Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
File:                     4xEv77cGGMJWaxygluyNG7Xzucs.mft (raw, json)
Hash identifier:          wDnNoD7L9ucu9c2+UynjFzn6c6tWXZW7e24sdDXTQFk=
Subject key identifier:   32:23:AB:54:00:AE:F0:FD:12:28:8E:B5:4C:CF:64:92:D4:47:6F:07
Authority key identifier: E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB
Certificate issuer:       /CN=F367FC4FAR/serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
Certificate serial:       0CEB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
Manifest number:          0CEA
Signing time:             Thu 31 Jul 2025 01:07:21 +0000
Manifest this update:     Thu 31 Jul 2025 01:07:20 +0000
Manifest next update:     Sat 02 Aug 2025 01:07:20 +0000
Files and hashes:         1: 4xEv77cGGMJWaxygluyNG7Xzucs.crl (hash: N+H5+oneAdqvK2lVX96T0e7fZdu0VP8b8PI/rW94xeE=)
                          2: CF0B622680CF11E6B85F0616F8AEA228.roa (hash: 1lI0Ic1CEtnqLpkbf3wsFe/5DRUyxbUGqpE48sR72kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
                          rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3307 (0xceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAR, serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
        Validity
            Not Before: Jul 31 01:07:20 2025 GMT
            Not After : Aug  2 01:07:20 2025 GMT
        Subject: CN=688ac1c8-0024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:ab:01:19:55:8d:26:85:b9:af:84:fb:80:
                    b5:24:80:17:30:b7:57:b7:63:c3:7b:71:eb:d6:0a:
                    43:22:6c:e0:c5:27:8c:2c:6d:f7:30:4a:f3:76:5c:
                    c3:fe:f2:9a:12:ec:8b:c4:ce:43:80:4f:bb:9e:2e:
                    1b:3f:57:00:14:f8:dd:e8:7b:db:f4:d9:ee:f7:58:
                    99:e8:65:a0:ca:a2:0c:61:7f:b1:df:a4:28:25:36:
                    01:f9:c3:81:5c:54:f0:73:c9:aa:63:04:46:a1:6c:
                    d2:15:05:42:c5:5f:5c:a9:76:2c:d6:75:c2:c8:37:
                    9d:16:e2:56:44:c1:ef:6d:d5:86:f5:6d:69:0f:13:
                    53:de:c5:c3:cd:22:41:81:4f:a6:59:e8:a6:3c:d0:
                    4d:7f:57:1d:d6:14:d9:26:1d:4f:99:96:ce:b5:b6:
                    ea:01:00:db:ac:15:82:aa:6b:eb:84:d6:08:af:c5:
                    e9:b9:35:7b:90:70:48:ac:72:0e:8f:5a:3d:0a:91:
                    f0:3b:d4:99:86:3b:fc:50:e6:c9:04:b5:8c:b2:a7:
                    fc:7a:e4:eb:b6:ed:40:57:97:32:b9:6a:49:e4:f8:
                    be:76:24:d1:6a:10:28:ab:d1:a0:9c:d3:b9:ef:96:
                    62:6d:89:08:a5:47:77:5d:d3:83:42:74:6c:c3:2a:
                    72:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:23:AB:54:00:AE:F0:FD:12:28:8E:B5:4C:CF:64:92:D4:47:6F:07
            X509v3 Authority Key Identifier:
                keyid:E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:4b:bd:9b:1a:bf:8b:91:0e:30:f9:1a:71:ff:77:f0:6a:
         38:e6:16:ca:00:ed:4b:fb:63:a9:4b:55:5a:57:21:09:9f:d6:
         44:69:0c:00:22:95:51:9b:c9:d2:57:7a:b3:62:9e:97:67:26:
         45:b7:b0:e3:b2:15:fa:08:91:76:bf:35:74:af:d7:ed:56:c5:
         12:d3:9b:ff:a7:74:29:69:27:04:34:3b:62:e5:d5:04:42:66:
         66:9d:9a:9e:67:06:08:4c:d3:16:99:44:ec:f1:10:3e:89:1b:
         2f:d7:43:f4:f9:e7:e9:27:a5:41:aa:14:f2:c5:9c:fa:22:b8:
         2b:6f:5e:31:e8:57:d8:3e:f9:84:73:d2:c1:62:9d:33:cb:c0:
         7b:9f:3f:21:c1:0c:05:7b:0a:0f:44:71:06:3b:f7:f3:9b:5d:
         3c:38:83:4b:fa:14:35:6d:12:ce:e2:02:3b:9c:38:57:89:e9:
         b1:f6:df:b9:e9:dd:20:b3:d5:95:e7:ca:ef:10:aa:d6:87:a8:
         29:b6:ab:33:32:27:5f:70:ab:09:44:49:69:32:99:76:ba:59:
         d4:a6:1f:a2:bb:30:c6:c8:24:cd:45:1f:b6:c4:dc:df:27:c3:
         06:6c:aa:22:0f:dd:9a:8f:06:e5:4e:bb:b2:42:2e:ae:f2:94:
         f6:ae:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:24:51 2025 by rpki-client