Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
File:                     Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft (raw, json)
Hash identifier:          uBRzBBTZWZf38T/OrbJqq99tTiICyePxUlU9cblqc5E=
Subject key identifier:   C9:93:19:69:22:26:F4:C8:06:8A:B5:E8:AA:CE:F9:72:D1:1F:98:10
Authority key identifier: 0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE
Certificate issuer:       /CN=F36F8434AF/serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
Certificate serial:       0207
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
Manifest number:          0207
Signing time:             Thu 31 Jul 2025 04:32:46 +0000
Manifest this update:     Thu 31 Jul 2025 04:32:46 +0000
Manifest next update:     Sat 02 Aug 2025 04:32:46 +0000
Files and hashes:         1: Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl (hash: HQ7dglhlTY3TTJQUKYfzT3S9tP1zhVMi6pTjuSoDklM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8434AF, serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
        Validity
            Not Before: Jul 31 04:32:46 2025 GMT
            Not After : Aug  2 04:32:46 2025 GMT
        Subject: CN=688af1ee-3ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:43:9f:10:d8:27:82:f0:2e:6d:b5:d0:cc:65:
                    73:2a:e2:e7:d6:39:fa:28:ee:6c:c3:82:62:de:43:
                    76:eb:cc:66:3e:f1:0e:c0:d2:3e:fe:bb:98:80:83:
                    92:89:23:1b:71:1e:36:6f:a0:a6:a0:de:b5:a4:67:
                    3d:b0:cb:c0:d6:2c:80:74:fb:46:80:a7:a8:0f:e8:
                    3e:c8:cf:72:b8:4f:04:03:04:f9:de:95:9d:6a:9c:
                    50:2d:16:cc:81:72:e0:96:e7:4c:27:e0:6c:d7:4b:
                    b8:fe:31:bf:ad:32:33:67:ea:dd:34:cf:5f:b5:76:
                    37:dc:4b:14:f7:c4:a1:17:73:ab:a7:d7:e0:cd:72:
                    92:40:28:83:24:1e:f4:6f:87:9a:be:3f:9a:e2:db:
                    7c:e2:06:94:a7:22:8e:35:f7:1b:9e:7f:46:db:b3:
                    e4:1c:6f:1a:2d:70:e4:b8:7b:20:d1:50:8f:b3:28:
                    43:11:54:9a:6e:13:f8:5b:72:f8:10:8d:79:65:ba:
                    20:f4:da:4f:f7:86:8d:fb:5b:7e:9e:db:9e:89:d2:
                    78:0d:28:19:36:ef:39:0b:07:0c:79:3f:52:a3:1e:
                    e7:15:9b:0f:93:12:c5:52:a9:9e:84:9e:ba:fa:8c:
                    ae:57:f4:2a:df:e3:25:2d:5d:10:18:fd:64:52:bf:
                    7d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:93:19:69:22:26:F4:C8:06:8A:B5:E8:AA:CE:F9:72:D1:1F:98:10
            X509v3 Authority Key Identifier:
                keyid:0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:22:84:dc:ef:09:89:71:08:52:41:32:d5:14:0f:72:45:
         1c:3f:b8:ec:c4:ed:f2:b4:94:70:fa:3b:c3:52:f9:5a:51:c2:
         2e:ad:c3:0a:bd:1d:91:fb:6c:48:aa:1a:65:c8:ec:e0:c6:0b:
         07:9d:d0:ad:20:a0:eb:8d:0a:b4:49:9d:60:65:e0:ac:a1:2c:
         42:33:b2:ab:3c:67:cb:e1:1b:04:79:d1:52:7b:a5:8b:56:37:
         18:ff:a9:5a:b1:ec:ec:88:82:fb:1b:4e:da:4a:a3:4a:a8:63:
         40:70:b2:bf:27:17:fc:9d:40:5f:f1:46:51:cd:b6:17:59:ea:
         e3:a8:f6:59:84:3f:00:d0:ac:ec:75:14:3d:81:c8:07:20:65:
         dd:b1:70:ae:71:90:88:c1:c8:41:60:fe:10:a6:b5:0c:80:fe:
         7d:9a:e5:49:9a:b5:b3:58:d3:1d:97:b3:a9:a2:51:20:ef:3e:
         09:67:00:e5:54:23:6f:4a:29:09:fc:1c:b1:85:05:f8:ca:3f:
         9b:f4:65:e5:8c:93:a7:59:dd:e1:45:ee:34:9b:90:1b:af:d4:
         77:be:cc:bb:90:5f:06:21:29:a6:fe:ed:f2:97:b7:82:2a:75:
         b6:b6:6a:96:f9:ed:f3:5d:dc:6d:04:f1:ba:7e:b6:1a:91:20:
         c6:ad:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:13:29 2025 by rpki-client