Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
File:                     mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft (raw, json)
Hash identifier:          NTrr6KGTnzwkIBt9ek6OcpKjkvVk1X2pk/yx0apvRyY=
Subject key identifier:   C5:59:59:7A:97:E6:0B:7D:0F:6F:BC:A7:BA:98:F3:C2:AC:E1:04:42
Authority key identifier: 98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48
Certificate issuer:       /CN=F36B2802AF/serialNumber=98746FFB305C233343308A3895CB70826618FC48
Certificate serial:       0866
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
Manifest number:          0866
Signing time:             Sat 23 Aug 2025 01:44:02 +0000
Manifest this update:     Sat 23 Aug 2025 01:44:01 +0000
Manifest next update:     Mon 25 Aug 2025 01:44:01 +0000
Files and hashes:         1: mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl (hash: Aj+tRg3x+zYzF+z3Bdie/hizSRTiViVGNawIzFUGwo8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150 (0x866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2802AF, serialNumber=98746FFB305C233343308A3895CB70826618FC48
        Validity
            Not Before: Aug 23 01:44:01 2025 GMT
            Not After : Aug 25 01:44:01 2025 GMT
        Subject: CN=68a91ce2-561c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:32:11:74:1a:de:fc:94:0f:21:1f:0b:f5:
                    04:da:2b:56:19:d0:21:37:46:bb:fc:7b:e6:c1:6e:
                    ab:41:ef:eb:20:b7:ff:e4:5c:90:98:31:9a:77:0f:
                    cf:a2:23:23:ff:52:7e:21:4f:6f:e1:f9:cc:01:2e:
                    4b:8d:e6:ce:17:9a:da:27:9c:da:fb:7e:a0:70:13:
                    e8:68:63:a0:44:2f:c4:67:0b:55:18:d8:86:9a:55:
                    27:bb:21:08:97:16:29:07:9d:ad:e6:99:43:8a:28:
                    d2:1c:96:9c:c3:05:0b:53:2c:09:b8:6a:c5:5b:79:
                    5a:9d:18:cd:d7:9e:f8:7c:e4:32:75:72:40:8c:55:
                    7e:0f:bb:f3:c7:35:d6:86:96:d1:da:53:04:c5:37:
                    69:62:ce:d5:81:99:7a:99:a0:e0:db:e5:41:f4:77:
                    9d:59:2e:9f:7d:f9:56:19:e2:3f:db:be:53:b5:3e:
                    88:1c:15:8e:d8:46:6f:15:b6:fa:ff:6b:6f:81:fc:
                    5a:f8:02:47:bd:73:47:9c:6d:fb:0f:51:37:72:50:
                    8f:e5:61:f8:02:f0:f9:de:7a:c0:f5:c2:51:3b:c1:
                    a7:4f:f3:16:7b:66:54:e1:2e:ac:9c:12:49:c3:3b:
                    f0:e6:35:1e:14:2f:88:f2:52:fc:2f:8f:1a:74:d5:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:59:59:7A:97:E6:0B:7D:0F:6F:BC:A7:BA:98:F3:C2:AC:E1:04:42
            X509v3 Authority Key Identifier:
                keyid:98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ce:fd:a6:5c:48:dc:ca:4c:03:8d:0b:83:10:00:1b:f6:64:
         18:1f:fa:a6:c8:d2:f1:5c:e6:47:02:a5:48:7f:1e:81:04:7b:
         80:2f:72:a0:77:5d:5a:08:f1:f3:29:25:3b:72:16:f5:b1:a5:
         7c:6e:c0:05:42:d2:1e:e6:32:14:1f:d5:1d:86:40:7d:41:96:
         f6:6e:e7:a0:a0:a1:8b:f9:50:80:7a:98:73:0a:59:96:02:21:
         10:0f:ea:ca:97:fc:bf:ad:f3:53:1b:ab:ad:be:17:a6:fd:41:
         58:9b:ac:66:a9:86:d7:b2:b8:f4:00:b1:c0:42:70:73:d7:77:
         6d:6a:c8:39:3a:05:3a:f9:c8:11:88:ee:34:cc:13:41:92:9a:
         16:00:b8:e0:30:0d:1d:b2:4a:03:09:ac:90:5d:89:98:11:3f:
         2b:e1:f7:18:bc:36:a1:20:c4:d3:81:fa:b4:35:6a:97:ce:05:
         d1:65:f6:80:be:e6:a5:b1:d0:e0:15:ab:ad:e7:23:d6:05:fc:
         67:02:8c:35:fc:91:5d:65:45:bf:51:07:55:8f:da:c5:b2:5c:
         01:92:9f:2d:04:ff:7e:59:05:ab:fc:e0:df:cd:36:5e:aa:34:
         a0:21:a9:ad:8d:d4:31:68:81:c3:09:70:fa:71:67:f7:19:8c:
         ae:c6:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:54 2025 by rpki-client