Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          PlffIGHf0LXa4so7Zae4u9dXHu3lDNRX/17O1cYLXQg=
Subject key identifier:   A2:53:D4:FA:D0:BB:E3:CD:90:3F:FD:B5:82:43:F1:0D:F2:5D:EE:69
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       0846
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          0841
Signing time:             Mon 30 Jun 2025 01:45:06 +0000
Manifest this update:     Mon 30 Jun 2025 01:45:05 +0000
Manifest next update:     Wed 02 Jul 2025 01:45:05 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: Fl1y0P2boLE59vF1XHbVQ3h4P7/ffVgxM7UNUVcJQp4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118 (0x846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Jun 30 01:45:05 2025 GMT
            Not After : Jul  2 01:45:05 2025 GMT
        Subject: CN=6861ec22-b09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:3c:88:5f:1e:d9:89:38:1e:30:ae:ed:da:
                    17:fe:7b:a2:69:d2:74:f0:96:48:85:22:8f:93:a4:
                    d2:37:bb:2f:cc:69:12:53:d0:b6:d7:6d:20:99:bc:
                    f9:df:62:a7:9e:1c:e8:69:8a:fd:89:ca:d6:e4:eb:
                    c0:fa:3c:05:46:c6:35:5f:91:43:52:c5:fb:c4:83:
                    b6:c7:19:2e:bc:2a:0b:5f:46:00:f4:70:6b:c5:7d:
                    0b:80:7a:f1:1a:00:cf:d6:80:4c:3a:b0:ff:3d:13:
                    d8:32:e0:59:56:2e:1f:bb:47:79:93:8b:a3:95:ed:
                    36:0d:1e:73:7c:19:09:1f:4d:aa:ee:2d:a8:85:12:
                    d5:ad:a6:78:c6:a6:63:b8:1d:d7:7b:79:f2:b4:49:
                    1f:dd:3c:78:e2:02:3a:bc:cb:51:0a:c5:1f:1f:c1:
                    94:d7:2d:88:af:d3:74:87:9e:7a:f8:20:67:8d:53:
                    cf:1a:fa:d1:b6:41:25:b1:ed:20:81:ca:60:98:5f:
                    ea:f4:9f:37:25:54:eb:a2:74:eb:de:07:8c:23:9b:
                    d3:60:cb:4a:55:05:aa:57:74:a8:ff:7d:4d:0b:fe:
                    87:0b:c4:35:2b:1f:f8:04:50:8a:a9:7c:21:7e:25:
                    ec:da:a1:ff:f8:c9:9a:27:f2:25:12:c7:fb:7e:cc:
                    be:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:53:D4:FA:D0:BB:E3:CD:90:3F:FD:B5:82:43:F1:0D:F2:5D:EE:69
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ac:43:21:3c:05:51:fc:83:6b:36:9d:bd:d3:58:c5:50:da:
         8b:c4:1a:2d:e0:f7:49:78:9a:d7:49:18:ef:69:46:7b:2d:dc:
         92:00:ab:6e:19:c9:4f:d2:21:63:a8:82:73:7f:ca:b5:bd:cd:
         2e:72:d3:ce:35:42:37:72:49:6f:92:dd:66:45:db:a0:6d:d3:
         74:90:78:4a:4f:30:ed:28:63:f9:af:77:fe:b4:08:59:81:4c:
         97:bc:b8:2c:06:eb:6d:4b:fe:00:80:93:46:5e:ef:0a:24:65:
         73:d2:4c:02:0a:43:11:10:cd:b3:b4:65:80:e6:11:66:b3:1a:
         ae:89:1f:e0:5f:29:42:c0:55:1f:97:b6:0f:77:79:f6:f2:bc:
         0d:db:1a:0c:98:7a:34:6c:4e:17:40:da:31:31:c7:e5:e4:4b:
         4b:16:50:e3:14:94:e3:72:07:f9:62:9a:f8:81:33:a6:4e:5a:
         d5:7a:d0:b5:7a:70:c8:12:96:b3:8d:57:5b:0e:22:c8:5b:92:
         9b:7e:6e:fd:71:cf:7b:d0:5e:09:bf:20:b8:dd:48:ba:c8:8c:
         06:0a:e7:25:00:48:ac:9c:4f:48:66:b0:06:0c:1f:40:ea:54:
         1c:d1:1b:cd:c8:4b:98:18:45:2b:ec:95:c5:f1:40:2d:4a:f8:
         af:31:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:39:20 2025 by rpki-client