Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
File:                     GB73GjT5LPYtzRHXkAfFhUg5was.mft (raw, json)
Hash identifier:          XfvLAayFomvZI0o++lsgJCxBwjAFBwqraj1cOIKCxh8=
Subject key identifier:   A6:28:75:D8:CA:88:7C:6F:83:13:EC:11:21:36:23:28:4A:32:03:84
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Certificate issuer:       /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial:       0BBC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
Manifest number:          0BBA
Signing time:             Thu 31 Jul 2025 01:11:23 +0000
Manifest this update:     Thu 31 Jul 2025 01:11:22 +0000
Manifest next update:     Sat 02 Aug 2025 01:11:22 +0000
Files and hashes:         1: GB73GjT5LPYtzRHXkAfFhUg5was.crl (hash: U5lTg5kKJL7fpbBFEd5zDe88/j+/LiLVZ+WNkk2n5zQ=)
                          2: 99C2D1746B9011E7A18C6069F8AEA228.roa (hash: xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=)
                          3: 355AD4A683AE11E98A55D62AF8AEA228.roa (hash: yQuqYo4PP7qzl5R5FLB1AGc649ab7ChkeEyvocc2AL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3004 (0xbbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AF, serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
        Validity
            Not Before: Jul 31 01:11:22 2025 GMT
            Not After : Aug  2 01:11:22 2025 GMT
        Subject: CN=688ac2bb-1b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:79:0d:68:ec:0e:95:ce:a4:28:82:db:e4:
                    ca:26:aa:c3:d2:62:25:5e:42:34:ee:03:88:2e:8f:
                    21:aa:fa:75:53:cf:c7:4a:23:15:08:98:e0:a4:63:
                    76:25:4d:88:55:4a:7b:9b:c7:ab:ca:17:30:75:03:
                    2f:a4:59:a4:7f:00:44:08:fd:14:42:da:db:f1:1d:
                    9e:69:55:c6:c9:3d:fe:13:15:58:5c:97:cf:18:16:
                    f9:e4:b0:52:34:02:e3:f8:08:9e:4b:5a:54:dc:11:
                    08:d9:3c:5b:46:d4:8f:03:bf:f8:db:81:2a:a3:86:
                    b6:b2:30:87:ba:31:8d:22:ea:2a:8f:f7:4e:65:7c:
                    27:ea:9d:d1:0b:4a:92:f9:68:8d:0f:d2:ae:9d:0e:
                    7f:20:20:86:65:a3:51:82:89:22:b5:3c:e5:f3:ef:
                    1f:76:ce:b8:67:c0:f2:2d:6c:96:1c:35:d2:e6:68:
                    96:97:7a:ef:f2:94:fd:f6:2e:c2:71:95:92:83:a1:
                    b5:72:e2:01:1f:ea:33:3b:12:49:9f:15:d9:4d:c1:
                    3f:7b:7c:0d:d6:65:34:67:9f:a6:9b:7e:05:0b:5f:
                    b4:ce:4f:24:c8:62:d6:37:82:c3:7a:9f:eb:ae:74:
                    04:ca:21:92:b6:d8:52:b3:12:7e:1f:7c:0a:3d:db:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:28:75:D8:CA:88:7C:6F:83:13:EC:11:21:36:23:28:4A:32:03:84
            X509v3 Authority Key Identifier:
                keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:e5:68:d4:6f:7d:36:81:11:be:1c:53:dc:7b:72:04:ef:
         bc:3d:fd:09:b8:d1:15:6a:c4:68:7a:c2:57:bc:59:4a:4d:ed:
         d3:04:d9:d5:76:1c:6a:5b:a3:2b:90:12:80:fb:94:dc:73:16:
         6b:a8:e2:f3:92:1f:61:cb:04:4e:8b:a9:70:f7:72:87:3d:02:
         39:d3:e3:d3:ad:d6:d0:c1:60:f5:3f:0e:7e:3c:2e:ce:51:b9:
         72:9f:0a:23:58:7f:06:05:94:10:5d:0b:07:db:eb:af:69:66:
         52:39:07:e2:ae:4c:13:b4:86:c8:f2:50:a7:8f:00:51:cb:d5:
         fa:8c:7c:30:0c:9c:55:81:48:93:90:2a:2f:05:19:cc:9b:d5:
         48:71:98:7f:52:63:22:7e:d9:e0:2f:ed:b0:cc:ce:2e:7e:99:
         c4:fb:89:ca:84:38:d8:89:45:9c:3b:9a:b3:95:7c:fa:b4:20:
         ea:53:2b:bc:d7:1b:74:44:03:9f:2d:22:73:36:76:ea:89:03:
         e4:3b:b6:40:7d:ca:c6:06:51:90:ec:9a:53:2b:e8:75:1a:ec:
         c0:78:1d:30:9d:86:4e:41:b6:4e:93:0d:80:a5:fb:ff:67:b0:
         e9:ca:be:15:23:0a:43:79:d9:e2:c7:8e:ec:b2:26:8d:08:db:
         8d:d4:70:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:24:21 2025 by rpki-client