Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
File:                     RGKi49FTZoSmrSMoDP2hhYW6Rug.mft (raw, json)
Hash identifier:          NoNr+DpOahPlXa5jDYKmFoLWBr1bh57Cvxu8qshuF7k=
Subject key identifier:   C5:07:55:24:47:D7:52:E4:FB:DF:46:6F:B6:80:77:35:42:54:1E:46
Authority key identifier: 44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
Certificate issuer:       /CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Certificate serial:       0421
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
Manifest number:          041A
Signing time:             Sun 27 Jul 2025 03:20:26 +0000
Manifest this update:     Sun 27 Jul 2025 03:20:25 +0000
Manifest next update:     Tue 29 Jul 2025 03:20:25 +0000
Files and hashes:         1: RGKi49FTZoSmrSMoDP2hhYW6Rug.crl (hash: NHt9sQsSR0islXC2RB8VXMmBFufALdgcqZhoIzZu4QI=)
                          2: 0F114F527ACF11EDAC6D79A5F1222468.roa (hash: 46X5epXs0VFCJD66bt/bhtHNaIaecq5dD1lqndSuoV0=)
                          3: 04F6FEFE55CC11ED9C17B393F1222468.roa (hash: JFxqQtwYQ6GCSD4A94ECbukEigF4S2ClwmoBMIrahsI=)
                          4: 4BC60282563811ED9EF1C284F1222468.roa (hash: NvKZJdaH3Sxug7NJzmQ6XjmgQrcY9ZIaoRd4i6mNa08=)
                          5: CB200990B0EE11ED9130F4BDF1222468.roa (hash: fQ09LEmlKPbkg+C38k1zz+KfIUo55sSASlLjZwmLSCM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36455FBAF, serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
        Validity
            Not Before: Jul 27 03:20:25 2025 GMT
            Not After : Jul 29 03:20:25 2025 GMT
        Subject: CN=68859afa-afe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:68:ca:e1:3f:d9:e1:6a:dc:aa:c1:6c:8c:
                    e3:3f:4f:1a:97:cd:f6:c8:39:30:10:8d:38:02:3d:
                    a4:0a:57:64:13:c3:d2:cf:38:69:33:36:34:04:d3:
                    d7:d9:4e:d5:83:d0:5a:7d:ae:fc:5d:fe:a8:99:ef:
                    64:5a:00:27:3f:f0:ea:01:ce:2c:86:1a:7f:70:53:
                    2a:ab:ef:74:c4:44:7e:29:85:c2:db:1a:dc:53:f6:
                    67:51:82:08:ba:b5:93:9d:58:04:3f:a5:6d:2d:8f:
                    02:f7:a4:63:51:52:e6:dc:39:c9:21:64:60:54:00:
                    ca:96:f7:c0:d9:d3:4c:8b:a5:0b:f3:a4:64:e8:1a:
                    a7:f8:fc:80:71:07:54:82:8e:b2:3f:fe:b8:da:75:
                    06:15:90:d1:08:e8:d1:34:48:da:50:78:09:51:e7:
                    6f:ff:1c:19:ea:ac:f7:4c:04:cd:b1:f0:22:fb:be:
                    ee:90:b6:5b:e1:67:1f:da:7d:2a:4c:c7:12:3d:6c:
                    63:18:ab:d9:e3:b9:11:e3:b2:bb:60:b3:b4:6e:e6:
                    c2:77:15:ec:0a:f7:63:65:8d:fc:9c:15:64:5d:bb:
                    44:7b:b8:de:fa:f1:75:ff:ed:af:90:73:7b:70:a1:
                    c9:a3:69:17:9c:56:73:93:09:25:ac:8f:2b:07:d4:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:07:55:24:47:D7:52:E4:FB:DF:46:6F:B6:80:77:35:42:54:1E:46
            X509v3 Authority Key Identifier:
                keyid:44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:60:99:d9:7b:75:64:d6:8d:57:41:3c:65:33:d3:21:61:40:
         ec:76:5b:7d:bc:28:02:cc:3e:d1:0e:fe:9e:14:77:46:7f:84:
         07:1d:fd:de:af:f6:17:39:bf:60:d9:da:48:62:10:d8:b8:05:
         e7:6b:64:6f:df:a5:90:dd:2d:ed:1e:28:3a:68:42:c0:ab:01:
         dc:35:2c:87:4f:e5:45:bf:03:52:db:ec:fc:5a:14:d1:07:ce:
         37:71:2f:06:9f:a1:05:c2:26:15:c8:76:8f:a6:15:55:08:6f:
         64:5f:8c:91:97:1e:85:d1:c8:88:dd:ad:f3:5e:f3:b3:df:03:
         6c:bf:86:25:f6:8b:bb:96:b7:fc:dd:61:d0:47:ac:a5:9e:7d:
         22:b3:bc:b0:11:d8:4e:a8:de:c9:e7:18:87:79:60:da:09:77:
         be:7b:71:f7:5e:9c:0c:30:d1:11:36:50:f7:59:62:ea:14:f0:
         03:b3:b5:b3:87:e4:ff:31:7e:83:0c:79:12:be:95:40:bd:dd:
         a0:29:40:6c:24:da:10:6c:33:3c:ba:a4:3e:60:52:9b:00:fb:
         7f:5d:c5:df:31:e1:f6:be:33:11:b7:e0:36:50:bc:bc:0a:bf:
         6b:5f:a1:11:c8:9c:71:d0:2e:01:4d:01:b6:56:74:eb:00:4c:
         75:a1:01:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:30:12 2025 by rpki-client