Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
File:                     v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft (raw, json)
Hash identifier:          7rd144Ml3FZh9fK6b+zF/S9cBpvjA49XyneYg0FH/58=
Subject key identifier:   94:B1:8F:C5:14:61:EF:91:B1:85:CE:E3:D7:5E:09:42:7C:18:39:9C
Authority key identifier: BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87
Certificate issuer:       /CN=F3691764AF/serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
Certificate serial:       05DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
Manifest number:          05DD
Signing time:             Sun 27 Jul 2025 02:27:52 +0000
Manifest this update:     Sun 27 Jul 2025 02:27:51 +0000
Manifest next update:     Tue 29 Jul 2025 02:27:51 +0000
Files and hashes:         1: v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl (hash: AIhqjFwGC30g+hqT0dybVbZvrBWPnGDbbA31vpJsmjQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691764AF, serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
        Validity
            Not Before: Jul 27 02:27:51 2025 GMT
            Not After : Jul 29 02:27:51 2025 GMT
        Subject: CN=68858ea8-397f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:80:58:dd:bc:fe:27:00:51:92:0f:d9:58:
                    63:eb:1f:ec:12:95:35:db:51:f0:d2:e8:5c:32:02:
                    01:1c:94:54:e1:8d:0f:9c:aa:d8:4b:a0:03:91:98:
                    23:98:75:32:3b:4a:29:c8:0c:d6:bf:a1:a9:df:f6:
                    6a:63:be:77:10:97:ea:9e:29:18:c5:3e:2e:d4:7b:
                    fa:4d:2e:90:55:15:45:65:29:d1:33:97:9b:e1:a0:
                    7f:c5:3a:b6:ca:f4:59:d0:89:f9:cd:c4:7c:19:72:
                    13:82:e7:d8:61:a9:0d:ef:aa:1c:7c:f5:a9:64:e2:
                    c5:ac:1c:fa:2f:aa:c7:6f:db:6c:82:37:d2:e7:30:
                    74:94:d7:7c:84:3a:c5:00:43:f2:76:b9:90:08:83:
                    01:c4:55:59:7f:95:b0:78:66:e5:f0:0f:26:b5:b2:
                    0c:0d:dc:0d:41:50:6a:6f:85:69:e2:a5:81:ce:b2:
                    8a:2b:ae:16:4e:54:d7:51:00:25:4a:dd:c3:92:1d:
                    7b:f7:5b:4e:4f:a7:b6:45:34:56:63:c3:01:b7:04:
                    af:7e:0f:a1:21:7e:4d:e0:38:12:5e:9b:0b:42:4b:
                    15:7a:13:7c:c6:62:9a:b1:fe:d0:f1:cd:aa:3a:32:
                    70:68:02:0d:f2:e2:a8:7f:b4:2c:80:56:b3:f0:a6:
                    6d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B1:8F:C5:14:61:EF:91:B1:85:CE:E3:D7:5E:09:42:7C:18:39:9C
            X509v3 Authority Key Identifier:
                keyid:BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ca:f6:19:13:f1:6b:11:da:33:34:6c:d9:d1:36:9e:18:06:
         95:b6:63:95:20:9c:44:69:ca:09:f1:89:16:77:cd:13:0c:f0:
         4e:8b:9c:f4:79:7d:d8:f1:ee:a1:5d:95:2a:c8:e4:7b:b5:e9:
         80:69:cf:e4:ac:0b:45:07:6f:82:5f:2e:b4:64:86:5a:6f:44:
         46:96:cb:e3:c9:a5:1e:7d:c4:eb:6c:c9:fb:ef:f2:e0:49:0f:
         50:58:99:72:2a:2b:36:03:84:af:fd:11:66:33:df:3c:ca:2f:
         20:7e:81:c6:bd:9a:be:a6:8c:ff:57:3a:14:52:85:fd:bb:cf:
         97:79:3f:93:df:03:75:f6:4c:43:bc:57:01:b4:09:aa:1f:2d:
         1a:1a:1c:90:44:d4:70:1d:bc:57:1e:ea:07:82:2b:c8:cd:3e:
         0c:87:47:0f:c0:97:75:be:e9:99:7c:8b:e4:df:9a:9e:ec:ae:
         1d:e7:57:6f:a1:ec:f1:55:8c:c1:85:fd:90:1c:ab:dc:b4:b4:
         7a:b6:19:9a:7c:66:44:9d:c1:a3:54:60:a0:4d:bc:43:ae:99:
         f8:1b:42:40:03:3c:a7:2c:d8:45:54:d4:63:a5:05:69:56:1e:
         34:a1:1b:64:6d:30:fc:01:c1:93:9f:15:54:7e:68:12:20:5d:
         23:a0:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:16:57 2025 by rpki-client