Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
File:                     pmHmEV84xQtNTFvj-kiO2AWMwvE.mft (raw, json)
Hash identifier:          nUoqVzLjXiADHS/pC3rB4dSAVUuyBjPGUFYAKM6Vw7Y=
Subject key identifier:   88:A7:FF:8F:0D:71:4D:1A:71:6A:E8:21:4B:92:99:C1:2D:29:B1:59
Authority key identifier: A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
Certificate issuer:       /CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Certificate serial:       0127
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
Manifest number:          0126
Signing time:             Thu 31 Jul 2025 05:08:38 +0000
Manifest this update:     Thu 31 Jul 2025 05:08:37 +0000
Manifest next update:     Sat 02 Aug 2025 05:08:37 +0000
Files and hashes:         1: pmHmEV84xQtNTFvj-kiO2AWMwvE.crl (hash: mkL3S2G4Fh1j54fxNc0d6xPMSu9/scKMGgZ5RBOcpdU=)
                          2: 84121498949611EFBE8BA57F762E951A.roa (hash: XaqvhZS4unq9+u8DbG/XQq/y/o0dswE+yS72E0NeXdI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672189AF, serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
        Validity
            Not Before: Jul 31 05:08:37 2025 GMT
            Not After : Aug  2 05:08:37 2025 GMT
        Subject: CN=688afa56-75da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:08:6e:77:76:dd:cb:3c:d8:3b:a0:75:46:
                    37:e2:ce:fb:95:16:23:4e:52:82:4f:57:1d:9f:30:
                    0e:e5:91:4f:96:51:54:b7:7d:ea:48:8d:b5:05:59:
                    45:c8:58:10:7f:d3:f4:cd:05:e5:89:35:41:81:47:
                    95:70:1f:91:0e:96:ba:ea:b9:1d:6f:83:bf:c0:c3:
                    ab:40:c7:46:53:1a:bc:e8:a5:33:83:fc:f0:b3:9c:
                    70:16:df:c3:3e:ae:32:ec:13:5c:6a:18:6a:f7:72:
                    99:94:76:2f:fc:ce:66:b3:8a:4c:f1:32:b1:32:c4:
                    3d:45:65:d2:b3:fd:e9:cb:d1:8c:e3:81:a8:87:79:
                    c7:2b:6b:ef:e0:e4:8e:00:31:aa:9e:82:80:27:c6:
                    60:69:dc:56:7a:ad:32:9b:2a:74:b0:1b:80:38:22:
                    a3:69:dc:64:66:d7:51:11:98:4c:d5:f6:7b:06:58:
                    03:f4:6f:e3:dc:1e:58:60:85:7c:1f:56:1e:a9:b5:
                    c4:26:1d:ab:c8:99:e5:2a:65:c0:aa:26:e7:de:b7:
                    d4:57:ca:8b:83:0a:1c:48:10:61:f6:9d:c8:a4:29:
                    f1:45:23:55:22:0c:72:f3:1f:69:71:ef:83:c0:c7:
                    0a:48:8c:fd:70:8f:30:e8:78:bf:90:8d:f3:d2:0c:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A7:FF:8F:0D:71:4D:1A:71:6A:E8:21:4B:92:99:C1:2D:29:B1:59
            X509v3 Authority Key Identifier:
                keyid:A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f5:c5:8b:de:e2:34:01:a8:37:58:83:0a:a9:e5:a3:50:e0:
         a8:8c:df:61:2c:fb:e4:bb:29:d8:54:f2:d4:f7:c2:a3:0a:49:
         10:bd:d3:7f:b1:a6:d0:fe:a0:92:b8:c6:ea:62:ff:31:73:5e:
         5a:6f:cf:69:59:3e:6d:b3:57:5e:11:6b:c5:71:d4:32:cb:b0:
         6e:4f:41:7b:7a:7a:f3:b2:1b:95:fa:60:bb:bb:d9:6e:5e:c0:
         4a:36:c2:ad:0d:74:56:b1:9a:f7:9c:1a:5a:92:87:19:de:0d:
         d3:9b:f2:bc:35:d6:fc:fe:cd:45:ff:49:37:d6:ce:1a:6a:8b:
         25:2a:a2:ee:93:9e:63:dc:1a:66:12:58:c6:0b:30:21:c2:ec:
         3a:3d:db:b3:ba:b2:80:7c:9d:27:7d:b2:e8:0f:15:93:9e:27:
         57:b9:14:1e:0c:f7:3e:88:3c:97:8f:a0:d5:1f:0c:f2:65:c3:
         98:0f:dd:63:d2:24:4b:b0:2a:8f:e8:dc:83:df:3d:73:6d:e9:
         fd:4f:40:f8:70:19:7a:70:a8:86:8b:6e:19:93:b5:b1:05:7a:
         d9:f1:91:85:59:9a:69:fe:02:1d:67:b7:7e:1c:ae:dc:a0:fe:
         84:1c:eb:71:c0:02:78:5a:3c:ca:8b:17:1d:20:fd:c1:89:bd:
         18:7b:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:20:25 2025 by rpki-client