Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File:                     LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier:          hdU7Vtg3m7nQzv6q8MmL4sVBh2UgH5cMWxHDWNQgVTA=
Subject key identifier:   B5:CA:DB:8E:CD:7E:8F:55:1A:F8:10:90:15:84:03:EB:C7:2F:DF:3A
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer:       /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial:       0216
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number:          0211
Signing time:             Sun 27 Jul 2025 04:27:58 +0000
Manifest this update:     Sun 27 Jul 2025 04:27:57 +0000
Manifest next update:     Tue 29 Jul 2025 04:27:57 +0000
Files and hashes:         1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: vPxavYFIYnDPJcNa7G3byewYoQBWDq7MwuvrK25zNrc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                          rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
        Validity
            Not Before: Jul 27 04:27:57 2025 GMT
            Not After : Jul 29 04:27:57 2025 GMT
        Subject: CN=6885aace-b1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:52:78:ba:e7:0e:b9:a0:84:2a:77:8c:bf:
                    a6:14:8a:d3:9a:e6:4e:d7:ba:25:8a:69:11:3b:c4:
                    fb:47:6d:2f:32:60:26:5a:da:20:93:e3:15:43:7b:
                    d0:7a:f0:24:92:73:95:33:87:1e:bb:65:c5:b3:61:
                    2c:f1:16:38:ea:2f:89:0f:47:1d:35:d2:96:87:5b:
                    44:9e:e9:cb:4b:52:e6:75:19:4d:89:6a:32:22:46:
                    d1:55:50:44:94:b5:31:4c:cc:ea:e9:c1:83:c9:96:
                    f8:af:f6:ab:32:eb:7f:80:0a:af:8f:25:7d:3a:f9:
                    46:57:3b:fb:fa:59:b4:f6:58:78:37:86:01:4a:c6:
                    47:00:6e:1a:84:d6:da:16:91:08:9a:59:a3:fd:e2:
                    f6:0e:4e:c8:a9:3a:01:3c:b4:32:5f:81:51:94:b4:
                    b8:9e:09:90:f4:5c:c6:50:c6:f2:08:7a:cc:ce:28:
                    bf:16:28:e9:72:bc:45:dc:b5:a8:24:27:67:ce:94:
                    2c:c9:bc:e1:a7:24:21:65:dc:3c:b4:af:99:fa:54:
                    dc:01:bd:f1:07:b2:a0:71:d2:60:a1:29:c6:32:5c:
                    1f:9d:8c:58:73:f4:34:a9:5e:83:37:f2:52:b5:e6:
                    2f:f7:a9:a6:18:e6:5f:30:ff:fb:00:ec:95:29:6a:
                    3d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CA:DB:8E:CD:7E:8F:55:1A:F8:10:90:15:84:03:EB:C7:2F:DF:3A
            X509v3 Authority Key Identifier:
                keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e9:4c:be:b5:60:77:67:ec:dc:23:dd:a4:b8:df:65:b2:51:
         f0:29:e6:05:18:9a:8b:36:89:1e:35:18:de:da:90:59:55:d4:
         44:82:e9:bf:7b:ea:87:df:66:0b:57:e2:8a:c5:7a:80:af:1e:
         65:7d:4c:eb:69:1f:63:17:74:dc:cf:bc:2a:e6:58:2a:22:f4:
         c6:f3:dc:98:c0:32:fa:27:f7:47:91:84:62:32:14:05:01:76:
         b3:77:eb:af:39:60:a1:5e:d6:48:d7:de:3b:88:c7:00:7e:bd:
         3f:37:f8:c8:25:fb:0a:0b:7d:fe:ba:d7:a9:4f:93:3e:6a:ad:
         e7:e9:4d:17:60:99:e3:df:59:5b:75:a3:1b:03:f1:a6:e3:1b:
         ee:9b:2a:78:31:c1:d8:da:13:6b:4a:63:d3:4a:a2:8b:92:0c:
         56:68:8c:07:54:93:4e:fc:69:b1:7a:6d:cb:39:7b:6b:49:3a:
         31:e8:02:8d:33:8f:e4:9f:2c:f3:24:48:bd:bc:2b:8d:a3:d9:
         50:cc:d3:3b:b5:29:36:3a:df:56:a6:5d:fd:26:d8:38:09:cf:
         6f:ba:ea:3d:e6:df:12:75:ee:97:4e:7e:06:fe:e0:72:03:23:
         bb:32:d1:c0:de:38:4b:11:ea:e5:e9:b3:94:06:99:b1:bb:7e:
         ca:6e:92:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:25 2025 by rpki-client