Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
File:                     Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft (raw, json)
Hash identifier:          WTExLqAIQY54L4SpKy1w3pC50quAPYyvGftZF/JwEss=
Subject key identifier:   CA:6E:76:7E:EE:42:FC:0E:AC:AF:00:F2:03:65:51:61:3A:A5:53:C2
Authority key identifier: 46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C
Certificate issuer:       /CN=F36C29E6AF/serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
Certificate serial:       3C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
Manifest number:          3C
Signing time:             Sun 27 Jul 2025 05:24:07 +0000
Manifest this update:     Sun 27 Jul 2025 05:24:07 +0000
Manifest next update:     Tue 29 Jul 2025 05:24:07 +0000
Files and hashes:         1: Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl (hash: r+tHPjE4AyhfB5lh4y6kkCqi9mPqu3n/lSwFsPi1GZw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C29E6AF, serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
        Validity
            Not Before: Jul 27 05:24:07 2025 GMT
            Not After : Jul 29 05:24:07 2025 GMT
        Subject: CN=6885b7f7-7008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:b5:4f:bb:69:d1:5e:7e:7f:9d:56:f6:f0:
                    be:c1:64:53:f9:85:45:84:46:8c:d2:a6:bf:88:2c:
                    6e:03:61:27:b2:2c:4d:0c:a4:ab:3c:09:82:48:b8:
                    3e:79:7c:6a:77:ff:2a:86:46:7d:53:60:3f:62:8d:
                    a6:96:68:9c:a3:26:b4:85:e2:01:f8:2b:e7:03:88:
                    96:30:05:3a:37:fe:24:e2:c5:cc:41:3c:e2:b4:dc:
                    27:11:63:74:c8:db:49:53:44:7e:7f:94:53:b4:7a:
                    59:6b:4f:cb:b0:bc:f5:da:da:ec:ef:33:55:d6:79:
                    d6:d9:d1:7c:c6:bd:bc:19:b8:33:1f:ca:9e:86:a5:
                    e5:e5:2d:c4:0b:a6:1d:23:be:41:15:c9:8d:a6:b5:
                    d8:f4:61:77:2a:ba:06:23:82:df:e9:00:7a:66:ec:
                    7b:a4:74:b3:30:29:5c:76:40:32:a8:0a:2a:de:e7:
                    24:77:56:1b:0b:7e:30:54:8a:ce:43:07:7e:cf:42:
                    7e:09:94:62:14:b2:34:b1:95:12:f2:04:4c:f8:b0:
                    19:27:b0:81:83:36:e8:32:01:14:47:c8:52:3e:e3:
                    d2:ce:80:b8:cf:8d:b8:b1:5e:7b:c3:5f:bd:c7:ae:
                    8f:98:5e:9d:6a:4a:70:6c:fe:0c:57:6c:74:1d:a8:
                    48:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6E:76:7E:EE:42:FC:0E:AC:AF:00:F2:03:65:51:61:3A:A5:53:C2
            X509v3 Authority Key Identifier:
                keyid:46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f2:5e:eb:6a:d6:51:91:a9:74:b0:81:66:af:ae:2f:bc:77:
         11:02:7b:ae:93:1c:30:bc:a3:52:63:39:fe:12:fa:d2:53:9d:
         ff:18:e7:94:ec:98:08:1c:49:1c:24:ad:5e:07:9f:5f:fe:4c:
         22:15:08:7f:48:f7:e0:92:54:0b:2d:5d:49:b8:27:a1:2d:02:
         5a:4a:7f:2b:56:32:d1:27:4b:60:66:e5:00:e4:0f:36:d6:8d:
         7d:97:e9:04:f5:ab:bf:d0:ef:2d:2e:75:a5:0e:22:db:5b:19:
         2f:9d:aa:63:61:31:3d:f7:c4:b1:5e:da:c8:49:dd:1c:2e:8e:
         4b:e7:cf:fd:ed:76:8d:d8:8b:c2:72:ca:d7:2d:b1:12:7c:dd:
         46:c8:9a:4c:2a:93:5a:a7:8a:72:1a:1e:b6:67:27:85:e2:f2:
         17:e7:cb:34:1b:f1:ab:f3:9b:14:d2:28:3e:8c:e5:a7:a1:6a:
         fa:dc:72:d9:0e:ec:43:09:32:fa:6b:60:4c:26:0d:89:1a:5c:
         d8:92:d4:ba:1e:a1:59:7d:90:e0:ab:c1:3f:80:1b:18:3f:37:
         7a:64:fa:b9:eb:e4:23:81:c0:48:8f:80:42:47:4c:5b:42:30:
         b5:f3:39:25:86:e4:1d:b4:06:11:9d:7e:b8:08:f3:78:8c:48:
         6d:c0:af:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:43:05 2025 by rpki-client