Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
File:                     pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft (raw, json)
Hash identifier:          ZRvEwO2VNmS1QNQreAWvc3AemH2vnw9HBVDeZJXZ3Bs=
Subject key identifier:   08:86:29:AF:29:44:E0:42:8E:40:8A:1B:70:AF:87:C9:7A:F2:D8:8B
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Certificate issuer:       /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial:       0116
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
Manifest number:          0113
Signing time:             Wed 04 Jun 2025 04:55:05 +0000
Manifest this update:     Wed 04 Jun 2025 04:55:04 +0000
Manifest next update:     Fri 06 Jun 2025 04:55:04 +0000
Files and hashes:         1: pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl (hash: ntoFpEzoqD/q/DtPzWGs32YSkHX//+2FnJwv0Rup4tQ=)
                          2: 3D6B042477A311EF8B65448C762E951A.roa (hash: TQ2pYgQMjddwwjuMRvhC7oG/YTmFbZhFUDTK4ehlRyY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6CA3AF, serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
        Validity
            Not Before: Jun  4 04:55:04 2025 GMT
            Not After : Jun  6 04:55:04 2025 GMT
        Subject: CN=683fd1a8-2a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a5:71:01:85:2b:a5:1d:bf:c8:41:e4:9f:97:
                    d7:d4:2e:b1:d0:ce:2a:cd:ad:6f:1b:60:03:cb:a9:
                    cc:20:34:c5:09:95:55:de:65:6f:17:4b:d7:db:f5:
                    f4:21:8b:21:3c:5e:a4:5f:09:27:57:18:21:5e:7f:
                    2c:8d:97:ba:f6:c6:a1:38:4a:48:c8:bd:f2:9c:3c:
                    c0:97:a6:25:92:07:72:e9:4d:0d:c8:42:e3:34:37:
                    07:52:57:4e:64:cd:9d:04:3d:49:c8:e8:55:fb:35:
                    c5:35:5f:e3:8f:af:4a:e6:74:31:5e:d9:57:93:f0:
                    cb:86:a4:eb:d0:4b:60:d1:3a:b8:47:a1:31:cb:db:
                    e5:53:94:77:10:7a:58:f7:5f:98:26:60:f8:53:5b:
                    0f:dd:db:24:42:f1:83:bb:1b:17:52:3a:5e:21:a9:
                    e8:00:f7:b3:e7:e7:a3:3b:a9:96:e5:a2:08:22:6a:
                    1e:85:76:98:92:2b:ff:0f:ed:5c:5e:31:71:33:7b:
                    6e:05:f5:63:21:fe:e1:4f:e3:bc:51:e2:3c:18:fe:
                    3f:f5:49:f1:50:00:24:85:b7:ff:c9:86:b1:7c:b6:
                    66:fe:77:c0:2d:ec:39:fe:66:3b:1c:d9:35:fb:96:
                    b4:1d:58:c4:7a:70:32:d4:13:df:d0:67:79:f3:af:
                    81:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:86:29:AF:29:44:E0:42:8E:40:8A:1B:70:AF:87:C9:7A:F2:D8:8B
            X509v3 Authority Key Identifier:
                keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a2:94:6a:c2:f2:a0:54:0f:b0:4e:ce:24:d6:af:d2:29:f8:
         d9:e0:75:5f:52:72:62:b8:0d:64:1b:1a:ab:7d:f6:bc:74:5b:
         91:85:e6:f6:5c:f7:1d:31:80:f3:55:cb:a4:55:68:a5:03:17:
         24:f7:54:89:4b:0a:ba:f5:d0:9d:55:b0:33:15:6c:7c:af:28:
         0a:46:79:de:cb:2e:93:47:64:f1:81:46:f5:c8:96:b9:30:d0:
         ba:eb:38:d4:cf:8b:33:2b:38:8d:86:15:f5:55:c9:99:7d:0f:
         8f:d1:40:50:49:4a:82:e9:f5:90:82:03:f7:eb:12:5d:79:4d:
         e2:76:8d:f4:ee:e5:6a:2a:a8:e1:ec:ef:c3:67:7a:23:f9:a5:
         1f:81:a5:56:40:e6:16:e5:2a:c0:02:94:39:41:e0:4b:b9:17:
         a2:9c:ab:95:7b:8f:86:52:54:20:91:f5:12:94:c2:74:cb:73:
         2c:5a:e7:50:6d:09:e9:b7:89:96:ec:c9:68:4d:49:06:c1:fe:
         c7:b3:73:8c:8c:24:4c:37:cc:95:46:61:3d:1d:a8:51:94:a9:
         a4:41:b6:5c:52:9c:69:35:f8:63:63:33:25:c8:9b:6b:7c:76:
         d0:65:6b:d1:18:2c:23:d0:8c:f3:1b:32:2b:52:68:43:1c:3b:
         a2:3e:3f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:17:31 2025 by rpki-client