Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
File:                     79LD3jroxM6ee5PJ99RbqS6xTow.mft (raw, json)
Hash identifier:          sx0UlsdIL2YArZ8Bse7drjocQuDNngO3hoU8Uus3x58=
Subject key identifier:   7A:49:ED:87:79:C8:12:44:3F:89:08:D9:13:19:9D:40:9F:36:D8:1A
Authority key identifier: EF:D2:C3:DE:3A:E8:C4:CE:9E:7B:93:C9:F7:D4:5B:A9:2E:B1:4E:8C
Certificate issuer:       /CN=F3676EF0AF/serialNumber=EFD2C3DE3AE8C4CE9E7B93C9F7D45BA92EB14E8C
Certificate serial:       0153
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
Manifest number:          0152
Signing time:             Sun 27 Jul 2025 04:53:29 +0000
Manifest this update:     Sun 27 Jul 2025 04:53:28 +0000
Manifest next update:     Tue 29 Jul 2025 04:53:28 +0000
Files and hashes:         1: 79LD3jroxM6ee5PJ99RbqS6xTow.crl (hash: L+ZfmeIIopko9z1sbdvS20GRy4qgSJvv18adpxXqyJw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
                          rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AF, serialNumber=EFD2C3DE3AE8C4CE9E7B93C9F7D45BA92EB14E8C
        Validity
            Not Before: Jul 27 04:53:28 2025 GMT
            Not After : Jul 29 04:53:28 2025 GMT
        Subject: CN=6885b0c9-1b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:67:34:34:21:96:d2:5c:74:9e:96:1c:15:
                    a3:14:07:c6:a7:ec:87:7a:a4:83:7b:73:4d:81:8c:
                    11:6f:ec:11:05:a6:81:e8:cc:c4:fd:28:26:a1:6e:
                    96:b5:9e:c8:51:b7:c3:44:5a:f6:33:d8:bf:02:85:
                    86:aa:1a:e7:29:9a:f3:31:c5:d4:85:f7:af:e2:c0:
                    2f:d4:b8:5a:b6:85:f7:f2:31:80:ba:9f:de:d2:58:
                    10:c8:d3:2e:4d:4e:a3:fb:ef:41:81:a4:5d:b3:50:
                    3c:ce:e4:20:b5:22:12:52:2f:32:a1:57:63:f8:aa:
                    30:7c:ba:87:d1:93:de:d8:34:f2:06:d5:61:f0:23:
                    5b:b7:29:d2:c6:a0:7e:a5:d4:66:7a:6e:66:5f:ed:
                    79:c1:b1:e1:4c:d6:56:2e:1d:7e:30:03:91:96:45:
                    e9:47:40:b7:30:fa:94:7b:9c:2e:7a:f3:63:fd:ee:
                    bc:f6:76:7b:4f:c1:80:af:71:8f:2e:d6:85:b1:52:
                    be:9b:23:9a:2d:c5:54:3e:56:2a:53:29:8e:8e:39:
                    3c:b9:ca:36:19:27:74:5f:d2:d6:05:0d:ad:21:c6:
                    a5:54:12:26:cb:3e:7f:cf:ae:47:06:f9:1e:27:88:
                    0b:26:91:61:44:74:ef:11:ab:38:60:70:82:37:5a:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:49:ED:87:79:C8:12:44:3F:89:08:D9:13:19:9D:40:9F:36:D8:1A
            X509v3 Authority Key Identifier:
                keyid:EF:D2:C3:DE:3A:E8:C4:CE:9E:7B:93:C9:F7:D4:5B:A9:2E:B1:4E:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:fb:b1:35:ae:dd:87:51:8d:24:45:87:fe:25:68:ee:e3:ae:
         ed:fa:53:d5:a3:33:c0:15:0b:20:dd:07:c9:05:bf:c7:4b:66:
         a5:b5:98:47:13:73:2f:f4:82:b8:21:6c:5b:3a:ee:6d:30:29:
         6c:99:22:72:1b:1f:42:d2:33:8c:8e:82:43:62:c4:7a:92:62:
         5f:bd:f3:4a:5c:99:06:6e:da:95:d5:05:fc:8a:ab:f8:c3:83:
         96:32:ea:a3:f9:bc:ea:6a:b2:79:a9:e0:7e:56:b5:bd:a4:b3:
         f0:e4:99:23:e2:3f:9c:79:0b:45:4a:fa:62:b9:92:d4:33:ee:
         b4:b7:95:b3:e5:ad:cb:5f:96:59:4d:61:93:bd:84:df:16:d0:
         00:74:b7:c7:46:92:44:92:ff:91:a5:68:af:e4:74:c5:03:b4:
         e9:ae:ec:68:f2:45:34:55:21:bb:ee:9b:b1:09:e0:f2:ef:30:
         1a:9d:e0:99:56:70:5f:75:62:9b:e4:23:a1:94:9b:4b:57:a0:
         86:7b:d0:e4:11:c1:df:97:6b:ff:69:dc:17:2d:ed:fe:93:d8:
         42:89:3e:98:10:ac:41:25:7e:d6:24:a5:60:ba:6a:05:59:8d:
         51:cf:68:1b:db:ad:0f:11:83:7b:bb:99:df:c3:ff:1b:66:81:
         bb:ec:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:58:27 2025 by rpki-client