Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File:                     hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier:          i0+Utem38Y+Ao4JgD3x2aMxi7/O4UvYb74QhHG0TwQI=
Subject key identifier:   43:67:C0:36:6F:28:B1:26:D1:5E:15:4E:DA:3C:FE:54:5F:66:18:B3
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer:       /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial:       0554
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number:          0553
Signing time:             Sun 27 Sep 2026 03:15:17 +0000
Manifest this update:     Sun 27 Sep 2026 03:15:16 +0000
Manifest next update:     Tue 29 Sep 2026 03:15:16 +0000
Files and hashes:         1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: 9GVetnJEUDMZ2OzJj/bUkM+l+JclTumypCfaPyWJNlo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
        Validity
            Not Before: Sep 27 03:15:16 2026 GMT
            Not After : Sep 29 03:15:16 2026 GMT
        Subject: CN=6ab88a45-855f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:92:a9:1b:59:db:bf:81:fe:e8:b9:c2:74:
                    8e:81:cb:6a:0b:19:e0:49:c1:bf:fc:35:a9:4f:10:
                    e4:ae:14:a3:70:7d:5b:a9:b7:ff:ea:0b:08:a9:86:
                    cc:8a:55:86:5b:26:20:88:94:be:4a:ac:53:9a:86:
                    4e:25:e5:e3:af:7c:1e:c5:f0:bc:59:41:7f:ad:59:
                    2b:54:3a:f6:2f:c4:58:f4:2b:c2:4a:13:53:70:aa:
                    57:5d:10:54:bf:15:80:56:cc:2c:07:d8:73:ac:31:
                    5a:52:c8:6a:08:23:32:5a:f7:22:d9:d9:ac:83:0a:
                    a1:d6:40:8d:15:df:96:5f:d6:e0:9c:af:14:e7:25:
                    55:ab:8e:b2:69:10:58:c8:ec:d5:6d:30:c6:83:ee:
                    fb:46:dc:da:07:d4:d4:93:a9:72:2b:b7:cc:bf:59:
                    b0:98:4d:36:9e:5d:d9:ff:48:80:aa:1e:67:e3:79:
                    00:3f:98:89:cb:78:a2:7d:44:c4:15:4e:0e:a4:5f:
                    15:58:7a:08:64:2b:1a:30:17:98:31:a5:ac:eb:dc:
                    d6:ef:1c:cc:fe:13:3f:44:4f:26:eb:f1:ab:cb:5d:
                    4a:53:f9:c9:7b:26:2f:a7:df:58:f3:17:57:07:81:
                    4b:cc:9b:bd:a0:cb:8a:2f:c6:7d:90:00:38:3d:ba:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:67:C0:36:6F:28:B1:26:D1:5E:15:4E:DA:3C:FE:54:5F:66:18:B3
            X509v3 Authority Key Identifier:
                keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1c:da:f5:74:57:cc:20:f0:d4:89:6e:5e:36:2c:14:74:4a:
         14:70:30:ec:4c:3b:8b:24:6a:8b:93:55:cf:94:e9:b2:8b:35:
         5d:8e:04:0a:b9:af:c6:93:8b:8f:5a:9c:8a:ce:25:0c:12:44:
         ee:56:a8:ea:b7:d3:0b:17:30:00:af:1b:b8:bc:2a:d6:4e:8f:
         89:e8:af:30:67:b6:12:6d:ac:ae:91:d5:d8:1e:a8:b3:55:4b:
         6d:15:af:6d:2c:49:83:82:09:fa:01:38:ee:fc:17:77:25:7b:
         a4:2b:fd:7a:2c:42:5c:0c:c3:c1:f6:a6:41:94:c1:8d:af:87:
         5e:1d:4d:89:72:5e:fb:92:94:98:5b:c2:3a:8f:5f:b7:0c:bd:
         34:10:16:f9:66:d5:2f:46:34:05:a6:04:f5:23:b9:31:7b:27:
         7a:e5:32:12:d6:3d:28:99:ac:d5:28:49:c6:40:88:13:2c:47:
         ab:07:4c:9a:05:67:14:ab:18:1f:b0:5d:d6:55:a5:f3:61:90:
         fe:77:5a:58:5d:fa:93:50:21:53:ec:98:e0:50:ab:f0:db:c8:
         12:6b:88:e3:99:8a:5c:f9:7e:d3:ec:ca:d3:86:8a:b8:92:32:
         72:06:63:4a:55:60:bf:9e:de:84:c3:f7:58:75:43:6d:0f:24:
         c7:ac:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----