Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
File:                     _IwxIe9n77axzoOCjjTdt-4B7nc.mft (raw, json)
Hash identifier:          O7OxSJxeV8GgvkOz/8r4WqQyMtkvnZ9SXYfAEffDp4o=
Subject key identifier:   73:0E:22:D1:27:BC:3E:1A:56:6A:1D:7E:32:D9:74:6E:8A:B9:FD:45
Authority key identifier: FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Certificate issuer:       /CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Certificate serial:       0224
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
Manifest number:          0224
Signing time:             Sun 27 Jul 2025 04:25:18 +0000
Manifest this update:     Sun 27 Jul 2025 04:25:18 +0000
Manifest next update:     Tue 29 Jul 2025 04:25:17 +0000
Files and hashes:         1: _IwxIe9n77axzoOCjjTdt-4B7nc.crl (hash: aWxdzh5MzGFysKlZFAM63hHk1kFURLti4RDy+LaQIZ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AF, serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
        Validity
            Not Before: Jul 27 04:25:18 2025 GMT
            Not After : Jul 29 04:25:17 2025 GMT
        Subject: CN=6885aa2e-6417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:12:3d:14:4a:e8:e6:20:81:17:76:76:58:
                    07:b5:d3:74:5f:8f:9b:df:1d:3f:e1:b8:b5:10:4a:
                    ae:78:77:c7:af:50:9d:40:aa:48:66:39:38:fc:87:
                    1e:d2:84:d1:20:7d:97:91:dd:ba:ea:cc:b9:3d:df:
                    73:8d:f0:c7:6c:6a:f8:6f:c4:96:1f:8a:a9:55:f9:
                    c5:a5:4f:a7:e1:c6:0f:c0:1a:32:52:58:ce:93:e2:
                    1f:07:bc:48:b2:41:54:ac:cf:46:b5:44:5b:55:38:
                    c9:b9:00:7e:e6:dd:30:38:68:4d:46:4d:00:ca:63:
                    93:c0:0a:b5:f0:95:0e:ff:41:48:bb:7f:51:ae:92:
                    6f:68:87:99:c3:f3:6c:b1:90:0f:fd:cf:ac:de:56:
                    7b:8c:36:e1:7c:bf:05:d6:90:d0:53:51:67:f3:35:
                    b2:25:6e:73:7b:d1:28:c7:20:a9:d3:d7:d9:73:cb:
                    53:52:5c:ea:26:af:97:eb:a4:5e:2e:db:60:2a:28:
                    fc:4b:4f:5f:e0:c7:83:10:59:31:9b:45:74:99:72:
                    2a:52:f9:d7:3b:25:0b:8a:05:ad:93:9a:3d:83:53:
                    93:aa:a0:59:66:ba:50:63:20:4f:fb:48:66:43:e2:
                    60:00:95:53:57:7c:17:be:71:4c:33:8e:88:3e:72:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0E:22:D1:27:BC:3E:1A:56:6A:1D:7E:32:D9:74:6E:8A:B9:FD:45
            X509v3 Authority Key Identifier:
                keyid:FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:09:c4:e9:5f:24:4d:e7:d1:7d:0d:ca:43:2e:ad:d6:0e:d0:
         f4:9b:56:05:0d:93:9c:fb:3c:71:dc:a5:68:c6:5d:76:f8:af:
         7a:65:8f:38:8a:61:66:1e:e3:fb:6c:4f:fe:a0:ac:5f:68:b6:
         f1:ae:3a:65:a0:c6:c5:05:10:64:85:96:b2:ec:66:61:1c:c4:
         d4:fc:d0:0d:14:b4:06:99:cb:fd:9f:fa:ca:07:eb:c9:8e:26:
         cb:df:a4:3a:6e:7d:73:76:43:46:7f:01:64:1c:0f:8f:ed:cb:
         20:a5:93:92:10:a8:63:03:28:b7:08:6b:a5:da:94:1a:99:f8:
         28:e8:f7:53:97:8f:f5:c8:2e:52:ef:43:df:81:78:ce:a4:07:
         6f:44:d3:15:6e:ad:f5:da:c1:9e:24:8a:34:50:58:81:e8:5c:
         81:61:fa:5e:03:29:1f:f5:41:1f:b2:8c:ad:34:d1:ba:d5:b8:
         5d:05:7c:85:31:40:ef:06:13:01:5f:0e:8c:a1:81:1c:1e:cb:
         d3:32:81:29:5c:57:7d:dc:8e:55:39:c4:be:7f:ab:33:fc:42:
         a4:ee:65:5e:1b:56:62:a0:73:7b:63:80:0e:86:dc:68:75:be:
         d3:7b:7b:4d:e3:d9:c6:94:b9:2f:7d:20:8c:61:47:4e:e3:f1:
         3e:ab:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:25 2025 by rpki-client