Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
File:                     37GYokEhr76oC-bCVT7Qn4UiUDI.mft (raw, json)
Hash identifier:          d243SVq2L8sojOrMCXw+cWGBPwNJw+mksUSJb4nGyrI=
Subject key identifier:   B6:99:B7:E5:AF:CD:DB:97:C4:27:51:63:8E:E2:B0:52:23:00:DA:74
Authority key identifier: DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32
Certificate issuer:       /CN=F36E1839AF/serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
Certificate serial:       0B38
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
Manifest number:          0B37
Signing time:             Thu 31 Jul 2025 01:12:32 +0000
Manifest this update:     Thu 31 Jul 2025 01:12:32 +0000
Manifest next update:     Sat 02 Aug 2025 01:12:32 +0000
Files and hashes:         1: 37GYokEhr76oC-bCVT7Qn4UiUDI.crl (hash: 148Ladwa+REpWfUcZsEc8iMx70LMDHUJFjgYpxb6A1w=)
                          2: FA78454ADDC111E8B15C694DF8AEA228.roa (hash: uu495Ulte7M9lqyB0F6mlOadgmAPbSCrWmqWcuFpoQU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2872 (0xb38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1839AF, serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
        Validity
            Not Before: Jul 31 01:12:32 2025 GMT
            Not After : Aug  2 01:12:32 2025 GMT
        Subject: CN=688ac300-06b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:2a:bd:98:b2:78:7b:27:27:7e:05:2a:b0:
                    64:d1:4e:47:86:35:9b:e7:3d:c1:9e:ad:e5:17:d6:
                    88:fe:76:92:01:bb:87:cd:0f:74:a3:ee:1f:4a:82:
                    e9:45:07:99:52:6e:33:df:39:58:a2:43:11:45:6f:
                    c2:de:a2:5f:90:4a:dd:61:85:70:4d:70:d3:94:a9:
                    01:aa:23:a2:a0:ee:73:60:0a:10:c6:fd:bd:aa:b2:
                    0a:11:77:d5:78:81:d8:38:46:92:cd:df:c6:a7:d7:
                    06:26:af:cc:18:93:a1:3b:6b:12:02:8f:b0:89:3f:
                    00:87:b5:a5:d1:b8:53:7e:84:bb:d0:eb:30:3a:65:
                    20:6b:d1:bb:ed:fb:71:22:eb:29:7c:d6:06:95:68:
                    94:8d:e0:85:8c:8a:c1:dd:5e:31:95:de:97:c0:0d:
                    79:a0:b6:e8:f9:2d:2f:4c:6d:1a:b1:47:43:71:40:
                    71:1b:d0:1e:e0:a0:46:93:19:31:9a:33:81:a1:77:
                    b2:1e:54:cd:1a:40:43:a1:df:7e:28:58:45:a6:80:
                    5c:8a:e8:b5:46:f0:44:a6:7d:3a:f6:34:b9:9c:19:
                    64:93:74:03:46:80:2d:74:4e:69:3c:0b:e2:38:38:
                    13:bd:08:39:7a:7b:18:3e:0a:df:73:3d:01:da:b9:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:99:B7:E5:AF:CD:DB:97:C4:27:51:63:8E:E2:B0:52:23:00:DA:74
            X509v3 Authority Key Identifier:
                keyid:DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d7:87:b8:5a:ae:06:cb:29:27:9a:d7:d5:43:47:c2:e6:99:
         ab:b1:d0:f2:dc:e1:be:3c:1b:9d:73:4e:8a:a6:00:d6:ad:fe:
         60:45:b2:b2:78:08:5a:79:a7:60:0f:ce:94:c9:d2:40:cb:a6:
         4c:11:45:1b:9a:19:51:0b:1b:dd:38:41:7f:50:95:81:b2:07:
         4f:97:44:53:b7:b2:61:41:3d:69:39:2e:97:c1:25:a3:0b:29:
         71:c4:4a:a1:7a:a0:fb:28:18:d5:38:c7:a5:57:08:5c:c7:a4:
         b8:74:cf:64:33:9c:68:00:fd:73:a9:7b:fc:f1:50:a7:f9:ab:
         49:b3:3e:b2:ee:2e:00:a1:84:60:eb:76:5c:7e:1b:f6:73:36:
         70:c0:4f:f3:c7:39:a4:4f:21:7d:5d:64:9a:7f:bc:b0:6e:76:
         f2:c1:84:6d:26:50:49:de:0a:6b:d7:e6:8e:db:c7:a6:7c:aa:
         ed:88:d2:a1:76:3b:13:ee:bc:b3:61:22:c7:d5:a3:3a:06:b6:
         bc:36:9a:84:f9:96:ca:2a:0f:0b:b2:7c:b1:0b:fc:b5:36:2f:
         b0:4d:46:ad:42:f3:94:d9:92:43:31:32:cb:a6:8b:70:4d:e1:
         d6:26:26:0b:1e:4f:d5:86:dd:59:46:8b:a4:d7:65:0d:66:c8:
         6f:c4:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:13:06 2025 by rpki-client