Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
File:                     AIjURX5EJgLXZtupDh_CJL1-i7Y.mft (raw, json)
Hash identifier:          ZfLJ35Ex2jja82ZgEJYG5RJwY23c2eyHP2h2eTwMnMc=
Subject key identifier:   5E:F8:E0:E2:0B:90:26:29:38:14:B5:BE:17:E5:46:FB:3A:08:93:E8
Authority key identifier: 00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6
Certificate issuer:       /CN=F3640D65AF/serialNumber=0088D4457E442602D766DBA90E1FC224BD7E8BB6
Certificate serial:       09
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
Manifest number:          08
Signing time:             Sun 27 Jul 2025 05:31:14 +0000
Manifest this update:     Sun 27 Jul 2025 05:31:13 +0000
Manifest next update:     Tue 29 Jul 2025 05:31:13 +0000
Files and hashes:         1: AIjURX5EJgLXZtupDh_CJL1-i7Y.crl (hash: APwbbmdvrJ4FSGsLjmvjhZ2HDOA4PIC8ZlRp+lZtV5s=)
                          2: AF736D22669511F0AE6F0B7FDAE4EC9C.roa (hash: z5Q6Me8+hrh2wppVl3E0nnD4XDb7iRxKouJNGG6mdYs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640D65AF, serialNumber=0088D4457E442602D766DBA90E1FC224BD7E8BB6
        Validity
            Not Before: Jul 27 05:31:13 2025 GMT
            Not After : Jul 29 05:31:13 2025 GMT
        Subject: CN=6885b9a2-fa7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:56:0b:db:34:7a:a0:67:71:38:aa:90:95:
                    f6:49:d4:a1:47:db:3c:87:29:ee:15:68:4b:28:a8:
                    28:76:d5:ba:6f:e7:4e:22:95:67:0f:ed:8e:b9:61:
                    e0:9a:d7:6e:a1:6e:56:d8:33:82:82:b3:ba:98:b0:
                    3a:b9:3b:b9:a7:aa:86:f5:16:ac:f5:0f:dc:57:0e:
                    c2:f9:93:77:31:cb:fb:49:8d:88:e4:c6:69:26:53:
                    f7:2d:ed:f2:39:88:dd:6a:91:84:62:30:59:75:36:
                    b9:67:dd:14:74:b1:97:75:4c:f2:47:f3:41:9f:b1:
                    ed:e6:de:76:60:72:30:cb:cb:a3:80:c2:8c:0b:81:
                    df:bd:39:45:80:41:fd:dd:f5:17:19:a6:d6:12:e4:
                    0e:2f:17:d7:2f:70:b3:be:c4:c3:26:46:37:9c:1f:
                    28:4a:aa:ea:7a:6a:25:57:d8:f2:c0:16:0b:84:eb:
                    c2:24:ab:72:95:31:68:7c:b7:01:fa:78:79:f1:fe:
                    80:13:0e:b3:81:6a:46:0f:4c:8c:cc:67:a8:8e:9d:
                    3e:2e:d6:cf:ba:20:2d:db:4c:77:10:0a:b7:b4:43:
                    4e:81:19:77:fd:1f:a0:c6:4b:ed:ab:18:d1:e0:87:
                    8b:40:aa:15:78:1a:e8:2d:7b:14:b7:0f:03:3e:e3:
                    31:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F8:E0:E2:0B:90:26:29:38:14:B5:BE:17:E5:46:FB:3A:08:93:E8
            X509v3 Authority Key Identifier:
                keyid:00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:13:95:7d:29:cf:ab:ee:c3:55:84:f6:0a:46:dc:64:d7:
         bc:6a:ea:f7:19:c1:ef:5f:0c:84:12:bc:9e:2b:d3:a9:9f:8e:
         8b:78:bf:00:5b:bf:48:1f:2d:be:73:91:ac:98:25:a8:1e:65:
         55:1a:3b:e8:6d:2e:b5:4e:8b:91:19:18:a1:3f:f2:8b:be:e7:
         5b:7f:c4:aa:3a:67:66:23:87:ed:cc:dc:6c:24:58:de:41:cc:
         10:28:f0:5d:7e:cd:9b:4f:bb:0a:0b:25:f2:7a:8c:97:64:50:
         41:29:56:f5:d9:f2:79:5d:ed:89:95:1a:60:a7:6f:7b:7d:25:
         68:76:ae:6e:2b:70:b8:cf:07:37:8d:cc:00:f7:ff:c6:fc:67:
         28:bc:bd:64:8e:25:34:18:4b:65:23:78:98:2d:0e:1f:80:34:
         e7:ab:de:8d:4f:95:a4:e2:44:6c:1f:41:b1:99:f7:6a:2a:29:
         5a:56:6b:b8:c5:0e:33:ee:61:bc:f1:03:ba:7c:2d:da:ec:bc:
         c0:34:c8:f1:44:8f:93:1e:6e:c8:7a:16:0c:f8:ef:e9:19:4d:
         ea:0b:d3:a5:3e:3f:30:73:09:dd:57:86:b9:19:90:72:ad:e2:
         50:81:9e:57:84:7e:c1:12:d0:22:76:1b:de:cf:99:6f:33:42:
         7d:8e:b5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:13 2025 by rpki-client