Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          daJBYBCytfY33ixVZECYrK76weXBb6Iq0hgm/+hB3w0=
Subject key identifier:   3A:B5:D5:E8:18:52:26:5C:5B:D8:D7:51:6D:18:33:56:DE:F8:DA:0B
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       065D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          065A
Signing time:             Sun 27 Jul 2025 02:13:49 +0000
Manifest this update:     Sun 27 Jul 2025 02:13:48 +0000
Manifest next update:     Tue 29 Jul 2025 02:13:48 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: p+0yqcRZEdrki4wr3SfdaupgHc4gWnaSUQ7EDjmKLek=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1629 (0x65d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Jul 27 02:13:48 2025 GMT
            Not After : Jul 29 02:13:48 2025 GMT
        Subject: CN=68858b5d-2967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:6d:8b:4b:1a:72:6f:03:04:1a:a0:d3:6a:
                    21:ba:ee:35:70:7e:cb:6c:1a:f3:d4:47:29:86:58:
                    a1:0a:62:63:19:7f:d9:7b:05:40:03:9f:d1:17:db:
                    4d:65:25:5d:20:a2:1c:ae:06:61:ab:2e:f2:8e:58:
                    32:cb:cc:2a:7e:71:99:bb:fd:09:30:04:d8:89:61:
                    d7:ee:d2:83:10:ea:f9:65:18:1d:76:37:da:68:b7:
                    9d:63:85:4f:00:f3:58:5b:01:7d:19:e8:2f:e8:a0:
                    f7:0f:28:8e:a8:2b:eb:f1:33:79:b0:a0:3f:8e:76:
                    e0:57:52:f4:9f:ce:71:63:fb:e3:1c:79:bf:7f:82:
                    23:cb:3e:09:a0:1e:e9:77:63:71:1f:28:dd:c4:97:
                    d2:e5:bb:81:ad:a3:ff:4e:e6:5d:ac:65:20:17:36:
                    8a:23:ee:e6:ca:db:b4:f5:77:5f:d4:93:12:b5:8f:
                    8e:b1:59:b0:ed:d4:ca:36:78:45:70:15:c2:db:b6:
                    75:7c:73:ab:ca:9b:32:b8:6e:64:e9:7f:1d:6a:c4:
                    0c:ee:d5:64:0d:7f:6a:6a:40:c5:66:d2:84:b4:3b:
                    64:0f:e5:8a:7b:39:2b:47:4d:e9:af:97:98:9e:9e:
                    17:46:ad:98:1a:63:d8:3e:36:bd:af:f3:9e:cf:bd:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B5:D5:E8:18:52:26:5C:5B:D8:D7:51:6D:18:33:56:DE:F8:DA:0B
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f4:70:cf:9f:00:23:63:d7:d7:7d:8e:89:cb:ca:29:49:9c:
         46:03:a2:82:47:2b:b5:7f:e6:6b:57:41:a7:a0:2e:d8:d7:59:
         71:50:b8:9d:0b:7b:bc:2d:77:c8:8d:44:ed:aa:8e:21:83:a4:
         d9:6a:a6:aa:77:80:46:cd:cf:d8:28:22:06:89:7b:bb:ea:0d:
         66:a6:a1:56:b1:5c:f4:23:c8:0d:84:2f:1f:a1:27:8c:1a:f6:
         bb:4e:1f:29:60:a3:e5:d0:fd:ad:64:49:7d:04:1f:73:a9:a3:
         af:1c:f6:62:6b:75:23:c8:36:3d:a0:0f:f0:45:2b:e4:e5:28:
         8b:be:84:0b:db:16:e6:66:b8:04:c5:7a:1e:6a:1f:1b:b4:04:
         a9:9d:f9:84:a5:60:67:e3:d2:1b:88:5d:8f:96:66:99:83:f5:
         83:69:37:7a:f5:75:36:7f:75:98:70:28:8a:4f:05:9f:fc:8e:
         9d:c9:50:af:c1:ba:83:ee:78:a0:b8:5d:6b:13:ef:53:83:7c:
         10:fa:f2:d0:1f:a9:3b:98:c0:ce:01:7e:77:2d:d3:a4:cb:0a:
         f2:1a:0c:9b:96:9d:d7:ee:f8:2d:67:e8:5f:b8:1a:09:ff:68:
         0e:68:6c:e9:fc:47:cf:94:46:cb:f9:78:3d:c5:9b:58:c3:04:
         10:2b:3d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:55:13 2025 by rpki-client