Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
File:                     JbZLdh63yNTuwchu-qN5sDvSAGE.mft (raw, json)
Hash identifier:          ZB4BOP/vAyDEZIEtsZnMQM/iCFiANr6AH1yMlhIyCJs=
Subject key identifier:   C2:C0:D1:0D:04:71:35:43:0F:16:EF:2A:DD:9E:CE:0C:90:90:32:D1
Authority key identifier: 25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61
Certificate issuer:       /CN=F369FA36AF/serialNumber=25B64B761EB7C8D4EEC1C86EFAA379B03BD20061
Certificate serial:       0925
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
Manifest number:          0925
Signing time:             Sat 23 Aug 2025 01:25:34 +0000
Manifest this update:     Sat 23 Aug 2025 01:25:33 +0000
Manifest next update:     Mon 25 Aug 2025 01:25:33 +0000
Files and hashes:         1: JbZLdh63yNTuwchu-qN5sDvSAGE.crl (hash: amHppLKSGo/kfJy8Dyrhd6PYfTXwUVbMCSa2lKz8cgs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341 (0x925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AF, serialNumber=25B64B761EB7C8D4EEC1C86EFAA379B03BD20061
        Validity
            Not Before: Aug 23 01:25:33 2025 GMT
            Not After : Aug 25 01:25:33 2025 GMT
        Subject: CN=68a9188e-439a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:51:2a:a7:a9:c1:8a:20:33:7c:ce:3b:98:36:
                    8d:b9:0a:17:3f:73:8d:a8:9f:ee:67:16:46:d1:34:
                    2e:42:d0:13:53:05:7d:b6:3a:4d:bf:7d:7b:cb:68:
                    66:4b:d2:27:0d:23:16:4a:80:2b:46:5f:c0:33:23:
                    ab:aa:a0:73:b3:d5:e5:80:fe:4f:8d:39:ab:f4:5b:
                    4d:f6:61:59:d9:9e:de:b1:4c:0b:36:e5:0b:ef:ab:
                    83:ed:36:7d:06:32:25:cb:85:d0:23:17:8c:57:db:
                    4c:29:f4:e6:6f:fd:10:76:df:25:c3:ca:9f:04:99:
                    28:2b:b1:64:e6:0b:45:4b:92:3f:57:e3:cd:48:2f:
                    ca:c4:86:c1:bc:20:4a:f7:54:d9:5a:74:2a:40:95:
                    35:58:08:ec:be:cd:13:0c:e8:25:1c:62:c8:a3:3b:
                    e9:54:2b:a7:5d:fd:e9:f3:5f:12:3e:a8:d3:e0:fc:
                    bf:94:67:4e:89:be:c6:8f:1b:5d:f1:02:e4:97:b8:
                    de:d8:45:55:8b:91:ef:a6:9a:26:43:74:de:03:ce:
                    66:dc:9d:56:c2:d5:e8:af:36:6b:6a:d2:20:ed:40:
                    0e:ca:ce:8b:74:85:cf:7d:a1:22:d5:19:19:38:79:
                    c2:80:e7:03:09:83:d8:8b:af:c4:ef:03:f9:cc:20:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C0:D1:0D:04:71:35:43:0F:16:EF:2A:DD:9E:CE:0C:90:90:32:D1
            X509v3 Authority Key Identifier:
                keyid:25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6d:70:f1:b5:f0:e2:9f:b2:bc:cc:a6:00:82:74:91:ac:5a:
         33:c5:e5:f3:81:64:2e:64:5a:60:70:44:2a:38:31:bd:bc:93:
         c1:53:39:cd:65:83:c6:c1:71:f5:d7:f7:94:20:3b:a2:21:d9:
         94:ac:e1:e2:bf:be:43:56:d7:4f:61:e0:9b:ae:e7:61:d3:47:
         6c:c3:5b:cd:65:a2:6c:6e:1f:c4:20:69:e7:35:08:90:f7:4d:
         5c:c3:45:b5:7d:56:16:5d:72:69:9a:b3:1f:6c:d6:a9:27:6f:
         c2:34:f0:9d:5d:b2:85:13:58:57:e7:91:3b:f4:6c:51:59:41:
         0d:ac:8f:f2:72:5e:dd:1c:19:f0:d0:50:0c:86:8e:0d:df:b9:
         13:e0:d2:59:6a:73:b1:cb:e7:27:3f:3b:ea:f8:b1:a9:6a:dc:
         3d:25:44:99:fb:bb:eb:2c:ad:a1:bd:7d:58:b5:2f:e6:0f:51:
         05:6f:38:32:4e:61:71:cd:b8:cf:68:8b:4e:64:b8:db:41:43:
         65:90:a1:14:fa:8a:e6:bd:91:14:94:d5:c4:3b:87:eb:ad:44:
         7b:8c:fd:f0:fe:69:04:f2:9f:50:8d:5b:bc:75:b3:06:38:9f:
         17:95:d2:54:fe:3c:d9:72:05:e6:c4:fc:e5:5c:2d:f0:47:ab:
         88:94:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:40 2025 by rpki-client