Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File:                     lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier:          TUY7RdHv/LmGWv4zDXj0IwqvhlCb1v6zC7NICw8IeIo=
Subject key identifier:   2C:46:A0:05:7F:FB:94:7E:C4:A9:46:86:67:DE:02:80:FD:AD:A4:CF
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer:       /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial:       0338
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number:          0338
Signing time:             Sat 23 Aug 2025 03:45:04 +0000
Manifest this update:     Sat 23 Aug 2025 03:45:03 +0000
Manifest next update:     Mon 25 Aug 2025 03:45:03 +0000
Files and hashes:         1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: ZjBxTEQTALo6dmyOcnlgazsRpjz1abM1hgovk062H/Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                          rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAR, serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
        Validity
            Not Before: Aug 23 03:45:03 2025 GMT
            Not After : Aug 25 03:45:03 2025 GMT
        Subject: CN=68a93940-0686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:cb:d7:63:ff:d1:67:ba:06:a2:82:19:b3:
                    d2:2e:b4:c8:39:13:7d:f8:53:1c:33:b0:e6:47:84:
                    ab:99:a6:23:24:0f:13:86:11:06:6f:54:89:04:31:
                    ca:e6:d6:67:2b:2b:cf:bd:8c:09:ca:4b:9a:d0:ff:
                    58:0c:94:09:e5:15:99:fc:3a:1a:b5:6e:f2:f6:e0:
                    97:a9:11:9e:d5:2f:9f:40:0f:40:d5:7d:49:78:24:
                    53:05:f4:57:60:7c:82:5f:d0:19:07:18:46:1c:a5:
                    cb:56:9a:08:c9:c6:64:d7:53:14:43:05:0f:ed:5b:
                    a7:75:3c:55:9f:c5:22:c2:7d:6e:34:0f:68:f2:10:
                    85:42:e8:a7:ab:58:cb:56:f1:44:75:6a:84:99:a9:
                    cb:1b:ae:b8:17:1a:93:8d:42:ae:b7:d2:e6:33:82:
                    7c:ea:3b:d6:b4:9a:4f:94:db:d1:4e:53:a9:2a:ea:
                    a8:39:38:a6:63:d4:8b:50:cb:8b:07:8a:59:8b:d5:
                    10:2f:f2:57:20:c1:e4:7e:2e:d0:93:02:ec:48:51:
                    b4:c7:a0:a0:42:3d:5d:78:e6:97:49:1d:04:86:f8:
                    d3:b6:24:fb:aa:19:15:19:68:ac:11:38:a5:12:08:
                    05:bf:af:c9:f5:30:59:66:19:ea:88:56:30:be:58:
                    19:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:46:A0:05:7F:FB:94:7E:C4:A9:46:86:67:DE:02:80:FD:AD:A4:CF
            X509v3 Authority Key Identifier:
                keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:2f:82:76:d3:64:14:3a:24:12:36:db:34:0a:17:f8:1b:8e:
         e0:5f:c3:7a:63:2b:ef:ef:14:11:a9:c9:31:a2:a6:4a:33:97:
         27:aa:15:ce:70:02:78:41:c5:d2:25:46:f4:6c:20:b7:81:2d:
         66:e7:4d:0a:13:09:18:f5:6e:b7:ab:76:65:68:c1:60:a9:0b:
         a2:3f:2e:51:8a:aa:fc:e2:fb:b9:8b:24:2b:99:78:35:09:a3:
         d0:5c:5b:cb:c0:13:d5:f9:bb:8f:59:80:b2:38:66:3f:29:3f:
         79:ce:12:f9:bc:de:64:42:e7:b3:9b:22:88:86:16:71:f6:f2:
         87:6f:78:cd:75:50:36:1b:72:c7:45:51:43:2b:88:03:61:52:
         5d:90:10:2c:ce:f9:0e:c0:2a:5c:09:c2:75:0a:31:d9:20:69:
         f0:ad:9d:ca:87:6e:a6:80:fe:52:4f:1a:d8:da:34:3b:ee:b3:
         be:3b:67:7b:6e:ee:de:26:01:45:73:7c:61:30:6e:fb:68:ed:
         f8:71:3c:f0:08:2e:cf:28:cd:b6:f4:e5:2f:9b:ec:26:17:e9:
         d3:1c:e6:17:98:3c:9a:b6:14:52:d5:5f:fd:c3:14:06:9e:03:
         4a:98:2a:f9:0b:f4:8a:67:96:6b:b3:94:97:8d:19:f5:2c:99:
         7c:c9:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:55:53 2025 by rpki-client