Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
File:                     h4TuSgLa-JcmVvEkUr8npJEcNik.mft (raw, json)
Hash identifier:          HUrLQFUnULZtFCEg1+aiS+cEMszv3fbukxeqA6s+zkQ=
Subject key identifier:   3C:98:FA:A0:D1:6F:2F:D2:A2:2A:A4:B6:F2:D5:2E:CA:A9:04:5C:48
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Certificate issuer:       /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial:       0D0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
Manifest number:          0D09
Signing time:             Thu 31 Jul 2025 01:05:58 +0000
Manifest this update:     Thu 31 Jul 2025 01:05:57 +0000
Manifest next update:     Sat 02 Aug 2025 01:05:57 +0000
Files and hashes:         1: h4TuSgLa-JcmVvEkUr8npJEcNik.crl (hash: 2BtytNflesuZNPP9ZnURZLjl1pextpHpp2gK4N1bhXg=)
                          2: D6B61570F80D11EF99734852762E951A.roa (hash: tfdDcGbQMsee5OOm9EW60V6hc91lxofJEctKITYoU8M=)
                          3: 322E59C89B8511ECA6E8B6A05A40D577.roa (hash: BnWYJ3FTlStYEMUn5ujbi/xmcBESttAp1iVk0y8JFFk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3341 (0xd0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AF, serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
        Validity
            Not Before: Jul 31 01:05:57 2025 GMT
            Not After : Aug  2 01:05:57 2025 GMT
        Subject: CN=688ac176-089b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:27:0a:29:5a:ea:2d:5d:1c:21:c1:44:15:
                    1e:a8:ee:5a:0d:20:f8:50:b8:14:20:54:4a:88:5b:
                    16:c8:4b:35:e4:fd:31:bc:5e:ff:3b:b5:b3:7b:bd:
                    2c:4e:4e:2f:c5:e6:f2:f3:64:df:07:bb:93:71:45:
                    56:e0:24:cc:96:45:3a:df:db:0c:5e:44:91:6a:4d:
                    f5:be:c5:40:61:4c:49:9b:04:84:6d:86:a9:53:c1:
                    8a:b1:dd:de:38:f3:fe:c7:56:cf:b5:55:ee:a9:e3:
                    95:6a:3d:c3:c8:3f:7f:62:70:8b:99:f4:fb:e8:6e:
                    6d:64:6f:ef:1b:8a:5e:76:59:55:1a:33:2f:8c:38:
                    83:fe:95:54:d2:a9:23:2c:0b:98:ce:4c:d0:92:09:
                    6d:73:52:b8:2a:56:69:5f:9b:53:eb:8a:ae:fe:c5:
                    1c:4e:91:4e:0c:60:80:3e:42:84:4c:13:91:a6:6d:
                    34:92:50:54:13:20:a3:68:f7:0c:bd:00:e5:82:51:
                    b0:4c:f5:d2:89:01:1d:be:6d:94:09:49:2e:9e:c0:
                    37:38:b3:29:2e:c0:87:bd:b3:86:77:c9:9a:7a:e6:
                    3e:05:64:a4:09:57:58:33:cc:6f:b2:14:77:22:82:
                    2b:76:af:89:73:16:25:3d:33:0d:d4:0a:8f:4b:c8:
                    e1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:98:FA:A0:D1:6F:2F:D2:A2:2A:A4:B6:F2:D5:2E:CA:A9:04:5C:48
            X509v3 Authority Key Identifier:
                keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:07:5c:2b:08:5c:de:9e:9a:7a:f3:ba:e1:91:b0:9e:9b:
         d7:77:06:75:76:cc:2b:2e:73:c1:e1:ab:d8:6e:ad:54:b7:9d:
         d6:1f:78:f1:45:6a:aa:a8:4b:02:f4:26:57:55:a9:71:3c:39:
         63:08:2f:5e:02:bc:8c:23:c1:78:d6:a1:09:e7:eb:35:f1:75:
         67:ee:6b:53:00:ed:61:75:d7:de:55:80:83:32:e8:14:e7:f8:
         81:ed:19:96:27:49:9d:54:62:08:37:7f:42:5a:62:4b:cd:e5:
         c1:7c:6f:a2:f0:d6:d4:06:f7:b5:35:83:4b:ea:20:f6:30:19:
         c8:76:21:1c:84:4b:a2:5c:79:a2:5d:63:6f:5c:bf:61:6b:09:
         16:ef:58:4e:fb:34:ef:54:83:1b:ae:c4:36:73:a3:28:bf:07:
         02:07:82:29:72:cc:e4:85:bc:3d:19:9d:d9:d7:53:a4:5d:e1:
         13:64:5b:65:b7:20:3d:b9:dc:f3:cd:25:d6:0a:2e:a8:26:40:
         55:01:38:35:f9:ad:b0:35:c7:33:df:40:7a:f7:2b:ee:38:ca:
         72:3e:42:41:13:12:92:a8:77:87:2d:89:01:95:6f:85:6c:25:
         cf:6b:31:53:ce:42:9f:0c:03:31:f5:51:10:5c:c2:b1:f4:07:
         73:5b:e6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:18:15 2025 by rpki-client