Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
File:                     3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft (raw, json)
Hash identifier:          UCHPikSfmDUBpqMt1dXvN4B8R1SNkPpnwe9Atsv5We4=
Subject key identifier:   5D:FB:83:40:AE:03:0C:B7:89:4E:8B:48:A1:DE:0D:AE:E2:B9:83:E6
Authority key identifier: DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4
Certificate issuer:       /CN=F361609CAF/serialNumber=DEDA4C4F3A3177BA236CE46BD7FF792E3C6BC3F4
Certificate serial:       07B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
Manifest number:          07B6
Signing time:             Thu 31 Jul 2025 01:54:16 +0000
Manifest this update:     Thu 31 Jul 2025 01:54:15 +0000
Manifest next update:     Sat 02 Aug 2025 01:54:15 +0000
Files and hashes:         1: 3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl (hash: YctiV9TCdX4/Ocvl+hQKUvdIGDCSbdjYel86fb6yO+0=)
                          2: D7A1ECB283EF11EA9BA97462F8AEA228.roa (hash: TlTBwqHEQHiLLbQaXNnmF5UgaA5f3WCBAPGr0I+b64I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1975 (0x7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361609CAF, serialNumber=DEDA4C4F3A3177BA236CE46BD7FF792E3C6BC3F4
        Validity
            Not Before: Jul 31 01:54:15 2025 GMT
            Not After : Aug  2 01:54:15 2025 GMT
        Subject: CN=688accc8-d590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:ee:69:d1:f0:ed:6d:79:2c:5a:fc:ec:dd:
                    b4:6c:da:26:8f:f3:b6:b7:35:f4:57:e7:6c:a7:10:
                    6e:53:ab:f9:cd:42:34:d7:0c:89:e0:b7:3e:b2:ec:
                    d8:d7:ed:8b:05:40:c3:66:72:f5:5c:1a:52:85:6a:
                    ea:e7:89:3c:6e:1b:19:9c:5c:cb:67:68:7c:2a:0f:
                    2f:96:bb:fc:43:76:4a:7b:31:8c:ad:8a:89:c9:2f:
                    24:be:c6:20:d4:b9:01:5b:fd:a4:cb:4c:6e:0e:db:
                    e3:ff:3e:5e:3a:1e:8f:f9:3d:d1:34:79:6c:fc:41:
                    40:e2:79:9d:d4:03:e5:d3:cc:d3:41:1f:d4:f8:80:
                    ca:9a:1e:b5:b0:84:c1:47:28:13:56:02:59:d5:c9:
                    6b:fe:41:85:53:e6:81:10:8c:0b:e9:a8:da:e9:09:
                    f8:08:c4:e9:41:dc:55:e9:a9:60:83:df:78:8b:8a:
                    88:32:53:c6:c9:74:59:f2:aa:61:a2:aa:2d:4c:a9:
                    3b:08:ae:bb:d6:b7:0b:35:f8:9a:4a:d2:7b:f1:78:
                    85:4a:bd:b5:56:16:72:44:04:e2:32:02:31:a4:23:
                    c3:14:5d:7c:00:fa:d7:fd:77:76:65:ed:08:84:66:
                    24:a5:a3:b9:5e:71:e8:a5:86:3b:42:8e:99:6e:91:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FB:83:40:AE:03:0C:B7:89:4E:8B:48:A1:DE:0D:AE:E2:B9:83:E6
            X509v3 Authority Key Identifier:
                keyid:DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:95:05:b6:47:47:1b:be:d6:aa:5b:5e:64:6f:47:01:19:07:
         b9:d6:c3:0a:50:2c:f5:cb:99:2c:20:6f:94:04:24:0f:56:de:
         d1:ac:6c:74:11:fc:19:7c:29:68:a3:1a:6c:1b:9b:be:ea:35:
         ae:4f:c6:1d:f4:58:71:a5:f5:09:d7:1f:18:f5:c0:82:47:6c:
         78:96:fc:c5:78:33:dd:aa:33:b5:0f:a2:83:b3:87:34:bb:ad:
         a4:06:06:03:3d:2c:f3:1d:06:e2:d6:4b:b9:08:fb:47:cd:6f:
         c0:66:4a:5f:a2:69:61:0c:12:5e:1b:17:a8:2e:4e:81:a7:ba:
         55:30:0a:3d:25:f4:83:4c:72:1a:8c:4f:21:01:9a:11:fe:69:
         e4:88:5a:c2:78:b9:c4:ed:95:a6:f2:42:19:69:df:ad:b3:a5:
         b1:95:a7:42:6e:48:98:3a:49:c5:c2:61:08:19:17:6a:43:b0:
         9c:de:44:08:11:50:45:63:ee:63:ea:e3:c6:0b:4c:0b:34:20:
         15:bb:a6:db:47:0f:8f:ce:0f:f5:b9:7a:47:d3:57:aa:27:a8:
         16:29:97:25:49:d0:e0:9c:c4:d6:55:0d:c8:e7:d7:bf:7e:23:
         1d:cd:e9:29:1a:a3:0d:de:7e:d7:d3:26:86:b4:b6:93:7b:b6:
         0d:ab:6a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:22:20 2025 by rpki-client