Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
File:                     HNlmJ3URky060f0tMBT24WjMSOU.mft (raw, json)
Hash identifier:          J50wuVR+jWEEmOCTShCT9xtgUHtLELYPe/+V0Rb90ew=
Subject key identifier:   EA:38:C0:42:CD:D4:4B:B4:FB:06:EC:81:30:FB:2E:90:17:27:FD:CD
Authority key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Certificate issuer:       /CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Certificate serial:       033A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
Manifest number:          0339
Signing time:             Sun 27 Jul 2025 03:46:10 +0000
Manifest this update:     Sun 27 Jul 2025 03:46:09 +0000
Manifest next update:     Tue 29 Jul 2025 03:46:09 +0000
Files and hashes:         1: HNlmJ3URky060f0tMBT24WjMSOU.crl (hash: WPb2C2agnXSPUo0vw1wkxtdUBCc/9saMAP1xNatdibA=)
                          2: 14217AF4FD4611EDACE0A4484AD9E6FC.roa (hash: scusLfpX0zDQtYPg/Gz0vTNJwugRyOQOlFnS4UEvDsE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826 (0x33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B69AF, serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
        Validity
            Not Before: Jul 27 03:46:09 2025 GMT
            Not After : Jul 29 03:46:09 2025 GMT
        Subject: CN=6885a102-eedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:d9:71:e7:0b:68:23:f5:0f:5b:ca:5b:ca:
                    a1:5c:49:85:2c:c3:76:8e:a8:fe:44:80:a0:2f:9b:
                    87:73:e5:37:9a:09:01:64:bb:b4:d8:65:32:88:49:
                    fb:dc:25:3d:4f:fb:f8:a4:d5:44:2a:c5:1f:4f:5d:
                    f0:b9:76:dd:7a:a2:47:97:c7:73:52:cb:ec:4b:c0:
                    b8:a5:12:0e:72:2f:ae:fc:5b:7b:c1:31:68:4c:c7:
                    b3:0b:e8:57:97:53:52:7f:72:af:be:37:c2:b6:e2:
                    68:bb:f4:23:49:30:d7:33:42:0c:66:01:91:f8:31:
                    1c:af:9e:67:f7:56:e3:d7:9c:5b:71:cb:90:5d:bf:
                    f7:47:16:8c:64:07:e9:83:5d:17:c6:be:44:73:dc:
                    86:a6:6c:74:00:a9:a1:da:86:b7:dc:8e:6e:1e:14:
                    e0:f9:f1:84:f0:6e:32:dd:79:81:9d:71:c4:5e:c0:
                    86:65:86:ce:9b:dd:a8:a6:ef:66:a1:72:ca:9b:78:
                    bf:e6:93:36:c9:60:8a:93:d0:12:21:ff:ff:c4:8d:
                    86:f4:f2:16:2d:4d:81:1a:55:27:fd:cf:9f:3e:4b:
                    e4:46:5e:b1:df:33:8c:74:e7:6b:44:84:0b:99:d6:
                    df:bf:4d:fe:76:01:51:63:3c:af:26:58:73:58:61:
                    8c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:38:C0:42:CD:D4:4B:B4:FB:06:EC:81:30:FB:2E:90:17:27:FD:CD
            X509v3 Authority Key Identifier:
                keyid:1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2f:d3:08:22:ff:57:e7:b9:ae:71:2a:80:8a:83:cb:bb:20:
         6f:e1:91:93:b3:cc:8e:a9:40:fe:b7:75:eb:f6:0d:1d:8e:9d:
         f7:21:51:3f:17:95:54:1e:12:aa:c2:b7:49:e9:2b:f9:b6:e5:
         d7:9a:6c:51:ac:d0:53:cc:d6:b5:78:21:93:de:90:43:e6:bf:
         21:0e:c5:f3:6e:10:82:6b:f6:63:21:59:4b:38:d1:86:6d:62:
         1e:bd:7c:50:96:bf:61:9b:10:c2:79:d5:8f:83:17:74:ea:f2:
         f3:d9:e5:94:2d:47:ff:35:ce:48:64:e3:55:c6:f1:84:3d:f3:
         62:2c:92:79:de:74:69:be:62:0d:d6:29:4b:80:3d:79:06:d7:
         97:2d:85:71:52:72:57:ff:92:54:bb:9f:fb:a4:2e:f1:25:29:
         91:3f:2c:0c:c5:7c:49:7c:31:ce:ca:3b:84:2a:70:3b:4f:ca:
         8d:6e:25:a5:92:d5:f0:ae:58:ef:9c:57:d3:49:5f:d6:a1:36:
         93:7f:a7:66:6d:66:00:42:6a:9a:b7:f1:fb:b3:af:73:73:55:
         4d:08:de:ad:75:55:8e:cc:ca:38:b5:b6:fc:15:50:f5:b1:01:
         1f:ae:ef:13:a9:96:6e:1c:aa:a6:e2:68:df:d4:94:ab:69:35:
         77:6c:28:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:56 2025 by rpki-client