Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
File:                     iVUnx34gFEZnMJDwgWSPGGEnsbo.mft (raw, json)
Hash identifier:          cbwYTO1A6QDCYXDie/n8jYZ7WOh66h1nM9fy9tFTWCI=
Subject key identifier:   EE:18:1A:A3:B8:01:DD:00:D6:E7:6D:64:4B:01:69:29:01:D6:BD:EF
Authority key identifier: 89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
Certificate issuer:       /CN=F36ED442AF/serialNumber=895527C77E201446673090F081648F186127B1BA
Certificate serial:       0E7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
Manifest number:          0E7B
Signing time:             Sat 23 Aug 2025 00:57:25 +0000
Manifest this update:     Sat 23 Aug 2025 00:57:25 +0000
Manifest next update:     Mon 25 Aug 2025 00:57:25 +0000
Files and hashes:         1: iVUnx34gFEZnMJDwgWSPGGEnsbo.crl (hash: 5FAoZ7booRE7n10wvrDtx18yWFRrGeBxvDVIGfmvIPg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3707 (0xe7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AF, serialNumber=895527C77E201446673090F081648F186127B1BA
        Validity
            Not Before: Aug 23 00:57:25 2025 GMT
            Not After : Aug 25 00:57:25 2025 GMT
        Subject: CN=68a911f5-f280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:04:de:93:e2:59:65:9c:65:3e:d3:d0:e7:
                    af:1e:27:5d:65:9c:b6:df:30:c9:9d:3d:14:71:15:
                    54:e1:08:2c:a7:fe:b8:91:20:7b:e3:7f:26:b7:a0:
                    4b:f9:57:f9:29:3e:e9:e0:78:af:28:d6:01:7a:57:
                    19:d3:e2:d4:a5:2a:3c:0a:c4:f8:17:89:69:3d:ad:
                    07:5c:1c:45:35:55:69:75:1d:bd:10:b0:b5:29:5b:
                    14:92:bc:54:7a:46:f3:20:e7:98:8f:6a:85:38:13:
                    06:38:71:26:68:b3:6f:88:ab:c0:c0:da:df:92:a3:
                    af:4a:d4:06:dc:5c:a8:94:ed:61:f4:02:97:65:4b:
                    98:32:df:3d:f2:12:d2:1f:10:13:be:7a:8b:d1:71:
                    f2:e5:c0:4a:3b:e0:b5:53:b8:ed:bd:00:fe:01:2a:
                    ed:2e:ce:c3:00:ad:86:6b:f7:b5:81:ee:6b:5d:bd:
                    64:73:41:15:d6:91:a9:e5:bb:cf:84:4d:d6:7f:f8:
                    d8:84:d3:a4:b8:86:fd:8b:ec:99:37:a8:0b:09:43:
                    bd:35:32:9d:22:ce:63:85:65:98:80:0e:d3:c8:46:
                    4f:f7:77:3a:e8:19:23:84:58:05:ca:37:1f:13:e9:
                    74:b6:a2:a5:7f:cd:85:87:ef:6e:14:21:c5:29:ba:
                    c3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:18:1A:A3:B8:01:DD:00:D6:E7:6D:64:4B:01:69:29:01:D6:BD:EF
            X509v3 Authority Key Identifier:
                keyid:89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:10:91:9f:60:e2:bb:f5:7e:46:a4:a1:b8:85:94:2f:2a:28:
         82:56:bb:17:7a:a5:83:4c:07:93:d8:54:9d:f2:0a:cd:75:4d:
         46:a1:5a:41:70:53:fb:c1:3e:c3:0c:8a:83:f7:5b:0b:76:7c:
         ba:7a:92:53:fc:b4:d9:86:c6:df:b8:60:b9:e5:10:33:2e:2f:
         fc:6e:cb:a9:16:5d:98:c0:44:6f:a0:d4:0e:b1:e4:42:5b:2b:
         74:b2:83:44:5f:fd:00:08:b6:43:35:1b:b0:9e:c6:05:ae:44:
         d2:1d:e1:31:f0:38:f5:6c:fa:43:0b:6d:92:bf:74:30:13:a3:
         96:7d:cb:4d:d5:f8:b1:6a:8e:e2:b9:4f:41:3e:cc:78:cb:e6:
         2d:5d:04:43:17:c4:1a:4a:5d:7b:90:be:62:a0:b0:12:47:d0:
         7c:cb:3a:43:22:72:cd:45:40:ef:f9:53:fe:bc:cb:b4:f3:bf:
         72:f7:2d:cc:e7:54:79:4e:5b:3b:25:bc:1f:12:57:70:38:13:
         64:23:43:96:0f:00:97:95:98:3f:62:93:66:df:9b:cb:e6:3e:
         b3:f4:a1:ad:2c:f4:1e:00:2a:c6:bc:8a:e7:69:bd:3c:65:91:
         d5:66:de:e0:1e:6e:13:6e:5f:1d:4e:b2:36:4d:4e:fc:48:cc:
         20:51:3c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:30 2025 by rpki-client