Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
File:                     HJG1r5tg6j8cHbh-rsbafC6gqHc.mft (raw, json)
Hash identifier:          ZOhMlyoGVcZJe7zX+5O6OYaXB5w4nfP7k7U5xITOPd8=
Subject key identifier:   57:EF:5F:4E:50:6B:30:6F:19:A5:A6:2A:8D:33:9A:58:6C:7A:C2:0A
Authority key identifier: 1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77
Certificate issuer:       /CN=F36432B6AF/serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
Certificate serial:       0394
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
Manifest number:          0392
Signing time:             Sun 27 Jul 2025 03:32:57 +0000
Manifest this update:     Sun 27 Jul 2025 03:32:56 +0000
Manifest next update:     Tue 29 Jul 2025 03:32:56 +0000
Files and hashes:         1: HJG1r5tg6j8cHbh-rsbafC6gqHc.crl (hash: HUQ4PmfjvxN7OCp2svCBySPChGxjXJbJJnnsUKrygKY=)
                          2: A3334908B75911ED9D1DD491F1222468.roa (hash: kfeGWGsJ8YUWnbsW+Omh/kxV1I9agx30BHnCONag860=)
                          3: 4DDB7228038511EEAD70B94C4AD9E6FC.roa (hash: c2ddbCPHmmvJv1S8GCuUfE7hXuI9EaV9rtxUGDdpShs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916 (0x394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36432B6AF, serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
        Validity
            Not Before: Jul 27 03:32:56 2025 GMT
            Not After : Jul 29 03:32:56 2025 GMT
        Subject: CN=68859de9-fb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:48:ec:16:08:35:93:ca:61:06:22:58:04:
                    09:d9:c8:33:c2:75:23:60:8a:d2:98:61:f6:c1:a8:
                    fd:f1:7e:b0:b7:bb:66:68:16:c2:83:df:8b:59:a0:
                    70:6c:7d:7d:86:cf:64:cc:03:d4:a5:4d:6d:13:ee:
                    f8:96:7a:34:22:f1:fc:86:3f:85:28:db:80:2d:64:
                    cf:c1:96:ac:55:63:75:8c:f2:ff:ff:a0:9f:f1:48:
                    f1:ae:bc:d9:24:2e:aa:4c:44:e0:ea:21:ca:04:b4:
                    0c:48:92:f7:c7:27:94:c8:7c:51:85:eb:f0:ee:68:
                    b9:83:d7:fd:6c:e6:15:da:1c:db:c7:ce:3d:d0:4a:
                    bd:54:d7:f0:91:40:08:1e:4f:fc:41:41:ce:2d:23:
                    2d:34:95:f5:56:00:6e:df:98:e6:f9:84:83:a9:6e:
                    b6:7c:70:d6:89:7a:c6:2d:1c:27:84:44:91:d4:21:
                    1e:63:40:fb:aa:aa:2a:19:13:86:e5:9a:85:42:9e:
                    d6:e2:e1:04:4f:bb:a1:11:a1:8e:0f:08:01:7a:b1:
                    3a:dc:72:2b:d8:6e:bf:06:b6:02:16:6a:49:c2:7f:
                    41:8c:e9:fe:3c:74:e3:3b:62:80:23:72:df:93:a6:
                    17:f6:f7:8e:f7:2b:3a:bd:4d:61:0a:9c:f9:cb:25:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EF:5F:4E:50:6B:30:6F:19:A5:A6:2A:8D:33:9A:58:6C:7A:C2:0A
            X509v3 Authority Key Identifier:
                keyid:1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:bc:1f:9a:79:54:6b:53:b1:26:89:79:48:b2:ea:d4:5c:74:
         0f:38:6f:b4:5e:fa:0f:76:85:23:22:0b:d4:e9:b5:c5:c3:44:
         57:8e:58:3d:52:85:eb:99:b3:5b:3a:12:75:83:44:74:da:52:
         d3:fb:eb:5e:27:9c:71:fa:cd:dd:be:e9:f5:b3:60:26:94:d8:
         9d:1d:d8:44:d3:e3:cf:06:93:a5:ea:87:b5:7a:24:b5:fa:9c:
         4f:5f:b5:cd:98:06:c4:7e:24:ef:5a:97:f6:53:5c:4d:e5:68:
         0a:d0:df:e2:78:21:98:4f:37:bf:77:47:f6:d4:67:fa:0c:34:
         90:d5:bc:87:f1:9e:83:2c:5b:dc:2c:14:f7:31:b8:2b:73:39:
         a0:f8:f1:39:65:24:61:c5:24:93:4f:47:c0:97:62:b3:9e:bf:
         a5:d9:cb:d4:d9:e9:4f:ea:ec:bc:d2:e1:fe:bc:1b:b0:78:22:
         4b:7c:74:0f:26:5f:63:93:4c:3d:f3:ca:d2:2e:92:7e:26:b3:
         c1:0d:02:3f:fc:dc:73:c8:64:58:af:c3:88:90:e8:71:ed:03:
         40:2f:da:a7:74:95:b5:f5:79:db:80:bd:95:ad:0e:ff:b4:5d:
         3d:dd:cd:30:2f:4f:73:3d:8d:ab:35:92:e2:54:04:68:b3:4e:
         5a:9e:75:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:55:51 2025 by rpki-client