Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          Wk7hphWCfO0L1+LwlPz4Gz3iKaopkTJq1ozemwVAC5g=
Subject key identifier:   AE:45:77:38:FF:1C:EE:74:B6:7A:36:8C:68:58:54:46:FA:4E:E2:44
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       087C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          0877
Signing time:             Sat 23 Aug 2025 01:42:43 +0000
Manifest this update:     Sat 23 Aug 2025 01:42:42 +0000
Manifest next update:     Mon 25 Aug 2025 01:42:42 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: uCMYFlcSD9k/qBnFDE9vWViWtslTdCbrD/nWGss7cvo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Aug 23 01:42:42 2025 GMT
            Not After : Aug 25 01:42:42 2025 GMT
        Subject: CN=68a91c93-3248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:71:9a:d9:67:e0:22:dc:be:c3:dd:83:fd:c5:
                    b9:bb:f0:76:38:f3:5e:fa:00:c1:00:c4:53:7b:c1:
                    a3:c9:3c:78:42:d5:f3:82:01:85:43:5a:ea:2d:85:
                    5b:4d:fa:32:33:17:29:50:3e:ae:69:e5:ea:8a:38:
                    ef:1a:9a:2d:e2:17:14:73:72:b1:7a:b3:a8:d4:79:
                    22:6c:a1:87:44:fd:78:91:7c:6b:f4:f5:e9:db:09:
                    64:ed:32:16:95:68:53:2d:0d:b7:e2:45:59:fb:04:
                    ac:26:48:3a:ea:a0:34:57:af:47:56:ee:66:20:63:
                    c9:73:30:0a:cc:25:7d:11:de:d2:70:16:75:89:c7:
                    ed:9b:1e:b7:52:f7:c6:46:72:66:da:8b:5e:7b:da:
                    e9:8d:dd:b1:ff:8b:02:cf:ea:60:b6:67:93:58:0a:
                    c3:3f:49:24:dc:b8:77:c6:7c:8f:8c:1b:6c:2f:af:
                    8a:a5:77:b2:4f:26:4b:5a:d1:8a:16:23:86:60:87:
                    91:fa:1a:f9:44:2e:89:4b:83:a8:f2:20:6b:c3:60:
                    84:14:92:a9:60:3e:9e:23:8d:37:f4:0e:de:f9:38:
                    c9:3f:5d:d3:77:16:e8:1b:85:fd:af:e6:72:ca:b2:
                    6f:1e:49:ab:38:86:61:42:17:0a:da:b0:bd:76:a3:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:45:77:38:FF:1C:EE:74:B6:7A:36:8C:68:58:54:46:FA:4E:E2:44
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4b:ef:88:e8:27:08:59:21:ce:da:b0:53:6a:49:5e:85:1f:
         d7:f4:b0:2a:b5:9a:ff:fe:ed:4a:eb:f0:99:85:58:29:63:19:
         2f:1c:5b:15:ef:20:05:84:21:33:16:29:0c:0a:44:99:aa:ff:
         d8:bc:f4:44:26:c4:16:7c:b9:42:97:72:5b:3f:d0:d1:08:c8:
         71:0d:7e:d7:5d:80:a8:a6:54:a3:1f:eb:98:74:28:fe:c0:47:
         ad:ee:16:a8:58:6a:59:14:9b:c9:a4:ac:8a:df:56:65:ac:1d:
         3b:1a:37:26:56:6b:b0:6b:3d:30:0e:e8:92:97:92:19:16:b7:
         e7:40:70:6b:9f:e6:63:48:d6:96:08:06:eb:4c:35:16:7f:32:
         91:c2:fb:c8:cf:2b:52:f3:7b:a9:a7:4d:20:8a:90:a9:95:11:
         6b:b4:74:c0:52:5d:9a:6c:4f:6e:fc:3d:f8:4b:0c:54:13:cc:
         82:57:8f:f8:2e:46:7d:69:4b:75:26:f9:4a:be:18:19:fc:f6:
         13:5e:0a:c8:97:b9:fb:ef:92:b4:6e:e5:8f:8c:bd:de:1c:90:
         1e:10:72:6f:3b:d3:40:a8:ae:eb:9b:94:01:7c:d2:ab:42:d7:
         e4:65:16:4b:9a:61:aa:4b:cf:f4:16:14:75:18:bd:14:78:45:
         41:7a:22:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:40 2025 by rpki-client