-wlzku4GArwdsbV78OM.crl (hash: u3RiigXfNvj94ew+OgeqSHSf1qnlsIzogaWkGbA4QV4=)
                          2: FC67525472E011F0A5185D9CDAE4EC9C.roa (hash: fxMVUdc7VNQmTcNtjievYVXO75cad81vUMPfW3dLOxg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                          rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FRI, serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
        Validity
            Not Before: Aug 10 04:04:41 2025 GMT
            Not After : Aug 12 04:04:41 2025 GMT
        Subject: CN=68981a59-ef87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:23:86:95:c8:5e:ce:a7:4e:72:dd:e2:6b:7f:
                    ad:2b:5b:3f:3c:ec:c3:4f:fc:0f:65:a7:41:34:38:
                    95:cb:3f:86:7e:dc:06:fa:a5:ac:c8:87:dc:24:4d:
                    bb:51:b3:c8:43:12:67:27:73:56:2b:35:42:57:11:
                    ef:e1:48:37:52:93:1f:7b:b1:1a:7e:ba:eb:65:cc:
                    10:92:c3:6b:05:6b:78:6b:e6:38:f9:78:55:09:09:
                    95:33:43:93:ec:0f:bc:d6:b5:c9:c9:c6:d0:c8:16:
                    2c:8b:e7:2c:3f:d8:45:72:6b:28:42:ad:38:0b:a4:
                    65:12:76:6a:72:8f:28:14:67:4f:b4:5e:d8:74:8e:
                    f6:66:b9:e3:31:89:d6:93:de:03:18:35:8c:1f:9f:
                    e3:ee:21:0a:2c:ab:b0:50:28:7e:34:5f:c9:0f:13:
                    52:ab:62:4e:7f:a8:4a:70:ce:bb:0d:2c:30:00:e7:
                    bf:0b:fd:a7:f5:7d:31:b0:83:86:ab:b9:c2:5a:7d:
                    fd:3d:ba:7d:8a:41:bf:72:65:0a:9d:46:12:6d:15:
                    67:f5:3a:71:98:13:91:25:a8:75:7d:2f:72:90:79:
                    e1:82:9d:66:e6:46:b2:84:32:ff:93:9d:2f:1d:92:
                    db:11:91:4a:96:d9:58:c7:c2:32:2b:82:49:1b:3e:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CA:9D:F9:C2:EE:06:9C:6F:B3:59:3D:BC:93:FB:5A:D6:72:EB:40
            X509v3 Authority Key Identifier:
                keyid:F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:e5:ef:9d:ab:13:3a:f6:f6:5d:f3:e1:f8:77:8e:4e:a8:
         59:b0:c2:12:1e:6f:2c:6b:49:12:70:91:a3:17:3b:e9:28:b5:
         67:ba:81:cf:c9:29:28:73:58:02:d7:a8:7e:f7:71:48:1a:69:
         f7:c9:71:8e:e4:be:ef:74:fe:2b:e9:e7:45:fa:0e:22:17:64:
         25:63:11:d3:f4:44:fd:7e:ef:86:bb:d4:c0:bb:82:d8:69:89:
         67:d6:bd:7a:1e:7a:3b:18:c3:52:9b:23:d2:40:bf:d7:41:4f:
         d2:6d:41:71:53:7d:b6:a2:f6:06:85:2b:99:e9:9f:78:e3:d5:
         d5:42:dc:c5:9d:87:99:e8:00:c9:1a:55:18:79:aa:97:07:36:
         d3:6b:d2:44:0f:3e:95:97:ff:0d:25:ee:e3:2d:3e:bd:de:4f:
         26:d7:56:06:66:7d:8a:c6:39:4c:64:50:fa:b3:4d:4c:79:5a:
         de:17:86:32:b1:c5:4d:cf:2f:84:ad:e9:56:1a:58:24:e9:20:
         ed:2b:5f:89:1e:f3:00:71:39:99:12:4b:74:1d:3d:a5:2b:d7:
         4c:a5:1d:6d:43:23:de:59:3a:6c:8e:cd:58:ae:f6:82:e1:83:
         60:cb:9b:10:2f:94:45:53:3a:39:69:7c:91:3d:2f:a6:61:90:
         d9:7e:5e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:31 2025 by rpki-client