Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
File:                     glG2X8_012csmHWQ58DLZJ1EwhI.mft (raw, json)
Hash identifier:          BuyPMnVcHgO+t+eOwclHpc940aSaEO561rp6/sLBSGw=
Subject key identifier:   F4:0E:60:DE:AD:6B:F3:FE:E0:0A:50:86:44:C2:97:05:5F:29:A6:79
Authority key identifier: 82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Certificate issuer:       /CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
Certificate serial:       0469
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
Manifest number:          0467
Signing time:             Sat 23 Aug 2025 03:06:55 +0000
Manifest this update:     Sat 23 Aug 2025 03:06:54 +0000
Manifest next update:     Mon 25 Aug 2025 03:06:54 +0000
Files and hashes:         1: glG2X8_012csmHWQ58DLZJ1EwhI.crl (hash: Zz8Ll+9orOWu6AEreHibyccCbxar4GS27n+IliRz0ws=)
                          2: 63024F1E28B611ED8CF5BD8AF1222468.roa (hash: 4ljd9pI9G7HxkQ3CSXE8wSNVbsWYc0or91A3WwVt9x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAF, serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
        Validity
            Not Before: Aug 23 03:06:54 2025 GMT
            Not After : Aug 25 03:06:54 2025 GMT
        Subject: CN=68a9304e-2ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:b2:17:24:76:77:16:03:cb:fc:96:68:9a:
                    c3:75:40:02:5b:fe:8d:67:38:f4:9e:76:10:62:cf:
                    07:57:96:6b:a6:cf:8c:00:7c:14:f5:f5:e0:c9:39:
                    ad:ca:22:86:13:f4:79:3f:2c:50:23:b9:45:54:d5:
                    3f:93:c6:68:0c:e1:fa:8a:a2:2c:91:c6:b8:fb:e5:
                    31:40:88:5c:46:ce:4b:0d:b5:e1:02:03:69:a7:32:
                    3b:28:d4:19:65:2f:40:ac:40:18:0f:6c:26:51:fa:
                    91:c2:36:3c:c0:1c:cc:91:20:6f:79:8e:ab:d3:ff:
                    e3:7d:54:3a:c6:a6:f5:51:d4:a9:33:b2:f2:7c:3e:
                    fb:68:13:5d:1c:cd:b3:11:27:04:6b:cb:99:af:d2:
                    a2:99:a9:80:0d:ff:1d:c0:38:35:ad:00:9f:db:16:
                    9e:a1:9e:09:11:90:62:94:74:6b:db:e4:5e:55:8b:
                    00:3a:9f:58:9d:d8:78:4e:3b:b9:d6:40:ae:80:8e:
                    e4:7c:43:98:b3:3f:dc:c8:cc:64:fb:dc:48:db:e5:
                    e7:68:49:74:4f:2f:89:4d:db:79:98:6f:89:48:7f:
                    5a:b9:32:0e:e6:6d:f9:11:11:f8:09:4f:a1:ac:3f:
                    29:27:9e:59:4a:ba:50:7f:c5:63:9c:e0:0b:a1:1f:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0E:60:DE:AD:6B:F3:FE:E0:0A:50:86:44:C2:97:05:5F:29:A6:79
            X509v3 Authority Key Identifier:
                keyid:82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:47:12:eb:3f:a4:1d:0a:7c:2b:1d:52:44:ac:ba:31:ac:91:
         a9:01:85:20:4d:54:d9:dd:2d:c0:d5:a3:35:fa:24:25:cc:b1:
         0e:5d:f5:bc:b3:a4:31:04:1d:11:24:95:5e:f7:de:65:2c:13:
         b3:8f:fa:49:ab:56:e1:8e:11:6b:81:5d:a1:55:1d:b8:78:1c:
         75:7c:d9:d1:15:53:1f:48:26:e1:25:25:09:cc:16:59:d6:73:
         94:59:e0:84:90:b0:92:20:58:43:91:a3:dd:3f:25:5d:60:22:
         22:28:82:97:ba:88:1a:04:b2:53:8d:05:45:43:24:7c:85:35:
         d8:5a:a8:2b:07:75:5e:10:1f:ea:54:a7:04:98:96:89:00:e3:
         f8:ef:c0:41:09:78:f3:2d:62:c2:6f:f6:8e:5b:95:17:dd:dd:
         4d:b2:9d:66:65:75:75:6e:f2:ff:ba:d3:c5:f4:1c:25:19:60:
         7d:46:e5:d0:6d:c6:f0:42:ff:b6:13:4c:39:92:82:37:0b:f4:
         23:71:f4:3f:e2:2d:e2:a0:2a:bb:bd:39:0c:74:f7:84:67:f5:
         77:f1:2b:4e:f5:f9:13:35:be:f2:e1:78:38:3b:18:b1:8a:93:
         27:e1:16:6f:36:34:a1:08:91:39:40:5f:da:7e:4e:27:f2:8a:
         05:3c:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:17 2025 by rpki-client