Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.mft
File:                     7Pci_h3Wtep-vHjMFWZgKW21CVU.mft (raw, json)
Hash identifier:          9Ydmj/1FPfdJgMdG+fyzPuKIQOTATjMYC150uXwQRGE=
Subject key identifier:   09:D9:74:FF:53:AC:02:70:BC:0E:DA:45:B2:79:3B:8C:85:96:DB:12
Authority key identifier: EC:F7:22:FE:1D:D6:B5:EA:7E:BC:78:CC:15:66:60:29:6D:B5:09:55
Certificate issuer:       /CN=F36D8637AF/serialNumber=ECF722FE1DD6B5EA7EBC78CC156660296DB50955
Certificate serial:       0908
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7Pci_h3Wtep-vHjMFWZgKW21CVU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.mft
Manifest number:          0907
Signing time:             Thu 31 Jul 2025 01:29:22 +0000
Manifest this update:     Thu 31 Jul 2025 01:29:21 +0000
Manifest next update:     Sat 02 Aug 2025 01:29:21 +0000
Files and hashes:         1: 7Pci_h3Wtep-vHjMFWZgKW21CVU.crl (hash: MighqDDJmT7PG6FNus/pTYvCwXD12Wbybno0rq+SDEY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7Pci_h3Wtep-vHjMFWZgKW21CVU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AF, serialNumber=ECF722FE1DD6B5EA7EBC78CC156660296DB50955
        Validity
            Not Before: Jul 31 01:29:21 2025 GMT
            Not After : Aug  2 01:29:21 2025 GMT
        Subject: CN=688ac6f2-dd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:1e:02:70:79:24:ed:9c:99:bb:b6:70:cc:
                    48:2c:65:4c:95:e2:87:ca:31:e2:4f:8a:b0:b3:5b:
                    e8:0e:72:de:ce:7e:54:ab:57:5f:f6:18:f7:19:d4:
                    6c:54:0e:89:2a:c0:82:92:a0:ad:d5:d9:2e:b8:c7:
                    f7:1c:a5:61:d4:71:d4:b5:dd:50:5d:c0:00:92:ce:
                    6e:c5:89:17:6e:f0:d7:3f:22:40:59:c0:f4:fd:1f:
                    e5:7c:37:72:9d:40:b5:12:46:38:93:7a:f9:1a:65:
                    82:3d:c9:4a:f0:d2:fe:64:b4:28:12:1b:8f:72:e0:
                    0c:88:48:dc:3e:b3:c3:dd:ae:a9:f2:c6:71:35:3e:
                    5e:bc:5f:54:5b:26:ae:f7:2f:01:a4:89:9c:e7:24:
                    83:c2:b4:6e:66:97:c1:fe:8d:f4:b0:66:37:e2:dc:
                    a3:2a:3e:08:c5:00:db:06:10:e4:03:33:aa:e4:a6:
                    1c:9e:fe:17:a2:49:4c:55:d4:d4:ac:30:24:ed:b6:
                    a7:27:d0:7b:ea:bf:b7:35:cc:c4:5b:b3:df:31:c6:
                    01:51:8a:0c:a0:31:2b:e3:1c:2f:f2:35:da:d2:e6:
                    93:85:bb:9c:33:1c:68:8b:ce:76:41:18:8a:2f:5a:
                    ed:6e:02:d3:95:7d:4b:ed:82:56:79:a9:2c:97:f6:
                    cd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D9:74:FF:53:AC:02:70:BC:0E:DA:45:B2:79:3B:8C:85:96:DB:12
            X509v3 Authority Key Identifier:
                keyid:EC:F7:22:FE:1D:D6:B5:EA:7E:BC:78:CC:15:66:60:29:6D:B5:09:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7Pci_h3Wtep-vHjMFWZgKW21CVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/EC7F6226839711E9B06E881AF8AEA228/7Pci_h3Wtep-vHjMFWZgKW21CVU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f6:72:49:2e:74:45:d4:71:02:4c:b1:73:31:87:d3:72:6b:
         27:06:b1:6a:8b:2a:5a:39:63:1d:2f:e1:fe:6d:96:03:58:8e:
         10:34:38:9c:7e:ec:51:33:27:ce:01:f6:e7:d3:b4:71:1e:70:
         06:d3:ab:11:da:e0:c8:42:79:15:cf:72:1e:e3:41:69:29:b4:
         68:00:b4:b2:4e:63:b0:25:e4:73:03:87:a0:07:8a:fd:d4:0c:
         42:4c:e2:da:5d:7f:98:92:eb:d8:80:bd:8a:67:75:d3:0b:0b:
         f9:ff:67:9d:93:74:93:7b:d4:dc:3c:f6:e5:e0:6b:ab:3a:ca:
         3f:b6:30:cb:3e:ec:8b:ee:c0:e9:96:f2:f0:7f:55:a6:92:97:
         59:28:65:67:e3:b5:13:d8:dc:7e:2a:6b:82:e4:fd:1c:80:b2:
         7d:5f:20:37:f6:f4:bf:0c:af:76:e0:11:01:be:cf:da:58:70:
         7d:fb:7b:e1:4f:39:70:b8:da:96:88:cc:67:ac:39:ea:21:69:
         2d:ef:89:b1:14:b7:36:78:b2:39:21:72:70:a9:15:4d:07:f4:
         55:90:97:e4:11:74:5a:b5:d1:34:34:6b:77:60:78:c6:51:ec:
         4b:8f:99:f5:4a:ab:d4:f8:e6:b8:4f:2d:32:f4:db:3b:e3:48:
         98:63:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:20:24 2025 by rpki-client