Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
File:                     HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft (raw, json)
Hash identifier:          Z4sf1kjeOnUkl7WBAQeNTT4dsUzz2Jh6TyX/aA3vBfM=
Subject key identifier:   88:37:3C:36:EE:37:C6:F9:B3:92:57:8C:06:2B:94:D9:94:A4:37:69
Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
Certificate issuer:       /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Certificate serial:       030D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
Manifest number:          030A
Signing time:             Sat 23 Aug 2025 03:53:37 +0000
Manifest this update:     Sat 23 Aug 2025 03:53:36 +0000
Manifest next update:     Mon 25 Aug 2025 03:53:36 +0000
Files and hashes:         1: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl (hash: B9LiIj1r9KhI18qQouAIqKpGwYWrEAk2E1ASueOrpac=)
                          2: 146B2AA8374F11EE8C7415794AD9E6FC.roa (hash: ctcRoXeX+WjrHPxrmzGzA7un7tUh7u0StB40cjvt+SU=)
                          3: F145B322374E11EE8F129E784AD9E6FC.roa (hash: MBk8OyWgetmt/dAZbGXNZYY9i8llqzp1g5jqzySwP50=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F143FAF, serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
        Validity
            Not Before: Aug 23 03:53:36 2025 GMT
            Not After : Aug 25 03:53:36 2025 GMT
        Subject: CN=68a93b41-76f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:46:5b:c3:7e:0b:37:d8:84:de:02:db:dd:6e:
                    30:95:d1:a7:cb:ff:bf:76:fe:ed:62:6d:47:3b:48:
                    68:a4:c2:55:b0:b9:e9:cc:95:20:b1:c0:38:c7:eb:
                    a1:65:f3:3c:50:92:86:d2:e2:34:1f:06:4f:e6:a5:
                    70:14:da:4f:2a:61:93:f7:b7:e5:c8:b5:8b:9f:0b:
                    3a:30:f4:8a:3b:d1:27:db:d7:c6:12:3c:ca:f7:da:
                    14:27:93:bc:28:94:03:1d:f5:82:2a:7c:72:3c:c9:
                    12:4d:5f:58:c4:a0:40:7e:e8:fe:e5:24:e9:ed:00:
                    0a:71:c7:15:e6:b5:be:b5:b9:b1:38:1f:2b:1b:7e:
                    3d:26:a0:ad:e0:8a:f4:dd:04:19:93:3a:f1:6a:03:
                    16:5d:41:f4:e6:a6:48:be:56:03:c9:87:29:1f:9f:
                    3f:50:2f:de:92:e9:bc:52:16:10:2f:78:48:57:2b:
                    11:e2:dc:ea:3f:0d:55:ec:1c:50:df:8e:da:6a:28:
                    a5:51:1a:9b:94:10:0d:fc:6d:04:a9:1b:5e:a3:32:
                    11:f1:86:14:9d:9a:2f:87:6e:b3:c3:39:48:ec:52:
                    50:d3:05:7c:40:4f:83:9f:5b:2a:73:a5:f1:f6:74:
                    cd:d5:fa:e9:c6:bf:d1:d6:8a:26:0f:cb:a3:1a:98:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:37:3C:36:EE:37:C6:F9:B3:92:57:8C:06:2B:94:D9:94:A4:37:69
            X509v3 Authority Key Identifier:
                keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9f:b0:cd:48:db:90:65:c3:f7:3d:08:45:7d:63:7b:cf:ab:
         a4:ed:5b:ba:1e:c7:ec:9c:1e:97:c0:b1:2d:0e:69:6b:54:a5:
         85:35:58:4c:b7:30:e2:0f:aa:3f:5a:8d:23:01:8a:d0:a4:05:
         8d:0b:0e:b3:9f:b9:bf:51:b8:57:f9:7a:94:b9:8e:16:e5:1c:
         9e:9c:fa:5c:3b:16:09:50:24:7a:ad:c9:c3:2b:6e:90:a0:73:
         6e:65:90:d0:ef:78:65:1e:41:00:b7:75:85:85:ca:3d:32:74:
         11:a5:fc:ae:32:9f:f0:21:52:59:f7:88:5c:56:b7:41:5d:57:
         a3:df:2e:d8:6a:3a:9b:09:31:4d:0c:c8:80:10:d3:50:a4:9f:
         c9:8f:9f:86:60:39:d7:5c:63:20:7e:e2:b7:52:f5:dc:79:a9:
         9c:93:6e:9a:d8:60:4f:bb:85:74:24:e0:8f:e1:0e:1d:99:69:
         7d:4e:97:75:fd:da:89:19:09:09:09:9f:23:4a:e7:e4:b3:1b:
         bd:db:d2:a0:46:b9:fb:21:47:7f:18:69:c5:ae:9e:8b:4f:b1:
         5d:ab:dd:d8:c6:9e:f4:76:32:2b:8d:17:e2:f4:ff:64:01:f2:
         0c:2f:a7:fd:61:d0:f7:fd:24:10:3c:08:91:d8:d4:66:3f:bd:
         bc:06:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:09 2025 by rpki-client