Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
File:                     pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft (raw, json)
Hash identifier:          an/tO0uvikJ+Z9kpCmc3Iat5nUGitJM8kk58rAEgUJU=
Subject key identifier:   72:14:0F:DB:8F:F7:A7:F2:89:C2:E1:C8:C4:6A:E6:62:F4:DE:81:DD
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Certificate issuer:       /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial:       0150
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
Manifest number:          014D
Signing time:             Thu 31 Jul 2025 05:03:20 +0000
Manifest this update:     Thu 31 Jul 2025 05:03:19 +0000
Manifest next update:     Sat 02 Aug 2025 05:03:19 +0000
Files and hashes:         1: pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl (hash: joQoY5FO0W3z4vi/XylMMOq+hfiZTL1QGsLHKmXY3Lk=)
                          2: 3D6B042477A311EF8B65448C762E951A.roa (hash: TQ2pYgQMjddwwjuMRvhC7oG/YTmFbZhFUDTK4ehlRyY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6CA3AF, serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
        Validity
            Not Before: Jul 31 05:03:19 2025 GMT
            Not After : Aug  2 05:03:19 2025 GMT
        Subject: CN=688af917-7448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:c8:b8:70:fb:45:7e:ca:fa:5a:b0:a3:86:
                    e6:48:e3:e3:0c:41:8f:ef:27:35:5e:38:b7:ca:95:
                    13:1e:bd:62:43:55:1f:bf:40:34:17:f3:2b:91:a1:
                    89:b4:3f:50:db:b9:8b:54:ae:ff:2d:35:be:a1:66:
                    fe:f2:9e:50:bf:43:1b:0f:81:25:69:16:a8:af:b9:
                    20:46:cb:0f:c9:72:7b:60:55:a5:5a:2b:4a:f3:3e:
                    9b:03:84:c8:9f:d3:f9:61:2d:cd:40:1b:19:b1:5b:
                    70:cc:13:bf:e0:e9:b7:56:5f:d8:d0:70:d6:01:31:
                    e2:31:ef:19:f0:83:3a:ea:b9:74:e5:88:62:c7:de:
                    89:a4:bb:b2:86:68:66:e9:ac:c1:89:c5:6d:75:fc:
                    6c:bf:1f:5b:ce:c2:ec:aa:51:fe:04:4b:61:ed:7e:
                    da:4e:5d:f9:e7:52:6a:27:63:2b:c7:53:e7:44:df:
                    36:56:39:98:65:82:73:48:33:83:14:e6:52:9f:0a:
                    9f:2c:09:08:f0:8b:2d:87:32:55:45:58:c8:76:4f:
                    5b:1a:b1:05:05:d9:ed:d6:19:07:96:6c:f6:9b:cd:
                    76:06:44:5f:61:f9:62:db:fa:f0:8d:75:30:bd:bc:
                    27:6a:c3:68:c7:ef:f0:e0:1a:ce:a8:07:fc:b9:a5:
                    1a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:14:0F:DB:8F:F7:A7:F2:89:C2:E1:C8:C4:6A:E6:62:F4:DE:81:DD
            X509v3 Authority Key Identifier:
                keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:09:a0:9b:0a:81:b5:41:36:d7:bf:b0:26:c9:41:1b:67:35:
         d6:e5:5d:7a:01:e6:d6:cd:35:30:03:de:cb:04:de:91:2e:f8:
         dd:cc:3e:e8:ea:f4:2a:b5:ea:03:3b:3e:b0:79:96:1e:11:06:
         45:c3:14:86:d5:71:19:b5:ad:8c:19:f8:6f:29:b9:68:06:33:
         94:d0:09:25:9b:0e:41:e6:2f:1b:87:dc:b4:f4:90:7a:c3:01:
         a3:02:bb:12:64:78:01:30:1b:13:95:d8:cc:26:fc:b2:34:44:
         f4:1e:41:0f:9d:3c:1d:58:ad:98:35:1a:35:ed:6b:5b:8b:5c:
         1f:93:f7:9d:a6:00:18:85:ea:2c:f0:e5:1e:ea:ce:b3:e8:00:
         e8:f3:b4:4c:8d:49:bd:5e:34:36:6c:0b:4d:e0:b3:95:24:5d:
         db:46:9a:3b:ff:ce:5a:3b:ea:6c:a2:42:28:e9:f8:74:57:42:
         eb:42:1a:77:fc:33:35:64:8c:40:9c:41:af:02:23:b1:69:fb:
         19:6e:16:ae:9a:27:f2:b1:47:2a:a0:cf:24:cd:fd:38:be:9e:
         a3:57:ef:99:06:70:3a:47:e4:5f:b7:38:17:b6:c4:fd:8e:3d:
         60:72:34:5a:7c:89:11:20:81:10:d1:a4:f5:bf:95:2e:10:17:
         a4:16:59:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:13:16 2025 by rpki-client