Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
File:                     GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft (raw, json)
Hash identifier:          KpeR22PMUcpUrIvo+YMcmzZmWzdIh28Y8RWpACasJr4=
Subject key identifier:   32:8F:CD:7E:A9:7E:DB:B0:62:18:93:8C:5F:BB:01:F2:29:EB:97:4B
Authority key identifier: 18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
Certificate issuer:       /CN=F3683B5BAF/serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Certificate serial:       02E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
Manifest number:          02E2
Signing time:             Mon 21 Jul 2025 04:00:11 +0000
Manifest this update:     Mon 21 Jul 2025 04:00:10 +0000
Manifest next update:     Wed 23 Jul 2025 04:00:10 +0000
Files and hashes:         1: GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl (hash: axi/sMA7L4aUcBifyLUVootdkuIoJt9MwMOPwwEbBvA=)
                          2: 87C7C2B035D611EEBE3A3B464AD9E6FC.roa (hash: MtKo8Pihi6475anM5rJMbxhyk73uAQ3ZXlWwhalQKAk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Jul 2025 00:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683B5BAF, serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
        Validity
            Not Before: Jul 21 04:00:10 2025 GMT
            Not After : Jul 23 04:00:10 2025 GMT
        Subject: CN=687dbb4b-d55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:c6:94:44:29:22:e7:ef:75:c1:09:6c:fc:
                    7c:2f:06:fa:4e:e7:f5:b2:43:5a:7a:af:e5:ac:d6:
                    0d:76:c6:70:4f:a8:1f:25:95:5b:c3:b3:6b:99:35:
                    81:e5:0c:ff:a0:75:5d:6f:29:26:76:4a:3c:8f:7f:
                    00:f7:2a:75:7f:74:80:2c:c2:b1:cb:45:63:e8:48:
                    08:35:fb:71:7b:44:c4:7c:0d:4e:09:1b:90:e1:76:
                    2f:00:47:2f:5a:a3:b6:27:37:b6:48:4b:64:d7:c4:
                    18:b9:c7:aa:5f:6d:6c:a3:bf:15:66:67:17:fa:af:
                    86:1b:00:ef:ad:5f:b7:10:26:09:6d:cf:60:f7:b1:
                    ba:b2:cb:e8:6f:6e:2b:c7:0a:1e:45:ec:69:80:63:
                    37:94:a8:e8:61:79:76:b9:2f:fa:ab:ec:35:c4:fb:
                    41:e1:2e:27:37:91:19:b1:24:1d:41:96:8e:50:dc:
                    df:b0:cd:80:6a:6c:67:72:13:0a:90:ce:27:72:f9:
                    44:ef:5d:12:ac:60:3c:66:ed:a0:0b:35:6d:d4:a1:
                    52:78:29:2c:4b:e2:fd:6f:01:cd:3e:b5:6f:f2:a1:
                    8c:e9:05:32:53:3a:3d:e9:eb:42:cd:f8:90:c2:9b:
                    61:0a:d1:7c:bf:48:67:79:b2:7f:86:fc:2c:43:1e:
                    c4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8F:CD:7E:A9:7E:DB:B0:62:18:93:8C:5F:BB:01:F2:29:EB:97:4B
            X509v3 Authority Key Identifier:
                keyid:18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b9:03:d0:c5:1a:72:ae:60:44:24:68:4c:39:f5:dc:f0:6a:
         6e:20:3a:91:be:04:76:79:07:5d:cb:4f:fe:67:e6:de:34:0d:
         8d:31:2e:2e:3f:8b:48:bb:27:43:dd:7a:c1:0c:43:18:cb:ab:
         e8:7e:be:e4:f6:ea:5b:58:bd:ef:dc:2d:09:39:53:19:cc:8f:
         5b:eb:0a:59:42:ce:30:86:a4:7d:26:a2:bd:e9:41:dc:14:71:
         6b:30:c1:c6:43:71:a7:9d:99:e2:de:d3:12:d7:58:93:32:31:
         c3:e8:f0:b0:e2:85:4b:86:09:0b:a6:cd:2b:a9:20:ff:d7:21:
         7b:f6:b0:9c:8e:8e:c5:e0:bb:10:56:7e:ca:41:4e:b7:7d:12:
         ee:0d:55:a7:60:2d:e7:98:02:be:6d:83:f2:63:d0:c2:29:39:
         80:23:0e:63:1c:ff:f8:54:52:c1:a5:ae:79:36:d0:79:aa:38:
         fc:d0:4e:5c:e4:88:bc:94:6e:61:b7:fc:6b:f7:b3:c6:bf:c4:
         8b:d4:a4:bc:8f:e4:81:c2:40:64:2c:3e:21:26:6b:ac:09:38:
         9f:b5:2f:41:a4:45:22:a6:a2:a8:c4:3b:0c:0b:a4:af:2e:81:
         ba:c4:5d:b4:b5:c4:6e:4d:36:4f:41:be:26:3b:15:76:10:72:
         94:6d:3e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:45:16 2025 by rpki-client