Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
File:                     -dz45IZ0npp0P-Rz662BTRzsX6k.mft (raw, json)
Hash identifier:          3N1/GZGj4ulCTvgxltwz5J0kA5lySGprkETxRifYR1c=
Subject key identifier:   2A:D6:95:BF:62:3B:A1:A7:76:40:72:95:35:3A:20:FE:FE:96:C5:AB
Authority key identifier: F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9
Certificate issuer:       /CN=F36FCD8DAF/serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
Certificate serial:       04C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
Manifest number:          04C2
Signing time:             Sun 24 Aug 2025 02:54:34 +0000
Manifest this update:     Sun 24 Aug 2025 02:54:33 +0000
Manifest next update:     Tue 26 Aug 2025 02:54:33 +0000
Files and hashes:         1: -dz45IZ0npp0P-Rz662BTRzsX6k.crl (hash: ZYr/Ns5HU2FErs+GC10zLUYZXAuqMBx0xQglOMPYkYQ=)
                          2: 60D2AC14E0E211EC817382DAF1222468.roa (hash: //5aRoRjO3zpCQq4iVOAY/MrzQveZBFgcw+KQ8Nh8YM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Aug 2025 00:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1219 (0x4c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCD8DAF, serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
        Validity
            Not Before: Aug 24 02:54:33 2025 GMT
            Not After : Aug 26 02:54:33 2025 GMT
        Subject: CN=68aa7eea-ee15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:da:a9:ec:20:7f:28:7b:4b:d3:2e:58:65:
                    94:04:5b:2f:ea:83:30:3e:2b:63:74:af:4c:ad:f8:
                    14:cb:bc:ec:cf:18:d4:78:e2:12:51:6a:1a:c3:be:
                    d3:d8:e4:46:5f:9e:6a:ab:f2:10:65:76:78:6d:3c:
                    e6:6f:19:86:c8:44:6c:8a:f7:6e:6b:b3:17:54:5a:
                    79:7f:33:91:37:35:d6:aa:b7:68:2b:58:8e:cb:bc:
                    98:e3:c2:9c:7c:9b:92:21:c5:52:50:95:b8:81:84:
                    b1:be:66:07:cd:a0:f4:83:13:d8:55:15:f9:87:02:
                    15:70:fe:8b:59:30:db:bd:8c:fc:ba:cd:74:5d:5a:
                    67:b7:16:b6:ea:2e:30:b3:31:9d:89:e6:9c:dd:b7:
                    46:a7:73:4e:ba:90:6d:7b:63:45:ab:88:4a:64:09:
                    8a:be:15:f6:a1:f0:16:0a:6f:88:95:10:f7:20:9c:
                    32:77:2d:a5:d4:07:bf:a2:c0:9e:0f:cc:5f:b2:25:
                    37:1c:b4:57:6e:07:78:21:41:3d:97:d1:22:32:eb:
                    a3:d6:3d:26:c8:83:c9:92:7c:b9:91:d3:cd:d5:36:
                    35:b1:98:8c:da:0f:ed:22:6c:c7:c7:a2:9f:61:bf:
                    03:4c:d1:2e:dc:cb:8d:85:68:ef:ea:19:2b:ec:3c:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D6:95:BF:62:3B:A1:A7:76:40:72:95:35:3A:20:FE:FE:96:C5:AB
            X509v3 Authority Key Identifier:
                keyid:F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:c3:2f:bc:78:61:41:52:18:ab:9f:80:6c:37:7f:d8:38:
         ab:dc:fe:38:2e:98:53:d9:ad:9a:05:94:3f:28:c4:fd:c1:78:
         7a:c3:d3:a4:1d:49:33:89:5c:b9:08:3e:23:34:b7:33:a9:35:
         23:56:a9:4d:35:0e:00:5e:d4:b9:d6:f6:be:e0:00:26:c2:eb:
         cc:b4:7e:a2:25:21:d2:03:d5:15:86:8f:e0:36:f6:06:84:91:
         3c:eb:ef:ef:ce:7d:d3:04:6b:91:32:ad:52:76:ef:cc:52:38:
         99:94:6d:00:33:19:14:4e:2d:ff:3b:de:2f:8a:4e:99:28:f1:
         a2:fb:09:3a:8b:12:ee:29:f1:10:db:50:52:a3:f2:4b:59:21:
         91:42:66:27:40:2b:e8:13:04:0b:17:17:1c:5f:e6:be:c3:32:
         65:36:d2:3b:0e:b9:2b:d0:72:0b:76:03:1d:65:b1:95:4f:fa:
         2c:85:a8:d5:18:92:b2:b4:b4:26:79:29:15:be:8c:1d:95:5e:
         00:a2:19:5d:48:0f:6a:a0:cf:2f:ae:df:c6:73:b1:6f:35:b9:
         c3:35:2c:c2:a8:57:e0:e5:41:4d:4a:17:a3:5a:b2:3f:1d:80:
         18:8d:dd:ee:ef:2f:55:1c:a1:a9:20:86:0c:12:71:2a:30:13:
         53:a2:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:02:17 2025 by rpki-client