Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File:                     vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier:          oyUCKzJ7y9rxz8ocpOXtNp5BKDlhVqnXJNvThkNrMCw=
Subject key identifier:   66:E0:86:2B:64:8A:F0:56:D8:58:3B:9B:69:0C:68:39:D1:A7:F0:10
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer:       /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial:       02EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number:          02EC
Signing time:             Sun 27 Jul 2025 03:57:31 +0000
Manifest this update:     Sun 27 Jul 2025 03:57:30 +0000
Manifest next update:     Tue 29 Jul 2025 03:57:30 +0000
Files and hashes:         1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: lzmUceR3KSkxgqs2pqu8zcy+PiYEyz3VCT1Ppexe0TU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365B37DAF, serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
        Validity
            Not Before: Jul 27 03:57:30 2025 GMT
            Not After : Jul 29 03:57:30 2025 GMT
        Subject: CN=6885a3ab-cf72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:12:d8:75:51:b1:ed:fb:6d:d5:91:ca:7d:
                    0e:90:dc:cb:8e:f7:f0:44:2a:39:ba:56:de:b0:57:
                    4e:7c:65:73:13:3c:47:f9:07:3a:7c:8e:b1:5f:dc:
                    90:eb:36:e8:7f:ba:f3:f0:94:e1:e9:ef:84:5f:4a:
                    85:18:38:1a:a0:25:82:b5:e8:c7:8d:f6:0a:88:9d:
                    05:cb:43:55:7a:22:09:d5:55:eb:f9:04:02:8f:8e:
                    18:5e:87:9e:42:17:09:39:7b:e0:e8:c8:05:19:3d:
                    98:9b:66:e2:15:78:54:e0:7d:a3:4d:cf:a4:05:47:
                    c0:e3:73:aa:5b:fe:f2:06:8a:c6:33:09:40:dd:ac:
                    c0:be:e5:67:3e:17:24:0e:63:98:ce:06:53:6b:ce:
                    66:f7:69:d6:66:27:cd:2c:b0:6a:6d:24:32:54:bf:
                    83:e6:23:e7:2a:fb:a0:03:76:84:00:c4:ae:29:5a:
                    1b:b3:d5:9f:5b:9e:b3:f9:0b:cb:01:04:44:3e:b5:
                    8a:65:45:47:a0:5c:35:fc:ed:b5:3d:82:e9:0f:32:
                    6a:5d:d8:c7:b5:36:74:43:3c:cc:e6:fb:af:28:53:
                    90:ed:22:e4:6c:66:af:a4:da:0f:82:3d:b2:ec:27:
                    d2:81:50:1f:d5:35:6a:ea:c0:d0:b7:67:e6:8a:aa:
                    5f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E0:86:2B:64:8A:F0:56:D8:58:3B:9B:69:0C:68:39:D1:A7:F0:10
            X509v3 Authority Key Identifier:
                keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:dd:d6:0a:c1:47:60:5f:bf:86:f4:eb:f2:bc:27:a2:64:a5:
         54:97:db:77:28:7f:ee:f0:f4:38:35:0c:89:41:e6:40:79:94:
         d3:31:53:ba:22:f0:cc:11:1f:07:ec:c7:6b:3c:6d:c6:71:02:
         31:cc:d1:75:60:fb:6b:5f:0d:a1:21:9d:d5:64:7f:41:17:95:
         30:ef:5c:33:85:ef:30:95:cd:8f:ee:6e:05:83:21:9b:a8:21:
         02:51:d7:d7:5a:80:f2:f1:63:27:c8:67:0a:cf:0e:d3:bb:61:
         14:46:4e:dd:8b:f0:b7:dc:b8:f0:9f:64:9c:90:48:2b:39:fc:
         08:08:01:4d:b0:f7:b1:a0:7f:9e:81:68:69:3a:e3:2b:70:88:
         67:dd:1d:77:51:6c:5a:f8:cf:41:9e:32:20:9c:4a:97:39:33:
         8c:e9:63:3c:5a:25:2f:d8:67:20:89:d8:9c:a0:c1:b0:c2:90:
         9c:aa:83:4c:6c:c3:de:1f:45:8f:6e:c8:73:11:57:b8:a4:e3:
         47:60:51:75:9a:a1:6d:5c:5b:19:75:97:15:94:17:91:95:f8:
         4d:27:f4:28:77:b6:97:9e:5e:a0:2e:e1:c5:41:b7:e5:c8:76:
         d1:c6:df:db:37:21:d4:2d:02:0e:9c:24:64:17:bc:a5:c4:18:
         d6:6b:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:04 2025 by rpki-client