Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
File:                     fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft (raw, json)
Hash identifier:          IEnErnQneu5mfGIE0gdp3J9Frh9wHw77vsk7xLwkeww=
Subject key identifier:   41:36:D5:4C:1B:D9:8F:2B:F6:07:16:38:B8:68:F7:C3:2D:ED:CB:9A
Authority key identifier: 7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99
Certificate issuer:       /CN=F3670C40AF/serialNumber=7F2AFFE895FD280C96841ECEC0DD7A59D3F2E599
Certificate serial:       08E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
Manifest number:          08E8
Signing time:             Tue 01 Jul 2025 01:29:28 +0000
Manifest this update:     Tue 01 Jul 2025 01:29:27 +0000
Manifest next update:     Thu 03 Jul 2025 01:29:27 +0000
Files and hashes:         1: fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl (hash: qC0hhQTpAj+W+MqrzJ5Pkdhw9TgTDJ8aqu6rZfNBMY4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 01:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2281 (0x8e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AF, serialNumber=7F2AFFE895FD280C96841ECEC0DD7A59D3F2E599
        Validity
            Not Before: Jul  1 01:29:27 2025 GMT
            Not After : Jul  3 01:29:27 2025 GMT
        Subject: CN=686339f8-21fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:47:b4:40:8d:7d:56:5f:5e:a9:53:98:cf:
                    2c:39:e1:35:76:8f:95:63:05:53:49:82:95:a3:44:
                    5f:ed:db:a8:36:d1:16:08:9b:d5:c8:55:3a:11:e0:
                    c9:fc:73:52:75:10:8d:b2:96:df:b9:f7:fd:52:7d:
                    b2:5b:a5:73:2b:0c:9e:0e:d8:97:fd:0b:61:19:f4:
                    08:42:8e:b6:91:0d:de:c8:e4:fc:3f:ce:7c:7e:44:
                    42:b7:2a:7f:f0:03:1c:da:02:b7:1f:ad:3e:36:46:
                    69:00:e4:f2:64:3f:0f:cf:25:08:1e:2b:eb:38:37:
                    6f:9e:01:2c:d8:79:d1:f5:38:78:f3:cd:c1:26:09:
                    b8:85:3e:30:dc:b9:da:47:9f:a0:00:82:76:4f:bf:
                    3c:55:f3:db:fb:83:8d:3e:5e:0c:7b:0e:3c:68:38:
                    b1:fb:e2:1f:24:01:14:b2:56:f4:17:bc:3f:a5:f3:
                    45:ba:1e:72:de:46:f3:b7:93:e5:9f:a4:41:0c:1c:
                    ef:1d:cd:c0:fa:69:c0:42:00:6a:fc:48:e3:15:59:
                    87:e7:43:f6:41:81:03:24:bc:f6:e5:0c:60:da:6c:
                    fe:03:a1:f6:9b:5b:02:3d:41:2f:38:d6:09:5a:4e:
                    9c:25:1b:1d:be:78:fe:c9:01:fa:b1:4a:67:00:6b:
                    e9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:36:D5:4C:1B:D9:8F:2B:F6:07:16:38:B8:68:F7:C3:2D:ED:CB:9A
            X509v3 Authority Key Identifier:
                keyid:7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ec:2a:84:8e:74:40:b0:85:47:70:f6:92:28:f9:51:c0:0a:
         ec:26:c3:2b:8e:91:cd:25:83:47:27:cd:a6:c4:87:d2:10:e8:
         76:23:1a:bc:9d:5f:46:fb:59:df:de:f4:1a:7a:d0:ea:96:08:
         81:c9:0a:11:d9:db:01:1f:74:66:b8:7e:11:90:85:91:24:3a:
         44:9d:a0:d2:df:41:db:ef:1b:0f:12:3d:14:03:ac:0e:04:e3:
         5e:e0:fc:98:b6:49:3f:24:d4:c9:5b:7b:45:b1:fa:3e:de:e3:
         32:cd:be:c6:84:87:d1:d3:95:4e:79:3e:c8:24:72:b8:0b:cf:
         e0:2d:3e:32:aa:13:ad:ea:c3:8b:7c:ba:6d:66:bd:d9:8e:79:
         e0:41:21:70:a5:bb:66:3c:7b:c7:98:89:f7:ce:6e:c9:c8:7b:
         62:e1:ef:97:28:2c:5d:90:34:7d:45:72:60:dd:58:a7:a0:87:
         29:cf:e2:27:91:0f:35:b9:85:8d:83:87:71:18:8b:ce:8a:10:
         48:7c:0f:5e:57:a3:49:5a:75:26:a2:37:7e:95:46:53:bb:6f:
         94:e8:ca:59:62:6c:61:46:65:5f:79:e2:23:d1:01:59:f5:0c:
         e6:b0:b6:1d:fe:7e:e7:df:22:92:ab:bc:42:83:88:2a:3a:d3:
         95:3d:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:43:18 2025 by rpki-client