Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
File:                     tjLcSuU6XipZtVv1qsfBSRDBTRY.mft (raw, json)
Hash identifier:          HiBucUSmUitc1cqb6VgqxlTVCTJdzXQ6tHiUiSnEESg=
Subject key identifier:   43:FF:06:10:9B:6C:1C:AB:2A:11:08:5C:07:72:46:25:04:0A:DA:95
Authority key identifier: B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16
Certificate issuer:       /CN=F3616D6FAF/serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
Certificate serial:       0784
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
Manifest number:          0784
Signing time:             Thu 03 Jul 2025 01:54:24 +0000
Manifest this update:     Thu 03 Jul 2025 01:54:23 +0000
Manifest next update:     Sat 05 Jul 2025 01:54:23 +0000
Files and hashes:         1: tjLcSuU6XipZtVv1qsfBSRDBTRY.crl (hash: gfMiSOEz52S+ulko14YUuM9UOAouwjNI4hW4zlywisk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616D6FAF, serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
        Validity
            Not Before: Jul  3 01:54:23 2025 GMT
            Not After : Jul  5 01:54:23 2025 GMT
        Subject: CN=6865e2cf-0b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:66:59:35:89:5e:2c:de:53:e6:91:50:52:
                    28:f4:e0:3a:0d:76:c6:74:0b:52:be:e3:94:82:9f:
                    cc:14:dc:48:1e:75:43:44:71:89:10:37:3d:a6:ae:
                    8a:92:b6:6b:ff:6f:25:f2:e9:bd:f7:96:ca:da:a4:
                    33:90:74:4f:b5:f0:fe:71:09:19:97:99:26:48:35:
                    07:ab:69:66:21:08:2c:a6:92:b5:64:4c:cf:85:58:
                    7f:33:0f:39:c8:4a:73:c7:6d:33:02:9c:7b:3c:44:
                    08:34:ee:c5:5c:ea:48:93:b8:35:5d:2e:9b:b3:d0:
                    86:ec:4d:93:92:02:ea:99:4e:6d:97:c2:77:1f:17:
                    6e:15:08:95:4b:55:18:f4:86:cb:49:0b:cc:45:d5:
                    2a:5d:cb:d9:d0:dc:a6:06:ce:63:28:9b:97:49:68:
                    06:bb:70:e8:be:9e:d8:0f:b3:8a:16:72:9f:54:b4:
                    d3:33:64:bc:11:6d:6d:27:ce:19:e4:34:58:01:30:
                    b1:02:48:cb:c6:fe:bf:b7:93:3c:5e:7d:8c:16:57:
                    bd:77:ff:a4:79:4c:38:47:1a:47:fe:ed:91:48:15:
                    d4:45:d0:09:21:d9:14:b7:8d:29:64:61:78:38:29:
                    58:aa:08:dc:5b:4a:9e:22:21:37:7f:a2:20:bd:ce:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FF:06:10:9B:6C:1C:AB:2A:11:08:5C:07:72:46:25:04:0A:DA:95
            X509v3 Authority Key Identifier:
                keyid:B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:20:5b:81:54:7b:1c:91:d3:20:50:3d:4a:48:61:cf:8b:9b:
         75:76:62:45:ad:16:d9:bb:e9:cb:2c:4d:9a:a1:60:9a:98:2f:
         eb:86:18:2f:df:b3:73:49:b9:80:03:17:fb:0e:83:b5:de:7d:
         8e:14:6c:64:ea:1e:35:17:25:59:ca:6c:61:ca:b0:86:d1:8a:
         f1:71:18:af:b3:76:6b:9e:2f:a0:e2:1f:b7:5e:51:c8:65:5a:
         ea:b8:de:01:6c:e4:9d:98:a5:69:9d:b1:b4:93:8d:a1:00:6f:
         92:7d:da:63:f6:8c:66:7e:d9:c0:99:5c:ef:94:34:bc:3d:9e:
         70:31:5b:14:e2:78:c5:00:68:30:2f:d4:b1:30:04:7f:b3:37:
         3d:46:7d:d8:f5:16:fe:95:eb:ed:28:40:45:4d:f6:a4:ae:fa:
         96:3c:57:fd:56:50:a2:f9:c7:5a:3c:d4:5d:c0:35:80:d4:89:
         6d:b9:76:33:1e:15:0f:65:e4:9c:8b:a8:9c:30:25:9a:37:d6:
         92:49:6a:7f:74:0b:38:4b:45:1e:f6:43:9e:f2:4e:05:81:23:
         7e:9a:f4:04:94:de:1f:64:b9:0e:86:03:b0:96:4e:8e:26:0c:
         84:3e:ad:cb:ad:00:9c:8b:51:0f:86:02:3b:82:6d:6a:0c:c0:
         42:1c:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:46:00 2025 by rpki-client