Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File:                     PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier:          n9IF9dAyv8Nd/YtZKvVqHGOD1nrjcS6HnD/gXUqnGJs=
Subject key identifier:   29:6A:10:BE:80:E8:59:ED:20:70:2D:0D:FF:1F:80:10:AF:FF:8F:D7
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer:       /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial:       0337
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number:          0337
Signing time:             Sat 23 Aug 2025 03:44:51 +0000
Manifest this update:     Sat 23 Aug 2025 03:44:50 +0000
Manifest next update:     Mon 25 Aug 2025 03:44:50 +0000
Files and hashes:         1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: YryadISRaCyMGGTh5c6stegIdXuEiMgZwspiU4h0Y1E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAF, serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
        Validity
            Not Before: Aug 23 03:44:50 2025 GMT
            Not After : Aug 25 03:44:50 2025 GMT
        Subject: CN=68a93933-3a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1b:1e:f4:22:e1:e9:6f:a9:da:4d:db:7c:2e:
                    ee:94:93:a7:f3:4e:87:dd:30:1a:89:81:99:81:9e:
                    63:c3:2b:e8:5a:0f:b8:ea:ab:75:04:75:44:a0:d3:
                    19:e0:a1:27:5d:26:03:22:9c:a3:d1:65:a7:1d:dd:
                    50:3c:57:01:6a:c7:8f:06:fc:ae:0c:72:03:44:06:
                    28:d3:47:cd:f2:a4:c8:15:c1:4d:66:51:f4:60:08:
                    dd:ac:0a:53:fa:91:7a:f2:e0:e6:29:c5:ce:7e:c6:
                    ff:09:75:8e:d2:9c:17:0e:8b:96:27:04:14:eb:97:
                    77:31:e9:83:15:c8:69:f3:24:ee:54:18:85:ee:be:
                    88:a3:ce:c6:ad:83:79:80:9c:1f:e1:24:f3:1f:bc:
                    b4:c6:f2:74:86:85:fc:67:bb:ad:d1:ee:23:08:a8:
                    e6:60:8a:4a:05:f1:82:fc:e0:00:db:48:07:d1:f7:
                    bb:c4:1b:76:8b:b3:26:bc:d1:1d:6a:a3:1d:cb:03:
                    c8:7e:4d:6c:87:cc:37:f1:ca:31:a1:f5:1d:07:0d:
                    1e:0b:f7:7d:b1:4a:dd:13:29:bf:69:cf:8a:93:a3:
                    e1:4e:b0:01:7c:bb:71:28:af:d9:da:d3:c0:57:9c:
                    c3:0e:a7:dd:08:e5:2a:3c:7e:29:38:64:a5:d8:bb:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6A:10:BE:80:E8:59:ED:20:70:2D:0D:FF:1F:80:10:AF:FF:8F:D7
            X509v3 Authority Key Identifier:
                keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ce:d0:d7:ae:dc:51:2b:41:18:c8:18:cd:7f:5d:2a:2a:ec:
         dc:10:99:ef:86:2d:eb:5b:e3:ea:0d:9d:a9:4d:a1:2e:d0:4e:
         5e:19:9b:09:66:bb:73:dd:78:f1:44:92:84:e0:c1:c9:b2:f2:
         5c:ba:c4:a2:01:c9:ad:26:1e:2c:3d:d0:e5:60:7b:6f:6b:4a:
         d7:e0:50:34:8c:0c:a3:fe:3b:dd:2e:83:e1:fd:7b:55:89:73:
         6c:0f:f4:87:0a:7c:25:df:af:04:b0:20:ea:de:82:92:7f:01:
         21:d8:30:8a:07:f4:42:67:e9:52:01:53:98:eb:45:d4:9e:c9:
         3d:9c:ea:31:2e:cc:77:8b:2c:50:ad:06:8f:12:57:03:d7:37:
         07:f0:01:f0:20:ed:9c:7e:54:ea:81:de:c2:d4:13:bc:71:00:
         e8:86:33:87:26:6c:94:de:2c:2b:8d:ea:ae:1e:bb:81:9b:2d:
         a6:c9:96:6f:33:29:03:a0:08:c4:08:28:56:d5:73:d3:97:8f:
         c2:d6:5b:64:6b:de:49:b6:de:3b:18:d3:63:25:58:1a:80:77:
         45:7e:5c:92:09:9f:fa:f1:d6:3e:5f:1d:c5:c6:55:71:f3:e1:
         69:2f:2b:28:48:5d:e7:97:15:4b:e7:f7:50:02:78:97:21:f9:
         6e:ea:7a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:52 2025 by rpki-client