Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
File:                     GAGTeoaGkejdxAoaQ6Y47cyb134.mft (raw, json)
Hash identifier:          t5FvaO39zHKdSGhTA+wxSpyY3DY6bx6QqJtm3Q15onI=
Subject key identifier:   9A:0E:18:14:E4:F0:D4:52:37:06:3D:D7:2E:14:00:7B:43:5E:4F:90
Authority key identifier: 18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E
Certificate issuer:       /CN=F3645A60AF/serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
Certificate serial:       02FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
Manifest number:          02FC
Signing time:             Thu 03 Jul 2025 03:49:32 +0000
Manifest this update:     Thu 03 Jul 2025 03:49:32 +0000
Manifest next update:     Sat 05 Jul 2025 03:49:32 +0000
Files and hashes:         1: GAGTeoaGkejdxAoaQ6Y47cyb134.crl (hash: pNk6K76p+gpHpj8ndV5xJOY6yz8e7ap0ESWwS7GH1/Y=)
                          2: D9BB7DAA119111EE9EC8824F4AD9E6FC.roa (hash: z8n6q+oUQGHtnZrxmlHyDPpdETGxOMXPu63Xt71Wevg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645A60AF, serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
        Validity
            Not Before: Jul  3 03:49:32 2025 GMT
            Not After : Jul  5 03:49:32 2025 GMT
        Subject: CN=6865fdcc-5d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:3a:89:4b:a2:af:c4:8b:b0:b2:6e:58:28:
                    a8:dd:f1:7e:a5:49:71:ee:4e:df:19:75:14:52:1c:
                    27:96:d7:db:49:4d:92:6a:a0:6f:a1:12:f5:e5:64:
                    7d:18:31:a7:f4:ed:2c:1f:56:4d:17:53:c5:17:a3:
                    b5:07:79:6b:9e:17:f7:c0:19:28:1b:e2:42:62:ce:
                    c4:7f:2e:ba:33:89:b3:c8:07:cc:84:14:6b:b9:e9:
                    9d:55:83:81:fe:6e:df:b2:c9:cf:35:0f:3c:ec:6b:
                    cf:49:42:31:ec:28:35:7f:ed:9b:e7:aa:7e:05:ab:
                    32:cb:88:c8:dd:b4:c5:0f:94:71:f6:bb:bf:ff:0f:
                    16:ff:78:59:8a:21:8d:a2:dc:eb:cc:1f:d4:1c:db:
                    f0:2c:e8:66:6a:82:00:27:c1:77:75:45:c6:53:7a:
                    05:80:e7:c1:4d:55:2d:d8:ca:70:b4:ca:14:fb:5c:
                    2a:78:a3:e4:2d:70:4f:ca:b9:c2:75:7d:ce:1c:e7:
                    5d:61:bd:a1:26:71:50:4c:c7:0a:89:96:63:e7:da:
                    26:75:c7:c5:9b:b5:de:d6:41:75:33:3e:f7:19:0a:
                    10:c9:65:0c:00:56:d2:6f:67:f3:81:96:53:ec:05:
                    a1:11:4e:a2:5f:3a:91:73:f5:45:b4:6f:ae:78:3a:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0E:18:14:E4:F0:D4:52:37:06:3D:D7:2E:14:00:7B:43:5E:4F:90
            X509v3 Authority Key Identifier:
                keyid:18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:1b:4f:ef:9e:e7:55:6d:45:18:d3:1a:b3:c4:23:9e:e3:
         37:28:34:12:44:e4:6f:f4:85:93:a4:d2:2a:3f:1e:a5:22:e9:
         7b:24:b7:f3:ec:ac:4c:02:d9:6a:67:aa:9e:8b:0e:cd:8a:4c:
         3d:70:43:52:94:47:3f:9a:cc:dd:60:21:0c:79:51:94:99:2f:
         53:2b:c6:57:0d:07:a8:5c:e6:d7:21:ac:f7:fa:84:df:75:89:
         c0:b9:ad:67:9c:a3:77:70:8e:7f:b8:11:ae:a3:b2:73:8b:e3:
         71:d7:4f:4b:72:67:a5:89:8d:c4:56:66:a7:76:b4:b9:fc:75:
         ab:44:ec:e4:5e:cb:cb:81:c1:2a:3a:7f:6f:0f:6f:30:1a:95:
         df:2f:49:62:c6:3e:3e:f3:32:9c:7e:a7:f8:03:51:35:bd:27:
         12:99:16:45:b7:bd:fd:42:6b:87:da:dd:c2:c5:b5:7b:08:90:
         20:dd:c4:6e:0a:05:c5:a5:86:f0:a4:e0:3b:12:3a:6b:3b:57:
         77:dc:c1:8a:46:dc:53:80:82:fe:00:61:8a:cb:19:af:79:fe:
         5c:fe:37:c3:93:a5:54:74:19:ed:05:4f:a6:f5:6f:01:d6:23:
         14:5a:e2:8a:c1:f5:11:0c:61:47:60:c5:11:ea:90:2d:c8:1f:
         42:87:15:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:30:22 2025 by rpki-client