Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
File:                     gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft (raw, json)
Hash identifier:          imXfYFZ57L4HToWTFaI/tCOmah/FrItlPAbG3bJVQJQ=
Subject key identifier:   5B:59:F4:A5:42:28:58:78:78:C1:5F:42:F8:CA:1B:FF:E3:B0:B1:B1
Authority key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
Certificate issuer:       /CN=F36DA96DAF/serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Certificate serial:       02C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
Manifest number:          02C4
Signing time:             Sat 23 Aug 2025 04:01:16 +0000
Manifest this update:     Sat 23 Aug 2025 04:01:15 +0000
Manifest next update:     Mon 25 Aug 2025 04:01:15 +0000
Files and hashes:         1: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl (hash: iKh8DP5iWkQJqp7Msh6aSjahXiBc3/xuw/0WLs/uU/A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DAF, serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
        Validity
            Not Before: Aug 23 04:01:15 2025 GMT
            Not After : Aug 25 04:01:15 2025 GMT
        Subject: CN=68a93d0c-6cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:28:27:ac:cd:06:09:6c:42:37:d0:4a:9f:
                    90:b7:b6:9f:d0:33:15:41:26:a3:66:b8:96:1d:70:
                    85:29:02:f2:e1:cf:8e:d1:22:21:a1:2f:51:61:46:
                    b7:38:5a:ea:f5:55:13:ae:ad:ce:a7:9f:2d:e5:c5:
                    1a:88:fd:ea:16:eb:c5:5d:a1:fe:74:c8:50:75:dd:
                    f9:9c:d8:b4:ae:5d:67:33:71:23:8c:a5:93:ac:79:
                    4f:32:b0:3e:83:4b:63:e1:01:f4:ff:3f:ec:16:be:
                    b1:79:1d:e8:77:5e:f9:71:ee:65:28:cc:26:4a:6b:
                    ce:76:57:89:c9:fb:4a:8c:ea:5e:bf:f3:e0:e6:94:
                    6e:b5:d6:7b:05:36:86:74:a4:91:ee:19:f7:bd:80:
                    f8:a9:3a:50:c6:f8:c1:f3:59:61:30:6f:c9:70:80:
                    2e:83:f1:43:2a:5e:83:bd:b4:b4:eb:cb:03:1d:52:
                    5b:17:bf:2c:bc:3f:51:71:f6:00:75:26:55:5e:ef:
                    5d:cb:e5:c4:4d:05:49:eb:55:16:37:8a:e5:8c:ba:
                    14:9f:92:a0:49:6c:3e:1f:00:02:57:27:97:15:0e:
                    3f:24:03:6b:37:fb:fa:e4:91:48:c6:3e:15:3d:5a:
                    73:66:f2:e3:e8:98:12:91:3f:b5:24:55:3a:b2:2c:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:F4:A5:42:28:58:78:78:C1:5F:42:F8:CA:1B:FF:E3:B0:B1:B1
            X509v3 Authority Key Identifier:
                keyid:80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b7:fb:32:37:f9:dd:db:a4:4d:43:ce:fe:19:cf:c7:03:c7:
         63:0e:6b:09:e9:42:59:1b:38:0e:1b:0d:21:2c:e1:cf:be:71:
         5a:3b:ea:11:2e:f1:15:89:dc:65:bb:bf:50:cf:81:32:3f:c2:
         fa:c3:3c:5d:c1:55:8b:15:65:eb:8a:8d:c7:3d:b3:cd:99:7a:
         6d:c1:3d:00:2b:b7:89:7f:fe:0a:15:03:54:9f:61:04:28:f7:
         47:1a:e3:65:f7:b7:8a:df:5f:8b:d3:fd:f4:d6:a4:ec:61:c5:
         04:c6:a3:fc:e1:39:57:bf:07:02:f1:15:63:49:b5:fc:12:a7:
         5c:39:26:e9:20:ca:18:67:42:1d:4b:11:85:e5:27:6a:71:80:
         f4:1c:37:5b:bc:27:69:ac:55:0c:43:5d:17:5c:aa:85:27:7a:
         6b:b6:fd:c8:6b:ec:a7:84:68:0f:58:54:78:a0:84:8d:9f:c9:
         d5:6e:8a:99:a3:a1:ad:39:23:85:f8:28:2e:2c:ce:51:a4:4c:
         a3:00:7d:68:81:bd:68:b4:63:b0:53:4a:c6:3c:52:07:e5:c4:
         40:20:03:c0:c0:de:b7:13:2a:79:b7:3b:b7:30:a2:47:86:bb:
         8d:58:1a:37:c1:d5:6a:c2:b1:47:7c:49:38:8d:13:d4:ee:60:
         ae:2b:fa:30
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REE5NkRBRjExMC8GA1UEBRMoODAzMDc3N0M3NEQxQUYxMjg5ODEwRTQ0RjVGRUND
OUNGMDk3M0EwRTAeFw0yNTA4MjMwNDAxMTVaFw0yNTA4MjUwNDAxMTVaMBgxFjAU
BgNVBAMTDTY4YTkzZDBjLTZjYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPpygnrM0GCWxCN9BKn5C3tp/QMxVBJqNmuJYdcIUpAvLhz47RIiGhL1Fh
Rrc4Wur1VROurc6nny3lxRqI/eoW68Vdof50yFB13fmc2LSuXWczcSOMpZOseU8y
sD6DS2PhAfT/P+wWvrF5Heh3Xvlx7mUozCZKa852V4nJ+0qM6l6/8+DmlG611nsF
NoZ0pJHuGfe9gPipOlDG+MHzWWEwb8lwgC6D8UMqXoO9tLTrywMdUlsXvyy8P1Fx
9gB1JlVe713L5cRNBUnrVRY3iuWMuhSfkqBJbD4fAAJXJ5cVDj8kA2s3+/rkkUjG
PhU9WnNm8uPomBKRP7UkVTqyLHHzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUW1n0
pUIoWHh4wV9C+Mob/+OwsbEwHwYDVR0jBBgwFoAUgDB3fHTRrxKJgQ5E9f7MnPCX
Og4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRBOTZELzc5MEEwNDJDNjZDRDExRUU5NTNFRDE3MDRBRDlFNkZDL2dEQjNm
SFRScnhLSmdRNUU5ZjdNblBDWE9nNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dEQjNmSFRScnhLSmdRNUU5ZjdNblBDWE9nNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REE5NkQvNzkwQTA0MkM2NkNEMTFFRTk1M0VEMTcwNEFE
OUU2RkMvZ0RCM2ZIVFJyeEtKZ1E1RTlmN01uUENYT2c0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUt/syN/nd26RNQ87+Gc/HA8djDmsJ
6UJZGzgOGw0hLOHPvnFaO+oRLvEVidxlu79Qz4EyP8L6wzxdwVWLFWXrio3HPbPN
mXptwT0AK7eJf/4KFQNUn2EEKPdHGuNl97eK31+L0/301qTsYcUExqP84TlXvwcC
8RVjSbX8EqdcOSbpIMoYZ0IdSxGF5SdqcYD0HDdbvCdprFUMQ10XXKqFJ3prtv3I
a+ynhGgPWFR4oISNn8nVboqZo6GtOSOF+CguLM5RpEyjAH1ogb1otGOwU0rGPFIH
5cRAIAPAwN63Eyp5tzu3MKJHhruNWBo3wdVqwrFHfEk4jRPU7mCuK/ow
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:36 2025 by rpki-client