Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          hXZQ4VjOCJQjNcSVyaub/AmsMaTh7lT5iK8kc4CNbEE=
Subject key identifier:   FC:41:13:9C:88:EE:89:63:70:DF:D7:EC:A6:2D:0F:30:1A:67:88:C5
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       08CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          08CB
Signing time:             Thu 03 Jul 2025 01:35:17 +0000
Manifest this update:     Thu 03 Jul 2025 01:35:16 +0000
Manifest next update:     Sat 05 Jul 2025 01:35:16 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: MEQPdVyEG0upkwW+VnGoj8Dr8U7ee91EqsAimFV25O0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 01:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2251 (0x8cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: Jul  3 01:35:16 2025 GMT
            Not After : Jul  5 01:35:16 2025 GMT
        Subject: CN=6865de55-90f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a9:f0:f9:89:ad:3e:6b:35:c3:27:9b:b7:40:
                    b0:10:6b:6a:ab:48:39:5a:32:9f:e8:75:1c:64:01:
                    76:2c:ea:c9:1d:07:ab:63:9e:e7:b2:3a:e3:bb:e9:
                    cf:a8:73:a3:17:29:cf:1c:e3:eb:d6:3b:79:6b:18:
                    22:09:71:b1:7f:71:38:e0:99:e4:6a:ae:1f:ba:eb:
                    5e:64:f6:81:06:a2:76:70:14:ad:5e:38:75:74:bf:
                    8f:7f:7f:bd:b3:18:88:19:05:8d:69:61:90:bd:46:
                    69:33:ab:44:16:87:0c:fa:8f:95:5b:79:6f:60:c6:
                    f4:8b:9f:8d:99:62:08:26:10:c0:fd:a2:71:86:cf:
                    f9:a4:81:0b:3e:86:05:ec:17:50:f0:44:c7:0c:9f:
                    0b:fe:d7:60:d7:ba:7b:1d:1f:42:3d:41:50:69:ce:
                    6f:87:a9:cc:27:4e:d2:85:3e:2a:3e:7f:a0:38:aa:
                    9e:41:56:f1:23:fc:b6:0c:f4:60:ef:33:e7:bb:b1:
                    6c:15:2e:25:b7:ec:10:b3:41:f7:e1:ff:8b:db:a5:
                    99:d3:28:ae:13:23:7b:f2:e6:ed:a6:0c:e5:ca:13:
                    e3:db:3d:91:9d:35:3e:1d:9d:8c:9e:87:aa:47:c8:
                    56:f0:07:74:9b:00:c2:23:23:a8:f0:68:c0:0f:7d:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:41:13:9C:88:EE:89:63:70:DF:D7:EC:A6:2D:0F:30:1A:67:88:C5
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:8b:6f:28:3f:8c:1b:18:3f:3e:19:68:7d:7e:93:f6:11:
         e2:54:d5:56:3b:16:91:ab:6a:44:31:c7:63:16:54:9b:2a:57:
         ca:6a:a3:0a:23:22:86:2c:01:e2:8a:3e:76:b0:33:b2:97:80:
         7d:bf:92:ce:f1:24:70:e6:fb:fe:95:ad:fd:e5:34:3e:3b:91:
         f9:0c:41:bb:3b:f5:52:1f:f7:a8:be:93:6d:65:07:e3:9d:aa:
         9d:84:40:c4:b6:31:e9:cd:11:f3:be:a5:de:2b:aa:08:e3:e2:
         90:60:f8:9d:ac:10:65:ca:3f:9d:5e:f2:59:01:d8:5e:00:52:
         c9:71:ef:c5:95:2e:f8:69:a0:78:83:f8:e3:18:f9:87:ec:73:
         c1:69:3f:3e:49:a1:3f:26:7d:14:6d:57:55:73:a9:6c:55:2d:
         ba:f6:47:55:2c:09:c1:bb:b4:67:ae:97:8f:ae:98:89:54:ad:
         e1:0a:54:43:ad:45:10:c9:65:5c:3d:2a:45:1c:2a:51:f4:3d:
         e5:c9:02:5d:f1:4d:43:42:1e:9e:28:5f:b6:4b:a7:28:15:df:
         da:a9:df:6f:58:3d:58:0f:5c:f1:c2:91:f0:51:2b:c5:b9:4f:
         fd:46:64:9b:87:f1:a0:7c:db:18:48:7c:d2:0c:73:4f:19:62:
         20:03:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:41:58 2025 by rpki-client