Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
File:                     tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft (raw, json)
Hash identifier:          +SoWNQb83h58Adf0Txk56i6o0iOg59lbkKx8Ezio7Kk=
Subject key identifier:   87:57:F4:DB:84:84:20:14:43:86:28:2F:DA:87:B6:CA:E6:EF:90:E3
Authority key identifier: B6:7E:CB:16:38:71:0A:F3:1E:6E:2A:8F:BD:D5:53:95:75:25:CF:F4
Certificate issuer:       /CN=F364563FAF/serialNumber=B67ECB1638710AF31E6E2A8FBDD553957525CFF4
Certificate serial:       04
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
Manifest number:          04
Signing time:             Sun 27 Jul 2025 05:32:07 +0000
Manifest this update:     Sun 27 Jul 2025 05:32:06 +0000
Manifest next update:     Tue 29 Jul 2025 05:32:06 +0000
Files and hashes:         1: tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl (hash: y0Xmrcqy4zoh0Dky6PIIIcg7LXWR8jZXAq64+gefIwU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364563FAF, serialNumber=B67ECB1638710AF31E6E2A8FBDD553957525CFF4
        Validity
            Not Before: Jul 27 05:32:06 2025 GMT
            Not After : Jul 29 05:32:06 2025 GMT
        Subject: CN=6885b9d7-8b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4f:9e:0a:52:8d:6b:b2:3b:bd:69:23:74:3f:
                    11:ee:d1:29:dc:f3:25:28:a9:cd:69:90:6a:61:e1:
                    93:e6:69:86:5d:73:d7:7c:18:f9:65:c9:31:2c:12:
                    4d:5d:b5:54:d3:db:4f:94:16:71:40:e1:77:02:fb:
                    b7:7d:93:f4:e9:a3:34:45:35:a0:98:63:12:a3:7b:
                    c0:cd:10:d7:db:45:ab:0f:1d:44:5d:fe:0c:e2:9e:
                    18:24:20:b8:5d:ce:ca:5e:7a:7f:f6:66:91:25:be:
                    b5:ac:ab:61:cc:37:fd:8d:2e:16:c9:60:22:0f:d3:
                    f5:15:59:91:b8:b0:ed:f7:e3:2a:ed:2d:53:9d:d6:
                    61:bd:ad:c5:5b:b1:7d:18:51:83:ce:f3:50:7f:f0:
                    23:0c:76:d0:6d:8d:6b:ff:d1:3e:23:52:c2:bf:65:
                    a9:ef:35:6b:f3:9c:7c:74:cc:a5:3b:28:f6:22:f1:
                    51:a6:ec:09:52:5e:1f:14:00:9b:9b:80:6f:0d:d2:
                    41:e3:93:28:14:16:2c:3d:96:d4:90:7a:af:c3:c4:
                    a4:0c:cb:3e:bd:54:75:88:fe:c5:00:c9:3c:d9:bb:
                    f4:8d:db:2e:34:c1:32:cd:16:ec:c7:e7:5d:f8:73:
                    a7:a1:f6:da:b1:22:cd:a0:cb:15:e6:fa:89:cb:86:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:57:F4:DB:84:84:20:14:43:86:28:2F:DA:87:B6:CA:E6:EF:90:E3
            X509v3 Authority Key Identifier:
                keyid:B6:7E:CB:16:38:71:0A:F3:1E:6E:2A:8F:BD:D5:53:95:75:25:CF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:71:04:0b:c5:62:5e:41:a9:ba:7c:04:f8:1f:98:e3:8b:f3:
         61:fc:3b:e1:13:8a:89:b7:cc:ee:58:3b:da:9d:ab:42:36:20:
         55:cc:a5:3f:45:27:af:57:64:78:43:e9:84:64:f5:f1:1b:2b:
         8c:44:ec:85:5f:07:b3:8d:84:bc:96:ce:0c:16:9d:56:d8:9b:
         78:f9:f2:55:60:65:6e:68:1b:c3:74:3b:90:8d:73:a0:4c:fe:
         a0:1b:53:b0:61:ce:2f:05:35:68:08:7b:f7:b8:a6:eb:41:a7:
         b5:18:40:2c:76:c5:f3:3f:4d:df:14:d4:44:89:26:a2:8f:b7:
         14:2a:f8:09:60:2b:69:16:5d:0d:cd:ab:aa:a2:c4:d5:d9:2a:
         b7:99:55:63:18:48:63:3d:eb:72:d3:af:24:b8:b2:43:8a:c2:
         7a:a7:94:cd:b2:ea:bb:e3:da:33:2e:9c:ec:df:eb:68:fd:15:
         66:0e:f1:bc:87:05:b3:85:86:ac:d3:20:81:af:1f:33:7b:8a:
         ad:bd:f3:68:68:ae:4f:62:82:af:b0:8c:e7:7a:bd:d8:6b:b1:
         33:db:41:04:26:93:96:80:75:cb:86:17:0b:6d:80:9a:53:aa:
         d5:82:92:24:83:9c:4d:ff:82:7d:71:de:e9:24:03:d9:77:69:
         85:e7:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:02 2025 by rpki-client