Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
File:                     OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft (raw, json)
Hash identifier:          GOSlpAu8CujjYRxb7jB9fMIO/LuQ2YBg3xA9lCVVADk=
Subject key identifier:   B2:DF:53:16:42:A3:1F:66:66:93:5D:9E:5F:C4:DC:92:44:88:84:10
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Certificate issuer:       /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial:       033D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
Manifest number:          0338
Signing time:             Sat 23 Aug 2025 03:48:08 +0000
Manifest this update:     Sat 23 Aug 2025 03:48:07 +0000
Manifest next update:     Mon 25 Aug 2025 03:48:07 +0000
Files and hashes:         1: OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl (hash: TTcpVYbUvSYow9UblBOBNNeuPAxObo/Mb6CmJh1CPZo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 829 (0x33d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
        Validity
            Not Before: Aug 23 03:48:07 2025 GMT
            Not After : Aug 25 03:48:07 2025 GMT
        Subject: CN=68a939f8-d702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:12:6d:f9:ad:51:08:2c:45:91:fa:08:72:4e:
                    4a:72:ed:75:13:5c:25:74:6d:9c:23:9f:bb:4d:7c:
                    87:0c:7a:b7:30:0b:0b:88:a7:d8:1f:1d:e9:0b:14:
                    a9:41:1f:48:7a:8f:f2:de:aa:d7:3d:6f:0a:66:f5:
                    8b:9a:01:7b:a6:8a:71:3c:97:52:a1:96:3a:65:94:
                    73:bf:4e:08:04:a9:ef:08:0e:81:16:2b:48:7c:e1:
                    e8:9c:0f:39:08:86:1d:4e:48:1e:40:1e:c5:3b:bd:
                    7f:6c:0e:a1:86:3e:4b:66:78:5c:c1:b8:a2:8d:39:
                    3b:ac:17:c6:a9:fe:60:31:6c:ac:8f:f6:49:0d:cd:
                    96:4d:1e:3b:73:22:ae:0b:7e:23:1c:b0:66:3c:df:
                    7e:ab:0a:64:2f:b4:fa:bd:9a:7d:28:d5:9f:51:2b:
                    88:06:68:52:49:6c:79:28:ab:4c:25:51:27:db:79:
                    24:1a:59:2f:bb:18:17:4c:60:86:52:53:3e:02:c8:
                    bf:63:7a:d8:0d:74:ae:1b:4e:3e:54:7c:2d:f2:b7:
                    ed:1f:11:9c:d8:27:5d:e4:51:73:4c:f6:aa:22:cf:
                    86:66:73:4b:b0:07:c0:0a:2a:c0:e9:69:48:80:b4:
                    51:48:7c:cb:e4:62:03:98:7f:31:0a:b8:bf:ab:91:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DF:53:16:42:A3:1F:66:66:93:5D:9E:5F:C4:DC:92:44:88:84:10
            X509v3 Authority Key Identifier:
                keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:3e:93:32:b3:ef:c9:7c:aa:a6:c7:7a:00:c2:a0:ec:d8:a7:
         d3:fb:2d:00:c0:e0:19:23:05:94:a7:d9:43:b5:4e:39:0c:d9:
         db:c0:eb:73:45:b1:b6:02:dd:53:eb:91:fe:38:b5:fc:cd:b6:
         af:8f:82:61:41:9a:eb:0d:04:93:9c:f5:69:d7:56:54:ab:44:
         b2:0f:60:ea:f0:dc:07:80:08:85:de:05:bd:a8:d9:c3:ac:17:
         a5:8c:41:32:57:46:6d:e1:ab:b8:b5:11:57:56:84:2d:4d:f5:
         91:85:26:83:d6:22:36:76:e5:03:0e:bc:82:31:d5:96:14:94:
         9d:9b:6e:32:77:a7:f4:da:15:b8:cf:9e:5e:53:e4:4c:35:bd:
         e7:d6:f5:2b:d2:87:83:72:ca:b7:87:a4:6d:84:da:4e:2e:e9:
         f7:12:da:94:d5:95:36:e8:b5:a8:80:e8:ba:8a:0b:e0:e1:fc:
         4e:be:93:aa:66:1d:87:41:18:3a:df:9f:49:02:99:cb:20:e7:
         6c:35:f2:c9:41:20:34:f8:3b:4b:5b:57:9d:12:a9:45:93:4a:
         29:f1:3c:3d:75:4c:66:28:44:a0:9d:13:31:4c:b6:70:7f:a3:
         03:69:71:a1:56:01:68:41:9b:5b:70:f6:0a:13:cb:10:28:2c:
         b6:0d:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:27 2025 by rpki-client