Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
File:                     _VmsIHc1mw1yPSCqmZqOFqhLQZM.mft (raw, json)
Hash identifier:          XE2SEpYgq70NUZ/TXeGoo1SRBn5ysSTp1TRAsNH9gjA=
Subject key identifier:   BE:D9:7B:79:FB:AB:FC:EF:CC:93:73:CF:6C:E0:FA:C8:22:1C:AC:BA
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Certificate issuer:       /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial:       0D69
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
Manifest number:          0D68
Signing time:             Sun 27 Jul 2025 01:02:31 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:30 +0000
Manifest next update:     Tue 29 Jul 2025 01:02:30 +0000
Files and hashes:         1: _VmsIHc1mw1yPSCqmZqOFqhLQZM.crl (hash: LrY7gUr201kEahAUydydFT03wQsfK4AjVQbTrng/Dig=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3433 (0xd69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Validity
            Not Before: Jul 27 01:02:30 2025 GMT
            Not After : Jul 29 01:02:30 2025 GMT
        Subject: CN=68857aa7-929d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:98:47:5f:1d:2f:fe:2f:ac:a6:37:b8:c1:
                    1a:74:09:7a:a3:0f:33:a2:5b:06:57:fb:55:b0:c3:
                    cd:cc:36:95:dd:c1:4e:c4:1b:29:8c:1e:5c:6f:58:
                    f8:d4:8d:cd:07:87:9a:91:50:2d:08:d4:fc:20:f3:
                    95:d7:3b:d2:7b:31:99:9f:87:ee:d6:40:30:5d:3c:
                    8c:bd:34:e0:b9:74:ae:df:8d:06:74:97:f6:af:d4:
                    c0:3f:8d:1b:74:6e:41:6b:db:bb:d9:4b:f3:b1:d9:
                    83:59:17:2c:42:31:b3:43:64:24:45:4e:3f:61:55:
                    46:cb:41:41:1c:63:cf:ac:70:e4:df:45:15:c9:d0:
                    96:c4:84:e0:5a:71:ce:80:0c:44:6d:7a:c9:77:c7:
                    4d:6d:ef:ea:6c:53:2a:cb:30:0f:1b:82:0c:c1:f7:
                    4a:43:03:36:78:50:d6:3e:8a:4e:da:9e:4e:6c:8c:
                    74:82:ff:e0:1b:f2:e3:b0:cd:50:f6:25:fe:c5:43:
                    f8:8e:c6:de:13:0d:30:e1:56:ff:9a:ef:28:70:5c:
                    b0:ec:d4:c0:68:69:7a:90:1a:46:ba:23:d8:f3:53:
                    c9:98:ee:19:cf:5d:6c:c2:58:66:45:4c:18:b6:e4:
                    98:85:71:e3:07:30:a4:d2:fb:98:bd:23:bd:70:98:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D9:7B:79:FB:AB:FC:EF:CC:93:73:CF:6C:E0:FA:C8:22:1C:AC:BA
            X509v3 Authority Key Identifier:
                keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:96:fa:d0:e1:9a:5d:49:28:46:a1:77:db:e5:0b:17:35:16:
         3e:39:64:83:6b:a2:71:4d:da:39:0e:fd:23:09:2b:37:29:05:
         97:1d:22:19:af:1e:c3:5f:78:be:5e:88:d1:be:3e:4a:2b:f6:
         44:9e:14:08:8c:c1:37:d2:ef:1a:0e:40:91:40:b3:4c:5b:89:
         f8:f4:81:4e:4b:22:be:3e:cd:a8:66:e4:0d:c6:0b:11:91:1d:
         ee:4f:ea:00:f4:cc:a4:b5:33:6e:82:cb:5b:f1:e6:a7:2d:c7:
         8c:e6:43:e5:22:6d:23:90:3f:da:3a:0a:4b:21:d9:d8:83:b4:
         67:36:6f:30:ec:d5:97:96:20:f9:94:23:c8:fb:e5:72:b9:9b:
         af:db:77:6e:2c:33:ce:13:0c:64:a4:85:fc:bc:19:7a:34:14:
         17:9a:84:c7:b8:33:7b:23:16:0a:35:aa:72:3e:d1:c2:de:e5:
         b8:c7:c3:a0:88:e0:56:36:68:8c:66:4e:27:6e:7a:43:9d:f4:
         6c:86:fe:23:4b:90:6d:1b:26:89:a8:39:be:28:7d:e4:a8:78:
         05:c9:35:3b:c6:0f:09:69:6c:65:2e:04:59:89:f3:bf:ed:c6:
         4a:75:44:f3:84:ba:15:77:85:6e:06:01:5f:9f:1c:f0:e8:85:
         69:01:f4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:33:48 2025 by rpki-client