Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
File:                     Gui5Af04SDp0-NI1YM3fc7TRUGM.mft (raw, json)
Hash identifier:          6IzXg1nA4uv44NmwpiqBOR2FWDunGXfztJmC7T01V5w=
Subject key identifier:   0C:D7:B9:4D:1E:91:80:B4:4C:24:79:4A:1F:7B:D9:A6:A0:FF:D8:C6
Authority key identifier: 1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63
Certificate issuer:       /CN=F3644574AF/serialNumber=1AE8B901FD38483A74F8D23560CDDF73B4D15063
Certificate serial:       015B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
Manifest number:          015B
Signing time:             Sat 23 Aug 2025 04:52:49 +0000
Manifest this update:     Sat 23 Aug 2025 04:52:49 +0000
Manifest next update:     Mon 25 Aug 2025 04:52:49 +0000
Files and hashes:         1: Gui5Af04SDp0-NI1YM3fc7TRUGM.crl (hash: fnhXoFXihpZ2vWvsIKjsr+5dIin7Ucb89JlCyeHKGNk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AF, serialNumber=1AE8B901FD38483A74F8D23560CDDF73B4D15063
        Validity
            Not Before: Aug 23 04:52:49 2025 GMT
            Not After : Aug 25 04:52:49 2025 GMT
        Subject: CN=68a94921-871f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:9a:d2:86:8f:b3:5a:53:59:4b:23:74:d8:
                    49:6c:61:f5:9e:31:83:a8:69:6e:b4:98:17:a9:e4:
                    86:44:ea:6e:d2:b0:c6:b3:b4:6c:cb:f8:d2:41:9a:
                    be:c5:d5:0d:5f:cf:28:20:89:00:6a:62:79:38:1c:
                    95:8f:9f:fa:cf:76:f0:cd:f6:ec:33:7b:95:1c:dd:
                    f2:bf:52:62:81:d8:61:7d:55:3f:d0:65:fa:3c:92:
                    57:99:60:db:42:18:9b:72:c5:82:25:23:3c:8b:fc:
                    a5:4d:b5:73:f6:d8:6c:75:b6:5d:60:9b:e0:a3:59:
                    3d:78:e5:ac:40:13:25:8c:c7:9f:9a:dd:3f:d2:85:
                    f6:1a:87:68:4c:64:5f:18:60:07:d1:b1:3d:d6:5a:
                    90:41:4a:ae:04:e2:6b:08:d6:6f:db:c6:d0:42:db:
                    e3:1d:94:fc:a1:96:76:bc:47:aa:44:d7:2b:8d:7c:
                    b9:e6:f5:94:73:c5:2a:a0:d8:10:64:43:75:a2:72:
                    79:02:cf:76:38:db:86:dc:d4:fc:85:51:cf:2b:84:
                    f7:52:29:9c:67:52:36:5c:f3:8f:1b:03:ea:0a:e4:
                    07:d6:e7:09:ab:12:88:58:1a:71:13:88:17:0f:34:
                    bc:36:1b:b6:9d:49:58:fc:63:1b:d4:bc:55:fd:84:
                    ab:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D7:B9:4D:1E:91:80:B4:4C:24:79:4A:1F:7B:D9:A6:A0:FF:D8:C6
            X509v3 Authority Key Identifier:
                keyid:1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1e:84:14:ca:e2:1c:1b:8b:e5:a3:34:92:54:a7:0e:0a:f0:
         bf:9c:8f:a9:20:af:06:8b:37:26:02:eb:8f:31:58:28:d6:6c:
         52:7d:a5:e9:dd:dc:39:69:e2:7d:8c:8e:ab:4e:15:19:78:2d:
         67:39:73:c9:31:33:01:cf:4b:3b:43:ff:60:31:95:9f:bd:c1:
         39:ae:29:08:00:a5:56:46:e0:de:86:18:91:bb:44:9f:91:ee:
         ae:d3:92:f8:6e:c8:0c:79:de:b8:ab:b0:1b:66:04:b4:00:b9:
         10:e3:1c:f1:09:e7:ea:27:d2:50:c6:cd:4f:15:da:0a:05:6b:
         f5:f0:99:e8:52:e1:48:91:a5:da:f3:c1:40:3f:0a:52:dd:cf:
         d5:05:07:5d:53:0e:6f:bd:2d:e1:ba:33:68:5a:a3:8c:f4:ad:
         1f:53:97:27:df:85:71:27:79:b1:16:4b:b5:32:f5:50:7b:a2:
         97:ef:85:91:37:17:76:34:8a:32:ff:45:65:11:02:8c:f0:c5:
         e8:5b:d6:bd:b3:04:4a:c6:93:6e:35:c1:21:d5:26:63:25:ef:
         a0:d2:9a:76:41:92:36:c1:71:92:d4:07:f4:38:d0:4f:2d:64:
         bb:a0:0c:43:cc:47:88:e2:9f:df:2c:ce:85:b1:09:6e:b1:bf:
         50:6a:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:17 2025 by rpki-client