Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
File:                     KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json)
Hash identifier:          TEf6ujT6I98I08g8KeUWZPrKaAcjuQFuBpCUvF2IdmM=
Subject key identifier:   75:26:68:5D:8F:19:CD:10:E5:01:83:E1:BF:12:04:44:DB:E0:5A:66
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Certificate issuer:       /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial:       02B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
Manifest number:          02AE
Signing time:             Sun 27 Jul 2025 04:06:56 +0000
Manifest this update:     Sun 27 Jul 2025 04:06:55 +0000
Manifest next update:     Tue 29 Jul 2025 04:06:55 +0000
Files and hashes:         1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: YlHRyV6c6vTO4X3fAPVlPdk4hnxY0pYHDWe9TOuShUM=)
                          2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=)
                          3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=)
                          4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=)
                          5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=)
                          6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=)
                          7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=)
                          8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=)
                          9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CE6FAF, serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
        Validity
            Not Before: Jul 27 04:06:55 2025 GMT
            Not After : Jul 29 04:06:55 2025 GMT
        Subject: CN=6885a5e0-b307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:34:5b:53:57:59:f0:41:30:ca:16:67:39:
                    9d:f8:75:78:34:fc:ab:ef:4e:24:1c:64:c5:90:28:
                    cf:48:eb:8d:57:b6:26:90:b0:8c:77:39:23:27:ba:
                    32:13:01:0b:19:dc:d6:14:e5:4b:90:c0:44:50:59:
                    1a:fa:18:60:ed:2e:95:f3:ed:ba:2f:c5:f2:51:6d:
                    10:f6:d1:39:aa:4b:e8:cf:4d:35:52:db:d5:77:58:
                    7a:43:b6:f7:c9:3f:45:4f:79:92:ce:3d:87:50:78:
                    b0:fe:fa:0c:33:5b:69:69:b6:80:f0:12:3b:06:94:
                    7d:a5:2c:7a:bd:97:be:42:d9:f3:45:1a:89:e6:6d:
                    c3:b5:e3:6c:47:53:e7:09:c8:fb:a8:80:68:4d:7d:
                    be:06:f9:b7:df:d5:bc:9b:0a:6c:f8:aa:ce:e9:98:
                    b7:20:bc:b0:fd:a3:72:d4:a4:ba:f5:8b:e5:b1:f8:
                    a4:f6:e3:a1:51:7c:ed:9c:19:f2:ac:53:d8:99:21:
                    d2:c4:54:c0:ed:ce:44:1e:f7:f0:06:d8:6f:ec:35:
                    9c:15:18:5b:b0:40:00:4f:cd:da:51:c2:4c:75:1b:
                    a0:b5:e1:02:20:4a:62:f0:a4:01:87:65:4e:5e:b2:
                    a4:86:9e:6b:73:0b:2f:65:ab:11:8f:56:1e:f4:71:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:26:68:5D:8F:19:CD:10:E5:01:83:E1:BF:12:04:44:DB:E0:5A:66
            X509v3 Authority Key Identifier:
                keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:70:f2:75:f7:f1:2e:24:ef:78:80:60:2b:07:4f:90:45:d5:
         8b:0f:47:8e:ba:13:67:fd:5c:b3:51:f4:75:81:6b:ef:72:eb:
         68:a1:43:6b:29:29:fb:21:98:e3:b5:61:e7:39:46:76:46:83:
         98:5a:8f:9e:1a:94:00:be:a4:8e:1a:60:b3:93:80:04:bc:63:
         cd:c5:5a:c6:01:5d:f2:1a:dc:14:58:b2:fb:a2:0f:5f:86:9e:
         45:dc:fa:b1:91:69:ae:fd:85:12:22:2d:32:29:62:3b:ca:66:
         3e:01:55:b3:2f:2f:99:e2:c2:5a:bb:eb:9f:db:8e:71:f4:66:
         6e:43:61:f5:a3:cf:2a:4d:ce:ff:0b:1c:bc:74:45:a2:18:c9:
         20:32:65:ff:e7:e7:59:15:08:b8:a6:26:be:56:4d:9b:08:c4:
         95:9f:21:11:54:60:96:41:77:62:98:16:f1:2d:3a:a7:e5:44:
         08:2c:72:07:c2:eb:cb:41:f7:e7:fc:bc:68:9b:db:f9:81:81:
         9b:90:44:fc:34:3d:e6:06:6d:60:1a:d5:b2:00:eb:4a:ea:6f:
         12:89:29:1d:ed:71:36:d4:a7:53:fb:94:f4:f7:1d:83:d8:6c:
         67:f2:09:d0:d4:ed:dc:6a:b0:91:af:d3:ab:e7:68:bb:11:64:
         0d:e7:99:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:26 2025 by rpki-client