Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
File:                     0JparVoXc9hrHSbdXRxET8ys9uQ.mft (raw, json)
Hash identifier:          l4UZ3LC2nNtBxMIoItWxKL99aWwKuAG0AHuOmhFUCew=
Subject key identifier:   11:3D:AB:2A:9D:D5:EF:CC:B5:BA:97:2D:DE:EA:33:E8:B3:8A:03:DE
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Certificate issuer:       /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial:       01BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
Manifest number:          01BB
Signing time:             Wed 17 Sep 2025 04:22:10 +0000
Manifest this update:     Wed 17 Sep 2025 04:22:09 +0000
Manifest next update:     Fri 19 Sep 2025 04:22:09 +0000
Files and hashes:         1: 0JparVoXc9hrHSbdXRxET8ys9uQ.crl (hash: 2F8WadsXacMSxQg0KxDrinHKj9E6ut+rPiKOJ/n98gs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
        Validity
            Not Before: Sep 17 04:22:09 2025 GMT
            Not After : Sep 19 04:22:09 2025 GMT
        Subject: CN=68ca3772-9e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e5:a1:d1:40:54:9f:e8:c9:e3:f9:22:f7:ec:
                    f7:68:19:79:ff:32:bf:73:6d:2f:18:a7:e6:9e:e0:
                    80:22:2b:eb:45:d9:6c:d9:51:55:3e:ec:39:0c:4d:
                    33:d7:b0:18:51:0c:96:a4:9a:7b:c1:5e:46:33:fc:
                    a3:b4:e5:40:fd:56:da:e0:4b:a3:02:1d:70:ff:1d:
                    33:26:cf:4a:32:e8:d6:98:95:ca:76:65:df:03:0d:
                    21:44:c7:1d:10:0a:fb:82:5e:df:f1:71:17:e9:87:
                    ab:fd:98:19:3c:84:9c:f4:1e:f7:b7:25:44:6e:aa:
                    e6:11:c4:4c:f4:93:32:bd:12:40:61:a7:10:b1:18:
                    db:c3:ff:ea:cc:d2:3d:8e:a9:86:c0:a5:a7:32:1f:
                    65:54:50:97:7c:8c:d0:5b:93:fe:c8:8d:26:2c:c7:
                    29:52:02:15:f7:43:5b:53:ed:b6:80:20:95:0d:9c:
                    9c:df:17:eb:01:fe:ef:dc:2e:2c:32:46:8b:8c:70:
                    14:70:47:3b:a9:a0:ca:23:09:d7:d8:76:81:a7:ac:
                    f5:f6:84:28:94:9f:12:d2:0c:4f:4b:61:32:a6:af:
                    da:f8:7d:56:72:96:80:1c:b7:b6:6b:ad:ed:92:c9:
                    a5:ca:e1:7f:e6:1d:09:e8:99:70:cd:9e:b2:5f:a4:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3D:AB:2A:9D:D5:EF:CC:B5:BA:97:2D:DE:EA:33:E8:B3:8A:03:DE
            X509v3 Authority Key Identifier:
                keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6d:c0:6e:26:b3:88:79:ac:0a:04:b1:04:99:45:fb:9a:4f:
         44:50:06:76:cc:46:9e:7a:c4:12:91:92:d4:11:fb:1b:be:40:
         e2:83:d0:a9:52:7f:a5:95:31:23:cb:88:90:0c:26:fe:9d:ea:
         f5:be:ec:ba:16:4b:f8:0c:2b:0c:33:70:14:2f:8b:3b:ef:ee:
         33:fe:07:8f:0c:eb:6b:b9:85:09:aa:c3:4c:9e:37:10:6e:26:
         58:71:67:01:e0:ac:65:68:7e:33:ef:23:ac:b5:d7:59:67:bb:
         49:b9:c9:91:b8:0a:60:55:ce:f1:81:0c:d1:d1:79:b0:84:5a:
         6f:3b:80:56:53:b5:21:a3:13:0b:cf:7a:e9:c5:d2:4b:ab:b9:
         e6:25:0f:ef:94:a3:6b:ed:e8:33:87:b9:82:47:3f:4c:97:ac:
         f6:fc:96:c4:78:8c:1d:5f:cd:f8:54:1b:41:94:68:b9:32:47:
         8b:9f:f2:38:3a:bb:f0:a0:a4:90:d8:16:a0:25:cb:41:19:7c:
         fa:ad:f5:cd:b1:ce:fa:59:63:3d:2b:ef:f9:29:26:c2:8d:0f:
         b1:9b:6d:36:2e:0a:33:24:5c:7c:ec:68:28:a0:d6:2f:5b:f1:
         45:26:72:9a:37:a3:c3:7a:cb:64:f0:1d:8f:35:ea:1c:f5:f7:
         60:87:ca:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:23:25 2025 by rpki-client