Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          CZGdl3W8FWh9D2YglftOIsVo8sCviXZVrnXzkgNP1Ow=
Subject key identifier:   3E:40:4D:A9:66:2E:EF:9A:68:11:FF:CB:D9:62:8D:8D:9B:EC:0E:4A
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       06FD
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          06F8
Signing time:             Sun 27 Jul 2025 02:04:06 +0000
Manifest this update:     Sun 27 Jul 2025 02:04:05 +0000
Manifest next update:     Tue 29 Jul 2025 02:04:05 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: C+NfKUqsoEdi3chtp6GNzoTyAvilH51j0O1LOsREgUo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789 (0x6fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: Jul 27 02:04:05 2025 GMT
            Not After : Jul 29 02:04:05 2025 GMT
        Subject: CN=68858915-ca63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:3c:5a:ff:a4:be:e7:c4:3b:cd:da:6b:1f:
                    29:d4:d7:75:d9:dc:ce:3a:06:51:22:93:7c:34:02:
                    ed:4a:dd:03:47:ed:b8:42:77:12:f1:ed:56:e3:04:
                    e1:f8:b0:eb:ec:41:de:d1:e9:ce:4d:22:b3:df:be:
                    21:ae:71:76:b7:48:76:59:14:15:53:11:4c:fe:96:
                    3e:77:4f:b9:6e:1c:8e:1d:69:82:a5:ad:b9:45:8d:
                    ca:4d:4a:8d:7b:8c:b7:c6:47:f7:e0:23:f2:ae:49:
                    3a:05:3d:b3:08:09:e3:ec:c0:7c:d2:0d:15:b6:fa:
                    3d:fa:75:7e:e6:62:c3:5d:a9:ba:c2:56:cc:e7:65:
                    30:35:e0:76:52:f5:20:a2:00:46:31:f4:1c:fa:3a:
                    e2:98:cd:ee:62:7a:3a:4f:05:93:a3:b0:75:7a:08:
                    23:61:53:1e:d6:01:48:33:03:e1:f5:82:bb:9d:32:
                    ca:55:04:35:33:d4:e7:d4:da:32:18:b0:9b:2d:2e:
                    2a:6c:80:82:08:f6:fe:7e:7b:5e:c8:86:23:89:5e:
                    1f:b1:b0:33:73:13:da:51:9e:1e:cd:9d:3e:f2:d1:
                    69:e6:76:85:70:65:e6:e7:df:88:27:42:d9:d2:a4:
                    6a:ba:c0:2d:13:60:3c:5f:c4:b0:79:99:ff:25:fb:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:40:4D:A9:66:2E:EF:9A:68:11:FF:CB:D9:62:8D:8D:9B:EC:0E:4A
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b3:0f:f5:dd:2e:99:a0:b6:7c:c5:42:75:56:91:4a:39:20:
         43:0d:05:ed:44:ea:5f:ef:c2:3e:2f:f1:c5:f1:52:4c:be:b8:
         d7:a3:d3:a0:4d:dd:55:fe:b3:17:82:3e:34:a2:95:cf:51:96:
         5e:90:30:53:4f:00:6e:ad:3b:8c:cc:ff:ba:fc:67:12:5c:8e:
         24:c8:e4:e7:b7:bf:0e:3a:2e:2b:28:4e:bf:31:b3:38:f6:e6:
         16:f2:83:df:e0:a9:a2:42:21:ff:c3:cc:7f:94:76:6b:aa:db:
         ba:93:bc:d1:b6:23:9f:a3:c6:60:b7:e6:8d:5a:a4:1f:96:91:
         a8:9c:27:29:95:9e:25:fd:26:63:09:3d:dd:96:a1:47:69:a8:
         7c:70:d8:76:7b:73:13:93:9a:e4:e7:15:3a:35:2a:d4:a0:28:
         49:4f:92:46:78:6f:1c:71:93:6a:1c:01:83:2a:ce:d3:4b:b2:
         65:cf:c8:09:cc:5a:f3:a0:8f:cf:c3:b1:6c:fe:90:87:f3:3b:
         2a:04:b5:86:0c:95:cb:ff:fa:b7:70:86:fc:b6:2c:9b:b3:cd:
         2b:30:1d:72:35:d1:16:40:ef:a2:10:bb:b1:d2:b7:bc:dd:fc:
         95:c4:42:80:a6:8f:48:2a:35:fb:a0:66:c6:cc:ac:58:41:22:
         c3:22:6b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:43:05 2025 by rpki-client