Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
File:                     j1A71XPOETUXzWtM-jdKYvFeEsE.mft (raw, json)
Hash identifier:          ZO8a7aeUrBKISPgDFBQ7B+aIaOVyFR1AX7GhJJ9ME7Y=
Subject key identifier:   3B:08:AD:1D:C8:D5:43:3D:B8:D0:21:CE:88:AD:B1:2D:9A:81:14:05
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Certificate issuer:       /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial:       0640
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
Manifest number:          063B
Signing time:             Sun 27 Jul 2025 02:16:57 +0000
Manifest this update:     Sun 27 Jul 2025 02:16:57 +0000
Manifest next update:     Tue 29 Jul 2025 02:16:57 +0000
Files and hashes:         1: j1A71XPOETUXzWtM-jdKYvFeEsE.crl (hash: V1tXSsrBxPg55oKtVd7RQyOGeo1GrPomO+MrKYt52Ag=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE44AF, serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
        Validity
            Not Before: Jul 27 02:16:57 2025 GMT
            Not After : Jul 29 02:16:57 2025 GMT
        Subject: CN=68858c19-e76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:55:e3:b6:8b:b2:9f:d2:e8:96:a6:0d:cc:
                    06:14:f6:53:f5:a2:b9:f9:b5:54:56:5e:b4:43:cb:
                    75:0b:0e:e2:a2:d9:a2:22:4b:bb:e0:32:02:96:0b:
                    bd:97:0f:68:78:b6:41:27:61:e2:c2:f3:c9:40:dc:
                    08:f0:9b:b0:7f:9e:09:3a:c9:b4:32:5c:50:c3:84:
                    dc:39:b9:ec:18:83:8b:af:dd:2f:ae:ab:e0:0e:60:
                    46:f5:5b:7e:2f:e2:32:31:67:6e:12:cd:2f:eb:f9:
                    ba:99:70:9c:5e:e9:d0:5b:87:3d:ff:d2:fb:2f:19:
                    23:9e:5b:f5:cd:00:b0:1c:b6:6f:70:5a:3a:0b:d5:
                    1a:26:48:73:fd:f6:9c:b6:7f:de:1a:fd:8e:3b:68:
                    88:ed:0a:d2:81:ff:33:c0:23:d6:cb:1b:17:b3:73:
                    1b:f8:b5:0a:2c:c2:e1:cf:d7:1a:d3:d5:95:66:d4:
                    48:68:a0:ef:91:10:33:1b:d6:f3:fc:26:f2:0d:cc:
                    10:03:52:13:e2:a7:30:2b:31:a1:9c:3d:64:23:00:
                    ab:c3:ba:e1:33:9c:c6:90:51:6e:66:14:6b:4a:f6:
                    9b:37:1a:14:f8:5e:bd:c7:68:cf:42:40:64:ce:79:
                    3e:ae:d8:b5:e5:fe:02:77:b8:09:3c:b5:d4:bf:da:
                    7d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:08:AD:1D:C8:D5:43:3D:B8:D0:21:CE:88:AD:B1:2D:9A:81:14:05
            X509v3 Authority Key Identifier:
                keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:47:96:b1:71:fa:c0:69:c5:61:55:fb:8d:07:b2:dd:50:85:
         5d:70:0a:de:51:57:c4:d8:24:cd:1b:2a:94:fe:99:12:1c:3c:
         9f:3d:f2:6b:40:9d:ce:80:4a:e6:94:2a:a8:37:56:6b:55:05:
         0f:9c:88:3b:36:2f:3a:78:64:3d:10:f6:39:d9:15:fa:85:f6:
         df:2b:1a:39:71:2d:2a:4b:50:b4:6e:04:31:73:71:a6:71:08:
         56:09:ec:e9:3d:cb:69:63:f5:d9:87:21:a8:3b:f1:3a:5d:71:
         19:1f:94:96:2d:d1:06:90:c1:78:7a:f1:e7:9f:19:0d:10:ad:
         c3:bb:51:19:c1:c3:ea:7a:1a:13:f1:45:4d:e6:37:89:89:e7:
         fa:99:e8:f5:e6:16:48:af:0a:76:ba:83:c2:a2:52:7c:6d:0e:
         e7:df:60:8b:53:b9:74:ec:fc:db:8b:06:50:05:c5:ad:0e:9e:
         f6:a0:d2:29:6a:5c:c1:fb:46:50:c2:dd:7b:e7:3a:e4:a8:26:
         ef:52:cc:a9:0b:b0:27:aa:80:fb:a1:7b:77:14:0d:0d:e9:9c:
         0c:e0:c1:4d:31:fd:ec:fa:34:ac:b3:3b:7c:ae:86:e2:b2:cf:
         0d:98:4f:b7:24:78:a0:18:79:17:23:79:e1:c4:5f:33:4e:de:
         92:6c:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:58:24 2025 by rpki-client