Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          WcVMZzAh8qtBR+bhxpfmKX11yQsKAcWAnVMeNl4HyHA=
Subject key identifier:   66:10:EF:4E:91:A1:5B:54:25:C4:43:90:6C:9C:17:99:C6:CA:23:59
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       0678
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          0675
Signing time:             Sat 23 Aug 2025 02:11:33 +0000
Manifest this update:     Sat 23 Aug 2025 02:11:32 +0000
Manifest next update:     Mon 25 Aug 2025 02:11:32 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: eruM6KF/yFU8OmMB2HxfEVMs+tRbJYkavOfMNhfIdro=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Aug 23 02:11:32 2025 GMT
            Not After : Aug 25 02:11:32 2025 GMT
        Subject: CN=68a92355-ccb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:65:c9:e9:94:ac:0d:b2:75:49:ab:eb:94:
                    0e:9f:b8:57:78:bc:3c:67:1f:0e:5b:c3:b7:49:08:
                    29:4e:d6:f0:ee:80:eb:53:31:25:b3:8f:fa:8b:1c:
                    f9:f9:88:06:d5:b9:55:de:86:56:a9:32:ab:ab:d9:
                    b4:47:e8:ff:c4:2c:e7:b5:29:2f:46:3f:bf:19:2d:
                    37:3a:5c:93:49:1f:c3:23:50:ad:b1:e5:e1:ec:a8:
                    b5:ea:a4:85:30:d8:de:a5:73:10:65:2f:2c:2f:62:
                    66:6c:8e:d9:33:59:ae:de:dd:f5:35:77:46:cc:ba:
                    28:8a:03:d6:07:80:39:0c:1f:e1:34:12:e1:85:15:
                    ee:ab:84:3b:80:e2:c5:fc:d1:f0:5c:07:df:d2:ef:
                    04:9d:50:2b:78:8f:58:88:a5:8b:b8:fe:9b:dc:f8:
                    d4:a6:51:b6:be:72:ae:29:6d:1c:67:7c:ee:e5:c5:
                    fe:c3:c5:05:6f:67:ff:f7:bb:8f:b6:78:1b:20:0c:
                    41:84:43:e1:30:4e:c2:05:42:1b:45:4f:98:14:cc:
                    f5:6e:c1:df:60:e0:80:55:aa:f6:f8:da:4b:d5:86:
                    17:30:51:6e:76:37:10:93:28:2d:26:bd:d5:81:d3:
                    90:f2:1d:8e:d4:69:c7:05:4d:6b:27:7f:bf:9a:fd:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:10:EF:4E:91:A1:5B:54:25:C4:43:90:6C:9C:17:99:C6:CA:23:59
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:06:ab:fa:5e:db:b0:bf:36:2e:b2:bc:aa:34:a8:93:d3:45:
         d9:8d:0c:cb:f3:a3:31:c4:7c:4b:64:0c:a3:23:44:92:3f:51:
         3b:16:f9:71:9a:3b:91:e6:7c:44:19:3e:db:84:f3:2e:94:62:
         be:b0:29:75:dc:55:8a:e3:8e:2d:71:a7:25:ef:c8:8b:ca:5e:
         99:7f:75:76:93:57:4b:b5:52:2f:96:3b:f9:7e:bd:29:59:17:
         da:ce:85:fc:b1:10:83:89:ef:8f:f7:a1:5a:6c:6e:e2:88:09:
         26:dc:f3:1a:fd:38:50:be:1b:18:76:47:de:78:48:15:88:f6:
         7e:92:f8:7a:33:4e:97:0d:2a:b9:ae:ec:c0:1b:08:4d:5b:f6:
         70:08:54:af:1c:54:33:96:41:62:ae:f1:b8:95:91:77:c1:d5:
         14:e6:30:81:98:5c:8b:f1:e2:1c:74:ca:90:26:bd:49:3c:78:
         05:05:de:cb:2c:46:ad:25:4f:f5:34:28:db:f6:aa:36:92:a3:
         63:e5:85:f6:c3:06:ec:8f:7c:9d:1d:9b:c4:d7:49:c4:09:06:
         fc:97:09:d5:d8:51:da:de:f0:0a:5c:55:e5:92:55:73:29:39:
         4b:45:78:f5:f5:47:07:a4:03:e7:8a:9f:18:bd:d8:e2:45:c0:
         0e:c4:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:44 2025 by rpki-client