Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
File:                     mo0OmoAqT1sF0LmwiVg0TYdylpw.mft (raw, json)
Hash identifier:          PQUn6/zCTSssmVy+a1BDiwlKpADcASNvYS1r82Rr2rs=
Subject key identifier:   B7:76:1A:83:FC:9D:74:26:2D:C4:A9:1B:2E:C8:3D:D1:1F:C0:3C:CB
Authority key identifier: 9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
Certificate issuer:       /CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Certificate serial:       02FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
Manifest number:          02F9
Signing time:             Sun 27 Jul 2025 03:55:45 +0000
Manifest this update:     Sun 27 Jul 2025 03:55:44 +0000
Manifest next update:     Tue 29 Jul 2025 03:55:44 +0000
Files and hashes:         1: mo0OmoAqT1sF0LmwiVg0TYdylpw.crl (hash: ZI/R355nd5zbIfz07mgICKKyTAuJuVMqLnUMuMMYij4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 03:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763 (0x2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664A2AAF, serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
        Validity
            Not Before: Jul 27 03:55:44 2025 GMT
            Not After : Jul 29 03:55:44 2025 GMT
        Subject: CN=6885a340-1de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:7f:91:01:64:2a:e4:65:f9:c1:6f:24:65:
                    a1:7e:6c:a1:94:2b:3f:fc:be:78:06:26:32:4e:00:
                    63:93:68:77:67:7e:6f:66:85:14:3a:75:22:55:26:
                    55:87:33:0a:cd:db:82:8c:6c:7f:52:e0:f0:63:70:
                    9d:95:78:c1:a1:61:70:5c:ee:1f:8e:f3:9e:88:0e:
                    ad:b0:f4:f9:97:ee:23:d9:0f:26:1a:71:c8:fd:69:
                    e9:e9:98:5b:58:5d:15:7b:fe:ae:a4:6e:be:58:68:
                    8a:cf:c3:b8:c0:de:e6:78:e2:7c:2f:a2:c4:60:87:
                    59:b1:c6:4f:23:f9:78:51:4b:90:b5:cb:ad:dd:fd:
                    5d:e6:25:3a:71:cb:67:cc:8b:f6:3f:f9:cf:a7:3f:
                    d1:95:e3:fe:1d:0e:f3:6e:61:49:b0:7d:ae:f3:62:
                    65:4b:c5:d7:09:91:ed:19:69:61:71:98:a3:8d:c8:
                    e2:79:a4:18:1f:e9:9d:8a:29:6b:6d:00:17:77:37:
                    10:3a:d6:d3:9c:44:34:d1:e3:81:4a:bc:ee:b6:6d:
                    dd:04:6a:78:0f:e8:28:f0:b7:04:e3:4f:4c:68:f0:
                    0e:19:ae:03:3d:25:43:fb:d0:6d:60:31:c3:58:63:
                    14:bf:51:26:32:f3:84:3b:99:24:f6:ca:a6:6b:23:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:76:1A:83:FC:9D:74:26:2D:C4:A9:1B:2E:C8:3D:D1:1F:C0:3C:CB
            X509v3 Authority Key Identifier:
                keyid:9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8e:40:47:11:05:f2:19:74:82:75:a1:27:8f:73:13:55:a3:
         43:29:09:02:de:ef:5b:7c:b9:89:8d:bc:17:8f:9e:83:a1:4e:
         72:c7:a3:7b:50:ba:3f:73:3e:7a:64:7c:42:06:fa:4b:75:8a:
         ea:78:96:25:16:e0:78:7e:ed:a4:ca:e1:64:49:ff:5a:04:e1:
         f7:7c:00:f6:b4:9c:07:81:a7:ee:82:cd:b0:3a:ff:ac:43:30:
         38:e1:0f:cf:66:52:c9:5d:ee:da:1f:37:44:78:50:ac:d8:24:
         bc:bb:91:bc:46:9f:e7:cb:b4:90:e5:f8:81:3f:1f:be:11:de:
         38:fb:2c:57:3a:92:3c:08:91:13:a3:13:87:00:6b:25:ee:f8:
         98:6f:a4:9a:f8:33:12:8e:fa:1f:d4:80:d6:2f:0e:d0:21:8b:
         9a:db:68:aa:05:57:66:b6:2b:f6:e7:0f:4f:f6:e4:da:9a:61:
         1a:bc:c3:7e:27:d7:ee:26:0a:55:7a:c3:4e:3b:7d:2e:47:87:
         4a:8a:5a:c5:22:5f:9a:cb:d2:60:d9:f7:7e:1b:0d:a8:07:23:
         3d:91:95:ae:c0:1c:56:d3:d8:80:47:27:1f:1a:0b:b4:6d:62:
         e0:7f:a6:94:26:c7:0a:eb:4d:d0:0a:7c:10:52:7a:9f:b5:b5:
         7f:ee:49:8c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAvswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjRBMkFBRjExMC8GA1UEBRMoOUE4RDBFOUE4MDJBNEY1QjA1RDBCOUIwODk1ODM0
NEQ4NzcyOTY5QzAeFw0yNTA3MjcwMzU1NDRaFw0yNTA3MjkwMzU1NDRaMBgxFjAU
BgNVBAMTDTY4ODVhMzQwLTFkZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjyX+RAWQq5GX5wW8kZaF+bKGUKz/8vngGJjJOAGOTaHdnfm9mhRQ6dSJV
JlWHMwrN24KMbH9S4PBjcJ2VeMGhYXBc7h+O856IDq2w9PmX7iPZDyYaccj9aenp
mFtYXRV7/q6kbr5YaIrPw7jA3uZ44nwvosRgh1mxxk8j+XhRS5C1y63d/V3mJTpx
y2fMi/Y/+c+nP9GV4/4dDvNuYUmwfa7zYmVLxdcJke0ZaWFxmKONyOJ5pBgf6Z2K
KWttABd3NxA61tOcRDTR44FKvO62bd0EangP6CjwtwTjT0xo8A4ZrgM9JUP70G1g
McNYYxS/USYy84Q7mST2yqZrIzajAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUt3Ya
g/yddCYtxKkbLsg90R/APMswHwYDVR0jBBgwFoAUmo0OmoAqT1sF0LmwiVg0TYdy
lpwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY0QTJBLzYxMTM5QTRDMkE1MzExRUU5MTc0RTI0NjRBRDlFNkZDL21vME9t
b0FxVDFzRjBMbXdpVmcwVFlkeWxwdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21vME9tb0FxVDFzRjBMbXdpVmcwVFlkeWxwdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjRBMkEvNjExMzlBNEMyQTUzMTFFRTkxNzRFMjQ2NEFE
OUU2RkMvbW8wT21vQXFUMXNGMExtd2lWZzBUWWR5bHB3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNjkBHEQXyGXSCdaEnj3MTVaNDKQkC
3u9bfLmJjbwXj56DoU5yx6N7ULo/cz56ZHxCBvpLdYrqeJYlFuB4fu2kyuFkSf9a
BOH3fAD2tJwHgafugs2wOv+sQzA44Q/PZlLJXe7aHzdEeFCs2CS8u5G8Rp/ny7SQ
5fiBPx++Ed44+yxXOpI8CJEToxOHAGsl7viYb6Sa+DMSjvof1IDWLw7QIYua22iq
BVdmtiv25w9P9uTammEavMN+J9fuJgpVesNOO30uR4dKilrFIl+ay9Jg2fd+Gw2o
ByM9kZWuwBxW09iARycfGgu0bWLgf6aUJscK603QCnwQUnqftbV/7kmM
-----END CERTIFICATE-----
Generated at Mon Jul 28 01:18:48 2025 by rpki-client