Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File:                     hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier:          8RF/yU5+8qYi4e4ozDknDHYnAMx7MVT4Q7DESSWZVFQ=
Subject key identifier:   AF:4B:83:F9:FD:76:28:89:4D:26:3B:F0:1A:D7:F4:8C:D0:B6:FF:74
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer:       /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial:       03A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number:          03A7
Signing time:             Thu 31 Jul 2025 03:34:47 +0000
Manifest this update:     Thu 31 Jul 2025 03:34:46 +0000
Manifest next update:     Sat 02 Aug 2025 03:34:46 +0000
Files and hashes:         1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: L6t8kxvRRl/0TuO3TOSj5gFE0FWDsFtl4RrDJkXBm3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936 (0x3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
        Validity
            Not Before: Jul 31 03:34:46 2025 GMT
            Not After : Aug  2 03:34:46 2025 GMT
        Subject: CN=688ae457-902e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:05:4e:bd:ce:d5:1b:64:08:6a:bd:d3:3a:
                    43:1c:66:06:a6:39:50:fe:5e:73:56:46:66:c5:c3:
                    f4:63:78:27:9c:f8:89:a7:01:04:31:98:01:87:52:
                    b5:55:95:df:ac:94:84:10:7e:c5:df:23:aa:d2:3d:
                    e8:e2:b6:c4:68:47:81:be:5e:67:69:98:9d:54:6e:
                    fa:0e:47:63:33:49:36:85:bb:55:a9:76:bc:89:f9:
                    ad:b2:f3:e4:3e:b9:72:ad:11:a0:f5:23:81:a4:bd:
                    68:83:8f:4b:27:3c:03:49:61:8a:d3:b7:88:d2:c2:
                    95:a8:f1:83:76:48:0a:db:dd:16:98:8a:b9:52:dc:
                    84:ed:dd:37:08:e5:05:97:24:82:8d:3c:53:6a:63:
                    0e:b2:f9:99:12:b6:bb:58:84:c9:cb:7f:c1:8e:90:
                    72:08:e7:89:e5:0b:e1:36:2f:87:34:51:bd:55:52:
                    9d:0a:b4:9c:43:2d:99:e7:a0:a2:13:35:6f:67:78:
                    87:12:c1:11:03:20:fe:12:d5:38:73:ab:a4:e9:93:
                    be:a3:bd:c5:87:97:6a:4f:d6:ed:35:7d:a7:44:94:
                    68:bd:2b:c0:63:f0:ee:90:d4:d4:74:d8:04:c9:39:
                    71:64:3f:10:3b:80:8a:f6:b7:4d:8e:76:73:95:70:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4B:83:F9:FD:76:28:89:4D:26:3B:F0:1A:D7:F4:8C:D0:B6:FF:74
            X509v3 Authority Key Identifier:
                keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c9:91:16:61:d6:2a:90:c6:4a:aa:bf:8d:06:01:a6:66:ae:
         17:fb:90:f2:e6:d9:b7:b7:3f:d9:aa:7c:69:cf:6b:77:30:d8:
         05:d3:14:d4:6f:e9:8e:55:8f:1a:18:77:51:4d:2f:65:8c:eb:
         a3:9c:e0:95:33:cc:0f:99:80:2c:40:c1:8d:ca:f6:50:f7:16:
         84:96:f7:33:eb:a3:87:07:80:53:d5:20:44:91:2a:8f:a4:6a:
         7b:08:2c:e3:e6:c0:bf:27:b1:c4:7e:59:d7:ee:d5:72:62:16:
         79:fa:73:30:5d:5b:80:2e:8e:af:33:ee:11:a4:50:4c:f6:5a:
         40:ec:2c:c0:0f:9d:97:02:e6:8b:bd:bd:56:97:71:dc:74:d6:
         45:61:ab:83:1f:18:cf:d1:f7:a4:be:5e:bc:ff:1d:d0:aa:f5:
         2f:5a:54:ae:02:8a:b0:05:e1:ef:70:84:3e:ce:63:5a:3d:78:
         b8:24:13:34:f7:a5:5a:9e:a8:20:76:25:21:ed:10:3d:72:e5:
         8c:67:ca:01:99:19:6d:d8:c2:91:e1:fc:e5:a1:d2:ec:b7:b1:
         eb:f9:ff:2e:16:04:cc:2c:94:aa:d1:fc:9b:fe:57:94:eb:f6:
         9d:c0:e8:4d:50:51:65:cc:69:5a:04:21:36:e0:d8:04:bc:45:
         60:7a:9c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:17:52 2025 by rpki-client