Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
File:                     C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft (raw, json)
Hash identifier:          4bLa9a5D41aXWW1QDM0qL84Q/NkdzhdnYcfq0++InO4=
Subject key identifier:   86:EA:7C:88:69:60:AB:E8:D1:7E:DB:BC:D4:CD:2E:3C:32:C8:AA:1B
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Certificate issuer:       /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial:       07CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
Manifest number:          07C7
Signing time:             Sat 23 Aug 2025 01:53:35 +0000
Manifest this update:     Sat 23 Aug 2025 01:53:35 +0000
Manifest next update:     Mon 25 Aug 2025 01:53:34 +0000
Files and hashes:         1: C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl (hash: XYzgrq71MgQufTYNlPkrR6Cd4LxNm3Avcv7dW0Ez4ik=)
                          2: C69507C6303111F08DE721DEDAE4EC9C.roa (hash: n1LnT/xuX8ossK6e1Qu5ErVwbY8lo9OUKGVmWsM35RE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996 (0x7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645501AF, serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
        Validity
            Not Before: Aug 23 01:53:35 2025 GMT
            Not After : Aug 25 01:53:34 2025 GMT
        Subject: CN=68a91f1f-eea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:02:1c:ee:9d:5f:97:3c:56:4f:47:7b:bb:40:
                    31:1c:62:7a:8b:4e:74:69:7f:1a:46:8f:f5:4e:47:
                    7a:be:d1:29:c1:23:67:c0:f3:af:6d:b3:22:d9:73:
                    ae:d7:fe:2a:42:55:b2:c2:c0:7a:1c:bd:dc:c0:68:
                    35:24:ad:2b:68:88:2f:f4:4e:5a:99:14:b7:e2:95:
                    e9:fa:82:f7:a5:80:bb:c6:21:74:a9:1b:2c:fc:5a:
                    27:63:52:17:dd:f3:37:70:3b:02:53:91:4f:10:02:
                    3b:9a:80:a9:2d:a5:03:51:39:5e:89:44:15:04:30:
                    d7:72:46:79:96:03:b8:8a:c0:b6:84:b0:7f:e1:1d:
                    bb:91:08:67:a3:6d:a2:42:79:c6:ab:16:37:94:4e:
                    78:d4:4b:3b:ea:c0:f8:38:f5:0f:6a:74:48:dc:b6:
                    c6:8b:9a:fe:03:69:5f:4b:44:af:da:8d:2f:5d:63:
                    d2:23:16:ba:f8:d2:c4:fb:99:1b:ea:25:5f:e2:bd:
                    be:4e:a8:e7:67:cc:69:17:db:62:a2:b1:30:4b:10:
                    e1:e8:05:05:bb:1f:61:7e:90:34:69:ee:0e:9a:04:
                    24:50:3c:d3:86:19:a7:6a:65:8e:b6:7c:15:cc:9d:
                    0c:d6:71:09:d0:a6:2a:20:3f:69:20:ee:b9:9c:c1:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EA:7C:88:69:60:AB:E8:D1:7E:DB:BC:D4:CD:2E:3C:32:C8:AA:1B
            X509v3 Authority Key Identifier:
                keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4d:35:94:f5:48:26:46:61:d6:48:5e:05:fe:cd:80:c1:17:
         b2:55:fb:6f:90:48:34:c8:1e:80:26:05:db:a1:98:53:92:1f:
         05:c8:f6:d5:b3:79:4b:18:f4:d0:11:df:07:ec:bc:02:6e:2c:
         ce:05:b8:2c:bd:b2:d8:2f:0a:2d:1b:f2:28:6f:ec:ab:18:50:
         65:de:5d:b0:ab:d0:49:4d:39:2a:0f:b8:49:a2:3d:e5:00:0e:
         a5:21:1c:91:75:9d:5b:08:a4:fb:8c:c3:c1:14:63:5a:39:94:
         e9:f5:74:e0:ab:bb:91:ad:ec:f3:be:de:31:f4:15:4a:a3:01:
         bc:7f:b1:39:c9:4b:55:cb:b2:89:ec:f3:5e:63:d1:fc:84:02:
         f9:64:ac:86:f9:ec:e8:df:e3:01:a4:e0:bc:1b:e0:63:ab:29:
         2c:47:6e:e3:f5:05:97:5a:cf:5e:84:90:a9:74:9d:d3:b9:0a:
         47:d6:37:04:55:de:cb:83:b6:d1:47:b0:00:93:04:c8:85:be:
         69:34:e6:16:f5:27:12:bd:ca:51:67:1d:21:92:15:48:31:9b:
         2e:60:fb:b8:a2:0b:9d:1d:f7:52:be:60:3c:ee:8b:67:7c:6a:
         fa:83:5b:8a:17:c5:79:3e:bc:2c:0c:17:bb:55:7e:e5:86:d5:
         9d:1a:e0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:01 2025 by rpki-client