Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
File:                     i-GoLMm4kURYOcv-vplg8wM9pUI.mft (raw, json)
Hash identifier:          6rPLJ+WmY2anFtB6RcZGBTd+UTG+u6GWKQ5poW8QFBk=
Subject key identifier:   A9:3B:F5:CC:39:68:ED:8F:E1:C7:42:FF:0D:07:9A:08:3B:CD:F4:B8
Authority key identifier: 8B:E1:A8:2C:C9:B8:91:44:58:39:CB:FE:BE:99:60:F3:03:3D:A5:42
Certificate issuer:       /CN=F365FABERI/serialNumber=8BE1A82CC9B891445839CBFEBE9960F3033DA542
Certificate serial:       3A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
Manifest number:          3A
Signing time:             Sat 23 Aug 2025 05:20:02 +0000
Manifest this update:     Sat 23 Aug 2025 05:20:01 +0000
Manifest next update:     Mon 25 Aug 2025 05:20:01 +0000
Files and hashes:         1: i-GoLMm4kURYOcv-vplg8wM9pUI.crl (hash: RQdp8rZBeg+l5W5NN0h7ayiFMNrOWRqi3YIGX8VDgbI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
                          rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FABERI, serialNumber=8BE1A82CC9B891445839CBFEBE9960F3033DA542
        Validity
            Not Before: Aug 23 05:20:01 2025 GMT
            Not After : Aug 25 05:20:01 2025 GMT
        Subject: CN=68a94f82-81a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:65:41:77:2d:26:53:22:b9:89:b7:6a:c3:d0:
                    2f:64:fd:48:89:3b:74:84:b2:ff:4c:2f:20:13:13:
                    27:d9:57:dc:fa:cc:2f:00:75:e4:0e:81:16:eb:57:
                    8a:8c:87:24:a9:4a:77:78:cd:06:f7:b6:d7:14:cc:
                    f8:5d:41:e3:05:35:50:91:3f:2e:04:55:9c:63:c9:
                    d6:c9:4f:85:d5:4f:5d:94:aa:cc:3a:af:fc:d8:0c:
                    da:03:20:97:72:9c:ad:d3:89:cf:7f:89:0d:8d:48:
                    36:0b:77:a5:49:2c:cf:3c:d6:bb:68:81:c6:03:6e:
                    cf:f3:27:29:de:a2:21:3d:5d:c4:18:16:43:2d:59:
                    d6:a9:f9:38:39:0f:8c:ad:a2:ab:59:c5:ad:8f:2b:
                    4f:dc:4c:32:c7:86:fe:43:83:b1:9d:66:4c:b2:07:
                    89:d3:42:be:0a:8b:5c:eb:45:64:83:fd:76:cf:ae:
                    6e:5a:a7:8b:da:ff:ea:5f:1f:5a:08:d6:48:cf:5c:
                    c1:43:31:74:df:5a:0b:cd:9b:7f:d5:f7:a8:b5:b7:
                    f3:9d:42:42:56:39:19:ce:68:d5:ea:a6:3a:2a:b8:
                    ed:78:a3:29:9e:b2:8a:3d:4a:e8:0a:51:98:03:19:
                    f1:2a:85:56:47:19:16:be:d0:53:a5:bc:84:2a:1b:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3B:F5:CC:39:68:ED:8F:E1:C7:42:FF:0D:07:9A:08:3B:CD:F4:B8
            X509v3 Authority Key Identifier:
                keyid:8B:E1:A8:2C:C9:B8:91:44:58:39:CB:FE:BE:99:60:F3:03:3D:A5:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:8d:a1:ed:50:8b:96:cc:01:fd:c6:db:27:0f:d5:bf:7d:
         43:82:c9:07:72:d7:05:c3:e2:2d:b6:12:ba:77:53:4e:58:14:
         63:20:ba:03:d6:c2:b5:da:82:b0:60:c5:66:46:7f:38:74:04:
         ff:67:b0:3a:ad:16:02:e4:f4:d6:1b:2b:23:79:4d:fa:2d:13:
         3b:bc:43:41:9f:e9:68:06:0a:82:cb:20:88:96:bd:b6:d8:25:
         6e:17:d7:a3:0b:90:09:6c:7b:84:b1:1e:b3:7a:96:b3:9e:c3:
         fe:6d:7b:64:28:73:c1:88:c6:e7:57:d3:28:a5:3b:9b:e8:25:
         8a:dc:27:f5:2c:3a:b8:7e:da:db:8d:85:fe:3f:0c:52:c5:06:
         86:67:dc:14:5e:cf:9c:73:ac:b3:28:41:a6:08:d9:55:44:b7:
         70:d3:e8:9f:e2:9e:75:45:03:06:1f:4e:d9:1a:65:b9:f8:f9:
         2e:c1:a6:8f:57:56:69:3b:82:fe:c3:4e:e3:46:64:73:0f:b6:
         8b:7a:0b:2e:1d:89:86:1f:65:15:29:8d:9c:32:d4:bd:8d:f5:
         18:1d:dd:fc:10:89:14:e1:b9:16:77:6c:eb:0e:cd:41:15:78:
         f4:11:ac:66:84:e8:0c:7d:ae:1f:2a:d6:91:31:51:f4:d0:5d:
         66:81:85:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:10 2025 by rpki-client