Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
File:                     OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft (raw, json)
Hash identifier:          yAW52O/IgjKmlHIBYH9Qp8iHv5nhsjuDB4jvu58ZfUU=
Subject key identifier:   F6:1A:7E:09:82:BA:19:F3:2D:71:81:6D:DE:11:0E:46:60:A5:82:F3
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Certificate issuer:       /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial:       0322
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
Manifest number:          031D
Signing time:             Sun 27 Jul 2025 03:52:38 +0000
Manifest this update:     Sun 27 Jul 2025 03:52:38 +0000
Manifest next update:     Tue 29 Jul 2025 03:52:38 +0000
Files and hashes:         1: OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl (hash: yZ6qvep+Gb/cFAL0z7UTxEKKlxBnt1TY06nH0zh1rVo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
        Validity
            Not Before: Jul 27 03:52:38 2025 GMT
            Not After : Jul 29 03:52:38 2025 GMT
        Subject: CN=6885a286-e684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:c8:6e:17:73:9d:da:00:62:b6:9c:7f:35:
                    09:f8:23:8a:c6:7f:98:1b:b0:21:44:96:71:52:79:
                    1d:c8:51:f3:7f:2c:7d:ea:0e:df:6b:40:19:37:9e:
                    74:ac:55:27:e9:a6:8c:6c:71:a8:74:52:d4:8e:6d:
                    29:38:bc:e9:bd:65:65:c9:f3:b1:59:31:0e:73:70:
                    57:88:9d:2b:96:52:95:00:77:27:37:d1:e7:c4:92:
                    c7:0e:b0:93:dc:f8:be:4d:08:ca:dd:a1:6d:ac:26:
                    83:e3:fd:d5:70:9a:38:f0:de:36:76:37:74:20:80:
                    f8:da:32:dc:eb:4d:7b:d8:ad:32:30:dc:99:07:56:
                    a8:5f:7b:1a:f7:ae:77:5a:9b:ba:1b:83:17:2e:09:
                    21:b4:97:24:13:6a:19:2b:fc:da:78:8f:95:28:3a:
                    4b:1f:ea:b9:d5:58:8d:14:f1:49:1e:f4:37:9f:df:
                    14:b2:79:b5:b3:3e:ac:18:02:4b:4a:95:38:17:9f:
                    b0:fb:74:5d:42:b2:d2:7d:d7:15:18:ca:64:03:08:
                    82:f3:2a:eb:33:a1:ff:79:d1:75:9a:f8:c0:bf:e4:
                    78:d7:a6:73:a7:e6:45:09:e3:47:e4:60:ca:82:a4:
                    47:e5:0d:65:6e:70:f9:cb:00:bf:20:20:f4:4e:bc:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1A:7E:09:82:BA:19:F3:2D:71:81:6D:DE:11:0E:46:60:A5:82:F3
            X509v3 Authority Key Identifier:
                keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:67:52:f6:f5:e8:ba:4a:6b:ee:68:3d:8a:b9:f2:a9:3f:c2:
         7b:b7:65:b7:bd:8a:20:60:ad:69:75:ac:cb:87:a7:20:05:3b:
         5e:a4:4e:8f:6d:99:29:d9:76:95:67:d2:b4:26:f3:80:1b:c1:
         8b:97:56:83:b4:60:0e:57:44:45:9e:72:a2:f2:f3:24:10:42:
         61:e5:c5:98:00:9a:31:1e:96:fa:2e:13:c8:be:ed:0e:f1:e6:
         99:e1:99:3c:eb:be:66:8e:6a:ea:7c:a5:30:8a:6d:4a:38:d3:
         5c:b6:a6:df:91:47:37:ce:03:a0:03:32:b6:b1:2c:ab:71:5f:
         a8:bd:d2:01:81:54:35:9c:79:42:7d:4e:e2:81:94:7f:ba:1f:
         dc:56:93:e2:ba:13:13:6c:02:6c:98:ef:1f:95:be:87:82:24:
         95:bc:f9:b0:86:f4:21:f6:48:d7:26:35:e9:53:85:d6:34:7c:
         c3:b2:1d:15:74:40:20:43:4c:2d:07:53:2a:0d:0b:07:ad:ba:
         73:5b:5c:ae:9a:48:f5:8a:ad:5d:3b:9d:3a:14:c0:07:38:03:
         50:02:5a:85:b6:4b:f8:7d:24:3d:e9:e2:d3:6e:61:6f:46:68:
         55:38:7b:45:3f:fb:85:d7:47:4f:fb:c8:35:e7:b9:52:aa:7a:
         93:67:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:14:42 2025 by rpki-client