Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
File:                     bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft (raw, json)
Hash identifier:          DC0P0n9p3Oc5ldeW5Y7lD2b8a4X1KM5EKdPPacFA1Zs=
Subject key identifier:   0D:6A:3F:56:22:62:3F:F7:B2:A3:FE:AC:A6:E4:D5:C4:1E:EB:04:F5
Authority key identifier: 6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE
Certificate issuer:       /CN=F36C3584AF/serialNumber=6C0B46384E939A20D778364656645013B5F766FE
Certificate serial:       0362
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
Manifest number:          0362
Signing time:             Thu 31 Jul 2025 03:44:56 +0000
Manifest this update:     Thu 31 Jul 2025 03:44:55 +0000
Manifest next update:     Sat 02 Aug 2025 03:44:55 +0000
Files and hashes:         1: bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl (hash: rB9we/P02TrAncl6rEUJbkUX8dhLFAlwP8+UZhhsNCI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3584AF, serialNumber=6C0B46384E939A20D778364656645013B5F766FE
        Validity
            Not Before: Jul 31 03:44:55 2025 GMT
            Not After : Aug  2 03:44:55 2025 GMT
        Subject: CN=688ae6b7-5583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:93:76:04:bc:8b:ea:ef:7b:d2:d5:00:4a:
                    d7:ef:be:e4:84:b3:a1:d4:6f:5e:9f:7a:f6:f4:2c:
                    75:b2:a8:6c:a8:65:97:fe:83:4f:a4:92:a4:ad:b8:
                    da:e1:e8:30:0f:e2:ea:1c:a4:12:dd:8a:51:1f:4f:
                    f3:d0:7e:29:91:8a:9b:b8:b9:d3:84:9e:03:25:b0:
                    c2:6d:2c:28:a6:9a:f3:4d:1b:b5:9a:f6:22:58:d3:
                    6d:a4:8f:c4:dc:13:e3:fa:fa:78:34:6d:db:de:0d:
                    63:fe:a8:ae:e9:04:b8:0d:f8:6f:e8:fc:0c:3a:80:
                    91:1f:05:93:e6:5a:60:2a:ba:47:3d:7c:06:4b:56:
                    df:26:2a:8d:d6:01:7f:82:b0:df:53:1b:42:13:3c:
                    5d:15:bd:8c:4b:01:ab:11:d1:90:3c:9e:95:6e:3d:
                    c1:24:df:81:84:a6:e5:7e:d2:61:e0:b7:a3:86:0e:
                    50:78:6e:34:01:ba:bb:06:61:2b:65:f7:e1:6f:5f:
                    00:57:d3:4f:f3:8e:d5:71:22:c3:55:9a:72:77:55:
                    a0:78:44:ba:49:9b:fb:9b:5e:7a:db:81:22:0b:c6:
                    67:c3:a3:45:2c:1b:ae:4c:bf:aa:b1:5d:3d:e3:b9:
                    ff:90:13:f6:4c:64:2c:b0:c4:b8:8c:43:d2:bb:e5:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6A:3F:56:22:62:3F:F7:B2:A3:FE:AC:A6:E4:D5:C4:1E:EB:04:F5
            X509v3 Authority Key Identifier:
                keyid:6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4a:27:00:7f:ab:1a:67:2a:34:0b:5a:71:e9:a3:25:7e:fa:
         df:19:44:23:09:52:97:52:31:c6:fc:f7:3f:31:af:30:56:ad:
         73:26:c3:62:b5:76:86:ee:34:5b:35:75:06:ef:c6:aa:c2:21:
         57:38:7b:8d:24:8e:93:17:18:ba:91:12:1e:71:e9:08:6e:6d:
         45:fc:1d:34:27:05:82:84:14:ec:be:9e:6c:b1:52:99:22:b2:
         72:a8:20:6c:b1:f3:d3:d5:93:26:53:e7:43:f8:20:29:3e:24:
         1f:1d:84:b6:ef:5f:89:b2:b9:c6:f6:9a:fd:77:4b:0c:34:ab:
         65:a4:7a:b8:9a:cd:9f:65:28:ee:40:15:a5:e6:cb:21:b2:7e:
         a7:8f:09:cd:ef:32:c4:f8:9b:a6:e8:9a:40:55:23:bf:cf:38:
         58:d0:61:40:76:c1:ed:8d:6b:a2:a4:1f:e6:ad:fb:7e:bb:da:
         5a:dc:54:9e:a0:0f:22:a8:26:39:e8:2d:08:ba:55:94:79:0b:
         70:69:2d:a4:e1:06:69:91:83:52:6e:c2:6a:b5:84:e0:fa:38:
         d3:62:00:a1:e6:df:21:1c:d4:eb:a0:2f:ce:f3:50:7f:e0:18:
         21:22:cb:80:2a:56:ac:64:b2:91:e8:f8:2b:e6:58:f6:76:d8:
         95:0b:c3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:32 2025 by rpki-client