Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
File:                     7P8kJrGvinEgph0zdg6QjBWcau8.mft (raw, json)
Hash identifier:          kjPfphm5IuhH1Nn0KXxeatQZwkyOn5sJ2lH8p034pM8=
Subject key identifier:   58:87:90:9C:4D:CD:4B:A7:3F:EE:68:84:22:1A:04:34:EE:70:3B:40
Authority key identifier: EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
Certificate issuer:       /CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
Certificate serial:       08D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
Manifest number:          08D4
Signing time:             Fri 06 Jun 2025 01:27:32 +0000
Manifest this update:     Fri 06 Jun 2025 01:27:31 +0000
Manifest next update:     Sun 08 Jun 2025 01:27:31 +0000
Files and hashes:         1: 7P8kJrGvinEgph0zdg6QjBWcau8.crl (hash: p4ejX37JWgA4wOenNVokdXniVPrVQ3D/w+6CEWyLO/U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265 (0x8d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AF, serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
        Validity
            Not Before: Jun  6 01:27:31 2025 GMT
            Not After : Jun  8 01:27:31 2025 GMT
        Subject: CN=68424404-bf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:34:c1:d2:b9:75:8e:2f:00:52:e6:1f:8b:
                    3b:94:78:c8:fd:a8:d8:81:e6:f3:1a:94:10:9b:1c:
                    f6:04:94:30:ac:bd:f6:f4:6d:5c:a9:03:91:ac:24:
                    67:29:69:f6:c7:f0:05:e9:56:56:85:ba:61:be:a2:
                    62:92:73:ea:af:e3:79:4a:7a:19:91:0e:8b:93:eb:
                    b1:4a:2e:0d:9c:a4:3e:ba:ac:ac:cd:d7:8b:a3:c5:
                    59:e8:2c:9d:5b:a6:1d:52:d9:7a:e8:63:cd:4e:ac:
                    3c:7a:7f:cf:59:74:cf:e5:1c:79:ac:b4:7f:f4:70:
                    fb:dc:54:d7:87:84:ec:86:a8:3f:4c:95:ee:e0:57:
                    90:9f:5e:5b:80:7a:d4:37:78:44:63:9d:72:fa:1a:
                    8c:71:df:fe:d2:9a:39:06:7e:c5:1d:a0:43:9c:9f:
                    29:63:fa:de:61:43:06:5a:5b:a5:b3:dc:07:2c:ab:
                    20:51:97:5a:4d:98:51:11:ef:7f:37:5a:a5:b4:f6:
                    80:6a:c7:c1:c6:48:92:b6:fe:62:1c:04:89:c0:71:
                    7e:17:6b:cb:59:34:2a:2e:8b:64:06:f2:69:c0:36:
                    b5:c2:32:14:cf:e9:fd:78:5a:d4:e5:5b:38:e8:b5:
                    24:aa:91:ba:7d:30:42:82:8b:38:df:3f:22:33:8c:
                    b3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:87:90:9C:4D:CD:4B:A7:3F:EE:68:84:22:1A:04:34:EE:70:3B:40
            X509v3 Authority Key Identifier:
                keyid:EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e2:01:91:f8:ec:26:40:fe:1a:38:83:2e:c5:ba:e8:e3:c7:
         f0:37:3a:96:13:39:27:74:0d:19:27:75:6a:a0:87:28:35:83:
         80:92:07:5c:a2:79:07:fc:64:50:33:4c:cc:47:0a:cf:c9:03:
         f3:54:db:34:69:d0:85:71:9c:67:6e:d0:9b:54:3c:6f:b7:df:
         a5:8d:a3:cd:73:aa:5c:2a:73:2d:30:23:42:2b:01:cf:fd:b3:
         a3:b0:bb:b4:97:ec:0a:b5:ee:f3:07:b4:84:24:48:68:45:05:
         bf:37:dc:e4:ba:b1:30:13:86:a2:31:19:de:25:c8:a4:60:96:
         97:f6:15:0b:64:7e:c3:08:d0:e1:64:40:a9:40:2d:97:81:76:
         c0:e4:2e:1c:60:70:51:50:2e:78:f7:8f:ce:06:15:b7:6b:59:
         a2:41:9b:1b:01:69:b2:cf:9d:0e:2d:2a:bd:df:6d:d9:da:32:
         ca:d3:e2:62:aa:09:a9:d9:0d:b5:56:8e:c7:3b:ee:b3:3a:08:
         55:f7:23:8a:08:0b:6f:59:b6:4e:36:04:53:6c:ca:75:05:bd:
         2b:e9:2c:d9:4d:a1:f9:6f:bf:e1:7d:4e:0b:6f:8d:21:25:d7:
         4d:38:49:fa:01:8a:10:dc:09:44:57:34:34:00:76:02:41:be:
         98:c7:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:33:47 2025 by rpki-client