Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
File:                     764LPX24gpNjrt_AWoTtudQExzk.mft (raw, json)
Hash identifier:          BqiWE5rgGoUzj8v5Gxp/5Guc4agYb1tLFR6wK4Kkpls=
Subject key identifier:   17:2A:89:D8:B0:B9:CF:57:81:90:AE:B4:EE:CD:D6:B2:FC:A9:46:2D
Authority key identifier: EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39
Certificate issuer:       /CN=F36BA482AF/serialNumber=EFAE0B3D7DB8829363AEDFC05A84EDB9D404C739
Certificate serial:       0178
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
Manifest number:          0177
Signing time:             Thu 31 Jul 2025 04:53:02 +0000
Manifest this update:     Thu 31 Jul 2025 04:53:01 +0000
Manifest next update:     Sat 02 Aug 2025 04:53:01 +0000
Files and hashes:         1: 764LPX24gpNjrt_AWoTtudQExzk.crl (hash: Xjl+W9h9B8x+Rej3mVZ8hDekZ9Z48f2AgtcutPVZI+o=)
                          2: B03C009254C711EF97374F66762E951A.roa (hash: tQA4avqeaHyVWCMp4VsdVygCnrOTJ/BZbTYkUrbytks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA482AF, serialNumber=EFAE0B3D7DB8829363AEDFC05A84EDB9D404C739
        Validity
            Not Before: Jul 31 04:53:01 2025 GMT
            Not After : Aug  2 04:53:01 2025 GMT
        Subject: CN=688af6ae-8a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:e6:a2:5c:66:18:37:63:81:2d:3f:cc:29:
                    e4:9b:ef:4b:b8:92:94:ed:73:c3:70:c8:99:95:8f:
                    01:bb:f7:37:25:cb:a4:39:68:fd:e2:bb:8e:51:48:
                    a9:2c:85:2b:ae:a0:42:3b:0f:f0:98:6a:80:65:50:
                    30:b7:24:7c:dd:e9:0e:68:5e:6a:76:5f:7f:08:0a:
                    78:9a:89:4e:68:dd:ca:62:17:57:ec:b1:ea:af:09:
                    aa:4a:79:8c:3f:b1:1d:27:f8:46:35:34:0f:eb:b0:
                    e3:d1:7f:e7:92:c7:9d:df:63:17:7f:09:94:03:10:
                    da:3e:1d:71:0e:e9:c2:3e:70:1f:11:36:68:d1:6e:
                    0f:35:2d:cc:a0:76:84:d5:0e:bc:dc:f9:83:e2:27:
                    91:9d:a0:8c:bf:df:22:b1:d1:47:af:1d:68:ba:68:
                    49:48:5e:33:a9:ee:cb:eb:63:5a:7f:88:06:45:63:
                    1c:f1:8e:29:c7:03:d7:ce:2b:95:3a:58:12:17:0a:
                    ba:7f:96:cc:c1:3d:f6:71:54:b3:1e:60:06:11:57:
                    14:71:30:06:41:a0:93:fb:b4:38:ab:83:71:78:b9:
                    3a:20:42:3f:c3:96:53:81:b1:1a:d9:cc:c2:74:24:
                    5d:23:74:ed:3c:c6:a1:aa:c9:37:a0:3b:23:38:52:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2A:89:D8:B0:B9:CF:57:81:90:AE:B4:EE:CD:D6:B2:FC:A9:46:2D
            X509v3 Authority Key Identifier:
                keyid:EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b8:f8:02:21:32:a9:d9:69:b7:f1:69:40:02:d8:76:3b:fe:
         fc:21:8f:68:06:fd:71:2e:62:71:03:af:7d:56:06:b6:dc:4f:
         ce:f2:15:8b:36:c4:d6:07:bc:77:cb:13:94:57:ea:44:32:d0:
         f3:6a:38:1a:2e:83:a9:fc:3d:fa:9c:4c:be:f3:0b:20:6b:a8:
         bb:25:a1:55:c6:f7:0f:bb:34:27:74:39:d8:ae:b5:53:6e:91:
         a0:a7:2c:37:43:2a:13:ad:84:0c:51:bf:a7:63:94:84:c8:1d:
         52:a2:be:f4:74:93:30:c7:6b:2a:dd:83:4d:6a:4c:09:f5:da:
         69:18:c9:63:2b:54:9a:58:60:d0:ae:3a:90:b2:fe:6d:6f:fb:
         82:08:a9:ca:ac:e7:8f:72:5a:76:c5:d6:47:38:b7:9c:34:d3:
         c3:54:83:e4:97:34:d4:69:4e:1e:98:98:40:b5:d4:64:11:63:
         1c:4e:2e:a0:69:ef:a7:b0:45:f0:fb:ea:38:e0:d5:11:cc:a7:
         9d:b0:ce:8a:b8:2a:07:7d:0b:4f:25:cc:e2:cc:03:93:0b:ed:
         df:6a:1d:e5:67:e9:d2:f3:40:22:69:4c:29:e8:fa:87:52:a7:
         91:a9:ae:55:17:fd:90:0d:73:55:fb:77:10:5d:30:bf:19:fa:
         6f:c4:13:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:33 2025 by rpki-client