Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
File:                     hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft (raw, json)
Hash identifier:          vUN/bBJe+U9hTLM2Ae4VsPMOiYjMWaXrmRm/7SRG93U=
Subject key identifier:   3F:7D:AE:0E:A7:5A:AE:27:3E:34:08:E6:9B:AE:2A:B5:A6:A8:46:63
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       0678
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
Manifest number:          0642
Signing time:             Sat 23 Aug 2025 02:29:08 +0000
Manifest this update:     Sat 23 Aug 2025 02:29:08 +0000
Manifest next update:     Mon 25 Aug 2025 02:29:08 +0000
Files and hashes:         1: hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl (hash: C7/xSci/boPiTw7yzv+Fo6fgHTdmIiDd+Ys+qUEXTJ8=)
                          2: 226E4C7E6F7011F0B3F1A4B8DAE4EC9C.roa (hash: 9codvwYd9Br52IJrts3hHS83FnqqAlQAiRm1pH0EcUQ=)
                          3: BA66E382187811F08601B5D76DB8BCC6.roa (hash: xrkKMEoemFwLFxynJW5/pf7m3USWr81uszWJPf1EKM8=)
                          4: 15C50C50FC6B11EB9A564508D8A014CE.roa (hash: edvjHiFr4+tEmm64tF6z1Z3h19PfKmEG5a35CcgMLjw=)
                          5: 90FCB8B86B9411F081FD9B9BDAE4EC9C.roa (hash: vUAbMNqPUClCaFKVVzlORFxrNoGQZA9TeqanOnR7WP4=)
                          6: 7C4390DE274411F0A1BF9AAEDAE4EC9C.roa (hash: yBSz9Ncf3wrX5w+sZQadKSbDDM9+WXy4dRTX6NzVK2w=)
                          7: 6F610D6EB15211EFBDDE33A8762E951A.roa (hash: hU8BoAyDFHgCQ5xHdbCUfglrlvg4aN+lgDNHGzvLeys=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Aug 23 02:29:08 2025 GMT
            Not After : Aug 25 02:29:08 2025 GMT
        Subject: CN=68a92774-824a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e4:48:01:32:45:1d:4e:60:f4:34:73:a7:76:
                    da:b2:49:b7:db:63:cf:71:8d:fa:c7:73:a5:3a:8a:
                    99:85:34:6f:85:4b:bc:b6:4c:d0:69:68:b7:d5:68:
                    34:b9:91:6e:bf:b6:b0:d0:e9:75:bb:2c:4e:72:e7:
                    a0:60:8f:ac:ab:3f:56:ae:2a:f9:39:5f:d7:b3:9a:
                    da:95:34:c6:b1:a6:26:8d:3c:00:3a:ca:fa:2c:4f:
                    0d:ae:66:2c:4d:4d:f1:d8:69:d5:6a:b4:51:68:92:
                    65:61:a6:e3:13:67:93:e8:a3:c4:fd:0b:04:e5:73:
                    a7:d2:69:41:0a:5f:cf:80:c7:27:76:5c:b4:08:53:
                    1b:61:fa:13:b9:d8:d9:96:c3:68:aa:a8:9f:13:b7:
                    b9:90:1d:0a:c0:e8:89:52:24:46:bb:3e:9a:3d:2d:
                    b6:30:6c:a3:8e:e4:e9:61:80:65:69:ad:ee:79:a4:
                    97:5a:fc:d1:14:94:b2:60:ff:c8:23:ff:5d:7f:82:
                    f7:c0:f6:f3:14:ab:05:a9:72:31:7e:91:c8:aa:44:
                    aa:e4:f0:b3:b4:10:d7:eb:7a:48:77:38:4e:e8:58:
                    99:24:a0:c6:e8:77:3a:b0:02:30:f4:14:46:1b:ad:
                    92:65:83:16:d5:ec:9c:c8:b7:f5:e8:72:90:c1:bf:
                    05:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7D:AE:0E:A7:5A:AE:27:3E:34:08:E6:9B:AE:2A:B5:A6:A8:46:63
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f2:7e:6b:be:f3:a6:b9:61:95:1f:0d:d9:a1:14:a2:c2:38:
         93:01:39:fe:46:82:77:20:66:9a:39:83:4e:c3:fd:29:e1:97:
         96:d8:f5:ea:61:7e:69:db:68:12:60:cc:f3:1a:09:0b:52:7c:
         ef:72:4c:6c:dc:85:66:9f:b6:6b:c9:db:2f:e6:94:63:6e:be:
         0c:94:b7:28:e8:ce:e3:56:7a:aa:9e:e0:d1:56:b4:ff:28:99:
         f4:15:d5:b7:39:7b:10:7b:05:37:3b:53:47:1a:1c:eb:a4:43:
         8e:54:a6:c7:ef:b0:56:38:7b:63:2a:80:c3:3d:3d:b3:19:43:
         ec:ea:8f:9a:dc:2e:d1:66:6d:a1:8e:ed:f0:58:1b:0d:18:9c:
         3c:4e:1c:d4:e6:f1:79:5e:aa:68:8b:26:bd:04:5f:d5:01:79:
         46:99:82:af:d4:b5:c7:e1:80:49:81:d2:23:6f:52:40:c3:f7:
         b0:76:80:de:1c:93:5c:24:ef:ce:66:ff:76:6c:33:b1:2b:1d:
         a8:1d:62:43:18:65:0d:af:57:19:82:56:f9:a8:28:43:e5:6d:
         0b:62:e0:7b:44:a0:20:5e:a2:c5:34:3b:5a:d5:fc:ff:53:43:
         a3:80:63:1d:fd:01:b7:75:af:74:ad:e8:ed:31:f8:2f:70:1e:
         e0:38:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:00 2025 by rpki-client