Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.mft
File:                     VCngPBW2kSQG5ZWlotltSSQPrAk.mft (raw, json)
Hash identifier:          AGlcOz3Al8CgKZ81XNx2bdTblTIj887528+mQCLVq1c=
Subject key identifier:   FB:6E:B4:63:A0:57:86:5B:54:DE:CF:EB:9C:D9:2C:34:DD:43:7A:85
Authority key identifier: 54:29:E0:3C:15:B6:91:24:06:E5:95:A5:A2:D9:6D:49:24:0F:AC:09
Certificate issuer:       /CN=F361FA1FAF/serialNumber=5429E03C15B6912406E595A5A2D96D49240FAC09
Certificate serial:       0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VCngPBW2kSQG5ZWlotltSSQPrAk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.mft
Manifest number:          0A
Signing time:             Sat 26 Jul 2025 05:31:05 +0000
Manifest this update:     Sat 26 Jul 2025 05:31:04 +0000
Manifest next update:     Mon 28 Jul 2025 05:31:04 +0000
Files and hashes:         1: VCngPBW2kSQG5ZWlotltSSQPrAk.crl (hash: QoBL5HPV9OFUwF5VI1HGjlsuNwYuH3unz5ZjMm06PuM=)
                          2: B206F72063C011F0821CF49EDAE4EC9C.roa (hash: 2ME0DSdwIVYEEQ4M/Z8WDIVKNMg+bnP2LGB8V64oaDk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VCngPBW2kSQG5ZWlotltSSQPrAk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Jul 2025 05:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361FA1FAF, serialNumber=5429E03C15B6912406E595A5A2D96D49240FAC09
        Validity
            Not Before: Jul 26 05:31:04 2025 GMT
            Not After : Jul 28 05:31:04 2025 GMT
        Subject: CN=68846819-fe0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:a2:df:92:90:aa:4c:a2:cf:e2:fe:b9:fa:
                    80:f1:83:07:c1:74:39:e9:80:c5:20:86:2c:ea:94:
                    09:2a:b8:78:2d:e8:f5:61:6c:19:e4:56:c5:45:5d:
                    5d:e9:a2:9a:79:26:4a:fb:c3:ab:cf:23:c9:c6:df:
                    db:26:ce:9d:f8:f4:16:15:00:98:f9:e3:cb:76:b7:
                    f2:82:71:9d:b1:2f:78:a1:9c:46:40:02:f2:53:37:
                    ae:4a:ae:e9:85:46:1a:ee:1d:5a:90:94:0e:a0:25:
                    08:5f:0a:05:62:bb:5d:3a:5a:26:98:9b:20:eb:2d:
                    3c:5b:3a:d2:da:de:62:05:12:6d:4b:0d:c6:68:e3:
                    8f:12:39:ed:67:14:2b:e6:d4:6a:3e:06:41:a9:50:
                    a9:62:93:99:c4:3a:4b:be:31:69:e9:24:b6:d4:e2:
                    08:3e:75:8e:a6:1b:92:f0:c6:ad:c2:be:69:b2:6c:
                    1c:e1:e3:07:df:c7:83:a9:fc:d1:25:ef:ae:1e:c6:
                    b9:c8:eb:12:e2:7f:e3:4c:60:11:36:71:51:b1:66:
                    16:9d:65:35:52:d1:00:63:39:21:53:01:4a:8b:7f:
                    f5:e8:7e:1f:20:0e:48:41:eb:a2:b8:fb:c5:c0:d1:
                    01:12:f2:bf:4e:05:fa:be:27:5c:49:ef:ad:f7:4b:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6E:B4:63:A0:57:86:5B:54:DE:CF:EB:9C:D9:2C:34:DD:43:7A:85
            X509v3 Authority Key Identifier:
                keyid:54:29:E0:3C:15:B6:91:24:06:E5:95:A5:A2:D9:6D:49:24:0F:AC:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VCngPBW2kSQG5ZWlotltSSQPrAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:1a:96:cc:ce:34:61:5b:01:73:df:d3:7c:b2:7f:f7:6c:
         de:2b:1e:0c:e0:68:37:18:7b:94:98:4e:61:5c:d3:96:19:74:
         88:53:6e:75:00:c7:71:75:ff:e7:1f:48:bf:7e:1d:e1:c7:e4:
         23:6f:1a:7e:b2:ee:87:90:f9:95:8c:2c:54:a2:8f:0a:27:23:
         b0:6d:7e:92:16:9d:71:67:86:4f:98:dc:0f:6f:31:05:c7:bc:
         de:71:b9:56:4f:14:25:e7:30:86:10:85:19:a0:4c:84:29:8f:
         c1:87:fa:02:c7:70:ae:39:a6:32:1d:06:73:9c:b8:03:98:c8:
         e9:15:78:ed:1f:d8:7a:40:be:3a:a8:81:78:e6:3d:7a:ca:16:
         db:92:de:d8:df:a5:5a:c1:ce:04:5b:b1:88:bb:63:5e:ec:05:
         13:a9:44:4b:43:c0:52:ff:19:ac:77:38:49:62:64:54:43:24:
         79:15:58:2b:38:ab:a0:55:d1:a7:4e:92:4d:4d:76:78:98:bd:
         b1:e0:17:0c:f9:c9:1d:33:0b:e2:9e:68:48:bb:e8:a4:e0:40:
         36:c0:e4:a1:d0:64:cf:be:ab:d9:a0:6b:5c:a0:91:43:98:d3:
         ac:e0:bf:7c:21:34:2e:b9:19:79:08:bd:1a:50:24:4e:e9:12:
         60:5a:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:14:02 2025 by rpki-client