Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
File:                     Vgq77plEvBY3TSi-TCYHISxchBo.mft (raw, json)
Hash identifier:          BugHfgRPqB6U4prF37iGO/QM0JnK0HT5TJhRgR8qq9E=
Subject key identifier:   97:7E:94:5A:87:87:10:19:52:EB:A4:8C:28:22:28:80:60:36:26:04
Authority key identifier: 56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A
Certificate issuer:       /CN=F3624E32AR/serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
Certificate serial:       0348
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
Manifest number:          0347
Signing time:             Thu 31 Jul 2025 03:47:39 +0000
Manifest this update:     Thu 31 Jul 2025 03:47:38 +0000
Manifest next update:     Sat 02 Aug 2025 03:47:38 +0000
Files and hashes:         1: Vgq77plEvBY3TSi-TCYHISxchBo.crl (hash: 7S4wn9gQ7KMg9kBTZhuEFOmGpvoylFgtY1MVOLv4lMI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
                          rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840 (0x348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AR, serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
        Validity
            Not Before: Jul 31 03:47:38 2025 GMT
            Not After : Aug  2 03:47:38 2025 GMT
        Subject: CN=688ae75b-9441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:df:b1:c0:60:86:a9:7f:4e:27:7c:83:41:
                    68:d4:c7:fc:56:22:66:e9:44:8d:c9:7f:1e:c7:57:
                    1e:76:e4:a6:c4:61:8c:3d:c2:ea:b7:48:1d:9c:36:
                    f1:4a:89:66:2e:fd:6b:1c:b2:2f:98:9b:70:4e:3e:
                    0a:4e:e8:72:bf:e2:b9:c9:31:f6:c3:f9:da:09:80:
                    5a:f9:c3:b1:36:2e:0e:e4:66:72:b4:3a:65:d1:fc:
                    0b:c4:a4:a7:9a:3d:f1:9f:1d:64:ba:b0:41:ea:06:
                    c6:01:be:95:0d:6c:3a:f0:8b:6c:79:58:59:c4:21:
                    71:e5:2f:37:ab:f0:2c:87:b6:c8:e3:2b:05:f8:85:
                    d8:a7:d2:c4:2d:85:18:de:91:a5:36:87:eb:6d:50:
                    91:1d:5e:15:e7:fa:aa:90:c2:e0:5a:18:7f:0c:b6:
                    a0:4e:6b:2e:98:41:51:05:42:0d:35:84:c6:de:06:
                    52:e3:b7:99:bd:0e:f2:83:97:20:df:04:7b:9a:1f:
                    d4:bf:ed:75:a4:f3:19:f0:ef:fa:f6:44:4f:2f:c8:
                    7b:8b:f9:1e:66:2f:b7:04:c2:b2:f9:06:5a:1f:f0:
                    6b:8b:00:0e:b1:4e:ec:8f:9a:16:e1:25:02:20:1d:
                    9d:c5:cc:d0:7f:2c:74:42:8e:5a:0e:b7:0f:7b:00:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7E:94:5A:87:87:10:19:52:EB:A4:8C:28:22:28:80:60:36:26:04
            X509v3 Authority Key Identifier:
                keyid:56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d6:42:92:e2:ae:7e:c6:d8:ae:58:ff:2e:f9:11:8d:a8:cb:
         dc:bd:f8:df:bb:55:76:5b:78:32:e9:4b:9b:be:cb:03:61:9d:
         59:7a:a5:db:48:cd:57:c9:70:83:b3:7f:7d:90:31:05:26:b2:
         93:96:92:b4:0a:64:7d:fb:2f:85:a8:d3:5c:7d:c4:95:ff:b2:
         cc:c9:0f:4f:bf:2b:62:69:90:95:a5:3a:a1:2e:ce:ee:e5:6b:
         cf:73:0a:b1:7f:ae:25:36:52:f7:ff:a7:a3:83:65:a1:23:0c:
         4e:7a:62:62:ba:3b:d6:83:d8:95:40:5a:17:53:a5:f8:c6:db:
         4e:ad:82:ce:a2:6c:84:d0:92:a9:a3:f6:ba:ae:5d:fb:90:b3:
         d8:f5:36:f2:e1:24:f9:55:d8:aa:4b:6a:ca:71:76:85:33:4e:
         aa:d1:1b:51:37:39:3d:7e:a8:fc:1a:2f:ec:0c:62:56:2d:57:
         f2:33:f1:81:8a:d9:95:51:1b:5d:d0:d7:ef:4e:59:93:57:53:
         0f:a7:da:34:63:55:ea:28:a0:0d:b5:7a:ef:1e:c1:b6:33:7b:
         1a:44:2b:24:df:de:3c:7e:a4:e4:2c:bb:41:77:06:ed:e9:02:
         df:5d:ea:02:c9:e3:9a:e4:37:7b:a8:db:d3:b2:de:2f:d7:de:
         e1:e3:c3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:37:26 2025 by rpki-client