Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
File:                     1wfkSz_UKAnv_gwP4_VABn04PVY.mft (raw, json)
Hash identifier:          AdofyhWHYCIp35xlWFtIpeMR3sPtHkLyehkYOFZdBZ0=
Subject key identifier:   23:C6:24:63:A0:E6:A7:B2:30:A5:5F:79:A3:15:7B:B9:C0:DA:C1:9D
Authority key identifier: D7:07:E4:4B:3F:D4:28:09:EF:FE:0C:0F:E3:F5:40:06:7D:38:3D:56
Certificate issuer:       /CN=F3690C75AF/serialNumber=D707E44B3FD42809EFFE0C0FE3F540067D383D56
Certificate serial:       0153
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
Manifest number:          0153
Signing time:             Wed 02 Jul 2025 04:46:43 +0000
Manifest this update:     Wed 02 Jul 2025 04:46:42 +0000
Manifest next update:     Fri 04 Jul 2025 04:46:42 +0000
Files and hashes:         1: 1wfkSz_UKAnv_gwP4_VABn04PVY.crl (hash: u9EecS56caGYtypqX24MyI1RKSTEVDcamdBjhQ/HjD0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 04:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C75AF, serialNumber=D707E44B3FD42809EFFE0C0FE3F540067D383D56
        Validity
            Not Before: Jul  2 04:46:42 2025 GMT
            Not After : Jul  4 04:46:42 2025 GMT
        Subject: CN=6864b9b3-e82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:44:a1:4f:10:a5:67:bc:75:35:57:65:d9:
                    4b:4d:84:d7:ae:30:e8:1e:a0:5a:23:86:3f:39:79:
                    93:41:6f:71:e3:92:90:ed:3c:60:1f:4b:3a:7e:a3:
                    45:df:f2:98:d9:7e:06:11:a5:4d:b0:8c:f5:3c:dd:
                    63:e5:13:74:19:ca:3f:1d:fa:86:52:22:01:4b:9e:
                    7f:64:ea:f0:66:e3:eb:9c:18:aa:f1:f7:f6:bd:b6:
                    f9:db:30:88:c9:7a:7f:3d:6e:2b:fd:e5:fc:7b:83:
                    b4:70:b4:20:5e:7f:1e:5c:c8:04:01:1f:81:87:cf:
                    3e:f1:1e:c4:7c:42:95:9e:8f:02:69:90:e2:72:ee:
                    08:d8:ba:23:f2:20:43:f6:ec:cc:03:4a:87:7e:36:
                    74:b7:09:14:94:fc:68:e0:43:e1:c8:8a:10:ae:7e:
                    4b:26:32:bb:7b:04:93:89:48:59:c6:96:4e:70:77:
                    c9:31:06:1b:2c:0b:ec:26:02:52:f3:91:c9:7d:6c:
                    7d:e2:57:07:02:ce:ff:39:3e:c8:e4:96:c2:c6:b1:
                    4a:01:f7:67:03:1c:8e:43:38:99:b9:c6:75:22:be:
                    55:d2:e6:4a:d0:a3:40:bd:fe:31:17:0e:09:fb:71:
                    6b:d5:40:15:7d:f4:be:ba:4c:72:ee:3d:fc:aa:be:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C6:24:63:A0:E6:A7:B2:30:A5:5F:79:A3:15:7B:B9:C0:DA:C1:9D
            X509v3 Authority Key Identifier:
                keyid:D7:07:E4:4B:3F:D4:28:09:EF:FE:0C:0F:E3:F5:40:06:7D:38:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:65:9f:26:72:4c:67:4b:24:fa:5d:ac:ad:f2:e4:3c:6e:c5:
         f7:9e:54:4e:a1:11:7b:c0:8d:20:1e:9b:e9:a6:c7:32:cf:47:
         ce:5c:02:ef:1f:77:c5:10:9e:aa:35:ae:fd:33:a2:2c:46:6a:
         ee:d1:f9:d9:c5:49:2e:43:b6:75:d1:7a:61:17:d9:8d:74:69:
         6b:20:94:03:26:58:05:bc:f5:76:c1:2c:ee:3f:99:98:13:fb:
         67:79:02:88:66:66:ec:b2:3a:8e:33:d3:0a:43:09:c4:e0:2f:
         3c:92:08:10:1d:64:b4:9a:15:e1:6f:cc:ec:53:e6:ed:d6:61:
         9f:a5:67:9d:87:34:85:fb:3a:b6:33:ad:d4:1c:b8:52:8c:2d:
         37:0a:b6:a5:00:1e:06:b3:e2:99:41:8f:aa:c8:3d:a5:b6:8b:
         58:89:b1:77:cf:e6:2f:a3:a4:37:1e:11:7d:39:f2:ed:04:2c:
         b5:09:16:42:da:4d:d1:7b:1a:53:5c:c5:d4:2f:d2:ca:ce:47:
         c5:87:2b:e1:9f:46:18:ae:c1:d7:3e:a4:8c:7d:b3:98:ad:3b:
         e5:4a:e1:8d:3a:a7:84:88:f3:b2:a3:cd:b4:4c:e9:02:88:f7:
         9b:70:00:0c:89:16:ba:45:05:1b:34:ae:d0:9a:aa:4e:65:b7:
         ca:30:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:51:15 2025 by rpki-client