Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
File:                     GAGTeoaGkejdxAoaQ6Y47cyb134.mft (raw, json)
Hash identifier:          fqDRN9DNbh12WnPVd1Fu+MLd6WUUCOUUIUaLuqVwxMM=
Subject key identifier:   97:74:9A:1C:24:47:6C:02:8F:C8:B7:92:09:5B:91:7E:9F:C3:C6:BB
Authority key identifier: 18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E
Certificate issuer:       /CN=F3645A60AF/serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
Certificate serial:       0330
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
Manifest number:          032F
Signing time:             Sat 23 Aug 2025 03:48:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:48:20 +0000
Manifest next update:     Mon 25 Aug 2025 03:48:20 +0000
Files and hashes:         1: GAGTeoaGkejdxAoaQ6Y47cyb134.crl (hash: TkOPRL1zyGkzJyn40X7bBr0V/lEDnLWYXSYGG1UmV4c=)
                          2: D9BB7DAA119111EE9EC8824F4AD9E6FC.roa (hash: z8n6q+oUQGHtnZrxmlHyDPpdETGxOMXPu63Xt71Wevg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816 (0x330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645A60AF, serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
        Validity
            Not Before: Aug 23 03:48:20 2025 GMT
            Not After : Aug 25 03:48:20 2025 GMT
        Subject: CN=68a93a06-32a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:7d:bd:a4:e3:8f:19:e1:c9:fb:6d:45:26:
                    38:f0:3b:3e:09:da:90:63:50:cc:47:68:f8:66:38:
                    46:cd:3a:68:04:6a:30:8d:21:06:ee:62:b2:45:4c:
                    3b:0a:95:f4:17:2d:e1:72:5c:92:a8:8e:2d:88:30:
                    cd:85:e2:27:15:0d:a4:56:50:b0:64:14:55:ae:31:
                    82:51:22:3b:92:22:dc:72:58:5a:1e:fa:5d:2a:5e:
                    7f:d4:b6:0a:47:f5:36:0e:7d:8c:7f:fe:fd:f9:65:
                    ff:00:de:a8:9e:3a:73:85:47:b0:62:69:14:10:8d:
                    ad:24:c6:e6:92:02:6b:6c:8b:cf:72:42:2d:04:88:
                    fe:a2:0e:20:5d:3d:85:61:67:c0:34:80:8b:1f:5d:
                    e6:ed:f3:79:c8:3e:a3:68:e5:ce:6f:33:a3:16:c2:
                    71:27:15:6a:85:cd:50:46:a4:9d:6e:15:2b:1e:e3:
                    0a:77:cb:51:5b:76:70:fa:01:c2:38:d3:29:97:30:
                    4a:90:14:17:f3:b3:7a:70:92:4a:8e:0c:2a:0b:f7:
                    e0:fd:fc:83:73:a4:7c:05:67:50:e7:49:8a:52:fc:
                    1e:66:03:dc:f8:31:13:db:5b:af:df:e7:e5:08:e2:
                    53:34:84:51:d1:f1:b2:88:da:e6:32:4c:6d:9d:d7:
                    e7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:74:9A:1C:24:47:6C:02:8F:C8:B7:92:09:5B:91:7E:9F:C3:C6:BB
            X509v3 Authority Key Identifier:
                keyid:18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ab:2b:07:88:d7:8a:6c:e2:f8:39:69:ce:6c:f8:47:ef:2f:
         25:4d:f4:e7:d3:57:bf:b8:50:be:53:48:c7:74:8b:17:3b:07:
         60:39:56:ff:d7:a8:7e:49:cd:fa:df:da:1b:9a:a8:d3:85:08:
         4f:87:91:04:b7:19:db:29:5f:e1:ef:a3:95:05:21:4e:87:f0:
         8c:94:f0:db:50:da:58:86:59:de:ef:bf:37:75:ae:ab:2f:4a:
         63:f2:8c:cc:62:ef:e8:de:4e:50:41:45:75:e7:68:36:90:33:
         79:8d:26:09:02:08:3a:fa:b6:97:ae:0b:37:4a:ae:22:7c:bc:
         63:f1:c7:f1:31:70:5b:27:92:b2:49:2d:c0:46:c1:7c:a3:b9:
         a0:a2:5a:98:22:56:e6:c2:f6:d3:5d:18:2b:da:be:1e:06:32:
         48:ff:12:3c:f9:c2:4c:31:f5:f5:9e:63:2a:6b:1b:4b:0c:98:
         ea:93:bf:6a:a7:6c:e2:72:d8:03:b7:c3:70:b1:35:93:86:fc:
         f7:1d:0e:f1:11:75:9d:4a:b9:32:9d:0e:34:04:21:85:aa:f5:
         e8:9d:bf:c4:32:d0:aa:e2:83:9a:0d:9a:97:af:8a:f1:8c:5f:
         a5:9f:e3:a1:e2:be:f3:1d:f6:0a:c3:79:2f:6d:1d:a3:68:7c:
         8e:1a:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:59 2025 by rpki-client