Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
File:                     tqq1AixPm4Kp_ukaPUxdheRtiR8.mft (raw, json)
Hash identifier:          2b3sNIGu7loevmWJLdUu/2gzhrW0xryEJDI08xhApYA=
Subject key identifier:   58:B8:EF:F7:64:4F:F0:26:8C:C3:4D:B3:AA:C0:85:37:5B:76:C7:2D
Authority key identifier: B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F
Certificate issuer:       /CN=F3644FCCAF/serialNumber=B6AAB5022C4F9B82A9FEE91A3D4C5D85E46D891F
Certificate serial:       04D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
Manifest number:          04D4
Signing time:             Sat 23 Aug 2025 02:53:32 +0000
Manifest this update:     Sat 23 Aug 2025 02:53:32 +0000
Manifest next update:     Mon 25 Aug 2025 02:53:32 +0000
Files and hashes:         1: tqq1AixPm4Kp_ukaPUxdheRtiR8.crl (hash: KE1pzjrUiS6IjBFDX6AinCJF2DkoWYW4lClRHBmchpk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1236 (0x4d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FCCAF, serialNumber=B6AAB5022C4F9B82A9FEE91A3D4C5D85E46D891F
        Validity
            Not Before: Aug 23 02:53:32 2025 GMT
            Not After : Aug 25 02:53:32 2025 GMT
        Subject: CN=68a92d2c-f8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:01:02:c5:1b:bd:d3:8a:9a:a5:df:cc:30:
                    24:3f:eb:b1:68:64:eb:84:17:b5:65:34:37:eb:e2:
                    5b:90:50:fa:57:78:38:9a:60:18:a5:08:b6:32:5a:
                    e8:6f:17:63:e3:a0:a8:d8:0c:e7:28:d3:64:91:93:
                    7e:9c:14:71:2b:6f:48:75:80:dd:1d:c4:a0:38:c5:
                    10:ef:f2:de:5e:37:21:17:48:8d:9a:a8:96:b0:7f:
                    00:6e:c9:9e:5a:d4:33:62:f1:3e:31:53:85:fa:3f:
                    a8:1c:cd:47:74:45:45:33:4f:35:26:c2:d2:45:f0:
                    93:66:13:4a:dc:b3:81:51:9e:50:36:33:97:60:47:
                    d0:83:f2:e8:c6:33:96:49:cd:41:ff:4f:e8:f4:f8:
                    7a:e1:e2:9a:93:b2:8f:c2:af:86:78:b0:81:e3:1e:
                    37:27:b4:cb:42:f4:10:61:2d:09:21:61:64:45:c0:
                    d1:82:77:1e:e2:11:84:c1:58:27:d5:82:b5:ef:71:
                    24:b7:c2:76:e1:91:73:5f:9c:5a:83:49:93:1d:1f:
                    d0:fc:fd:36:ed:24:3b:8f:5b:5f:79:67:6f:5c:29:
                    34:51:79:e7:79:f2:b5:ab:e7:92:86:56:2a:f1:52:
                    ba:a6:c1:6d:60:79:34:4a:9a:78:62:98:b9:4d:19:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B8:EF:F7:64:4F:F0:26:8C:C3:4D:B3:AA:C0:85:37:5B:76:C7:2D
            X509v3 Authority Key Identifier:
                keyid:B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:81:19:d8:fb:a7:4c:2f:68:4a:1d:3f:38:de:3f:ae:51:91:
         11:eb:43:70:09:e3:6a:6d:9f:f6:2c:3d:99:6f:84:87:07:7f:
         c6:95:fa:4f:53:ce:8e:45:23:94:30:da:f0:cb:0d:20:bc:0e:
         f4:73:b6:28:5b:fa:f5:7e:bb:a9:9c:00:c2:a1:fb:e4:f9:c6:
         a0:fd:64:9e:25:67:80:91:72:9e:e2:63:f9:57:15:66:a0:10:
         68:20:b8:10:40:78:52:56:c0:20:c7:68:bc:0f:73:88:f2:03:
         f2:f2:89:1c:27:6a:0e:a3:11:4b:f7:92:41:e2:47:8e:94:7b:
         80:d5:14:59:48:6b:ce:98:2a:fc:14:44:da:93:38:d9:62:e5:
         d8:c0:5e:90:c6:8c:7a:57:c9:03:5e:a3:a6:38:54:ca:0e:eb:
         b7:c8:bf:45:9e:35:60:e6:92:2f:9f:67:73:53:17:f0:8b:79:
         23:7f:c2:66:88:aa:24:27:e7:6d:fc:46:a2:08:4a:c1:99:2e:
         58:79:16:4a:bb:e9:fe:c1:f5:bd:52:e8:ab:d4:17:ad:b6:29:
         dd:12:de:2f:71:19:23:c4:50:65:be:c0:70:3b:eb:bf:b4:2f:
         92:e2:17:ce:f2:b6:ed:46:01:e3:2f:f8:3b:53:ac:00:e4:be:
         78:d3:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:37 2025 by rpki-client