Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
File:                     2dbgTePDYTvOHbKdd8ahOIrEIj0.mft (raw, json)
Hash identifier:          yJF7Mx1mE2NrC3JTQ1huPnD7orFUvMnWnbvDryyn88Y=
Subject key identifier:   45:54:E4:3A:33:10:18:AB:31:90:7F:7C:A9:C1:51:25:81:86:75:32
Authority key identifier: D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
Certificate issuer:       /CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
Certificate serial:       0298
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
Manifest number:          0295
Signing time:             Sun 27 Jul 2025 04:10:03 +0000
Manifest this update:     Sun 27 Jul 2025 04:10:02 +0000
Manifest next update:     Tue 29 Jul 2025 04:10:02 +0000
Files and hashes:         1: 2dbgTePDYTvOHbKdd8ahOIrEIj0.crl (hash: Xt9YJMoKpG1oqPiJqKXFT6KeuVvfL8vOgfnHb8udfeo=)
                          2: B56502AE36B211EFAA421B5E762E951A.roa (hash: pW3bMqz4FHfQnjso9ES+xBDe7OZbTMlRNhZcJvVAqsk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1E88AF, serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
        Validity
            Not Before: Jul 27 04:10:02 2025 GMT
            Not After : Jul 29 04:10:02 2025 GMT
        Subject: CN=6885a69b-e0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:ee:9f:82:94:54:a2:83:6e:1c:5d:fa:ce:
                    5b:1c:80:f0:fb:02:ef:b0:e8:b2:d4:21:8f:cd:16:
                    51:1c:09:1a:7d:1a:80:0a:1f:f9:30:2b:cf:0a:e8:
                    e3:13:7c:d1:00:ce:85:c3:62:90:3a:c8:5c:c2:4c:
                    dc:9f:89:98:59:db:88:7a:04:eb:d1:50:d7:b7:3c:
                    79:9b:08:ec:df:2e:f6:c5:64:a7:e4:5c:fe:c0:f0:
                    33:06:6f:7d:cc:9e:cf:02:64:99:9a:88:da:f2:8a:
                    45:89:8d:fe:f6:c8:c2:5d:84:ef:63:e6:ca:31:9b:
                    b6:41:92:b7:82:bc:4b:4b:f9:c2:26:ad:96:77:ae:
                    aa:7b:98:0d:b7:43:3a:81:c6:e9:7a:84:3d:1d:c1:
                    ad:14:d6:eb:d7:ec:09:15:12:f4:cd:23:4e:6f:d1:
                    34:8a:e1:f4:c3:60:e8:94:87:1b:a3:bd:81:10:cb:
                    d2:61:9a:74:07:c8:3a:8f:4f:27:5b:7f:45:f4:1f:
                    d4:e6:c5:9c:86:fe:0f:63:60:43:ca:ae:ef:11:2b:
                    e2:63:aa:ce:59:44:be:b5:cb:e4:07:1f:af:f5:68:
                    38:0e:bd:e2:0e:04:59:49:a2:01:df:1f:66:69:69:
                    06:28:07:c7:48:98:6f:cb:73:60:1b:c9:cb:4e:c2:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:54:E4:3A:33:10:18:AB:31:90:7F:7C:A9:C1:51:25:81:86:75:32
            X509v3 Authority Key Identifier:
                keyid:D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1b:95:28:4d:35:03:06:dd:ad:dd:7d:5e:88:7b:9d:de:9a:
         ce:8e:b9:ad:03:d2:b7:e5:ab:55:59:ad:55:3e:6c:7d:1c:7f:
         09:04:2a:99:4c:bc:24:74:8d:3c:8e:a1:a7:b8:b9:3a:4d:98:
         ba:68:0c:36:19:d1:31:6e:0f:ed:a3:3e:08:01:7e:c4:3d:68:
         60:76:14:73:5e:ad:fc:c5:f2:55:6d:13:9f:25:d2:a8:77:df:
         e5:29:41:fc:7b:1f:78:03:69:13:08:4e:71:cf:d3:63:41:58:
         f7:a6:c7:0f:dc:78:9b:72:59:54:27:5b:de:8d:4b:80:79:a9:
         3f:e1:88:a8:50:94:9b:22:50:9c:46:19:01:e8:14:81:10:4f:
         63:91:ae:25:73:75:3e:67:62:2e:12:3b:92:3b:db:a4:4b:c3:
         ea:b3:8e:dc:85:14:84:33:f7:63:23:9a:fc:f2:e6:d5:18:5b:
         40:9d:ae:01:41:58:2a:1f:99:7c:be:34:e7:85:de:10:b0:81:
         77:26:6f:f4:35:76:18:39:13:9e:16:ef:20:fb:53:13:39:da:
         af:9a:2d:ff:f4:a0:eb:f0:2e:ab:ff:e5:e7:92:72:a7:16:2d:
         3d:02:45:83:dd:c0:e3:2d:ff:fb:86:5a:cd:19:94:12:39:58:
         cd:2a:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:07:17 2025 by rpki-client