Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
File:                     aRHVUPOKT27JEBz-cu1_bZFhR3E.mft (raw, json)
Hash identifier:          /OvhxUOVaoD9zH02iXQLKRWxZBaPHlOUPyYpj6Tit50=
Subject key identifier:   BC:06:99:C1:E9:D9:60:4C:2F:88:9A:11:8F:DC:B4:91:27:80:31:34
Authority key identifier: 69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71
Certificate issuer:       /CN=F3615826AF/serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
Certificate serial:       058C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
Manifest number:          058C
Signing time:             Sat 10 May 2025 02:26:17 +0000
Manifest this update:     Sat 10 May 2025 02:26:16 +0000
Manifest next update:     Mon 12 May 2025 02:26:16 +0000
Files and hashes:         1: aRHVUPOKT27JEBz-cu1_bZFhR3E.crl (hash: ann810KON47Ipjq5Xp7uQmUkeKgmvQB1IUjkDZe4McQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826AF, serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
        Validity
            Not Before: May 10 02:26:16 2025 GMT
            Not After : May 12 02:26:16 2025 GMT
        Subject: CN=681eb949-b512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:57:49:80:57:1a:de:1d:6e:c8:b6:f2:1f:2c:
                    d1:97:3e:74:2e:24:0e:f4:db:c1:f5:d8:96:93:2e:
                    02:7b:ea:5d:64:5e:f6:56:b9:45:85:6b:2b:6f:50:
                    5e:9b:12:17:3a:a0:55:b0:56:24:b6:ac:41:97:05:
                    7b:88:e8:e2:59:5b:30:f0:c9:85:5a:6d:90:44:fb:
                    c4:45:de:b9:ee:45:9a:d4:89:76:6c:94:af:18:2a:
                    9b:94:44:04:8f:80:eb:93:c0:54:1c:5f:0a:3e:0b:
                    ad:96:fa:23:8c:73:51:e0:9c:32:f2:23:b2:c3:ab:
                    52:6c:a6:4e:69:c6:8c:fd:36:f0:4c:ec:56:fa:f3:
                    fa:ae:15:7d:35:b6:6b:d9:6c:34:e6:df:7a:c3:a7:
                    75:68:20:87:59:80:c3:fb:43:2d:07:ac:d4:bb:5b:
                    f8:54:3e:36:d1:2c:ec:11:fa:cd:68:9c:c4:4e:0c:
                    ec:96:bf:fe:b0:44:60:95:de:06:62:39:7e:bc:e8:
                    a4:a2:4e:bd:03:fa:cd:27:5d:0a:99:3e:2c:75:67:
                    a8:e8:96:8b:70:9f:04:df:b4:c2:63:59:2d:44:e0:
                    35:71:a3:32:ea:64:11:b9:eb:23:3f:31:20:89:17:
                    cd:d0:c7:c4:a6:86:83:95:9a:6d:9f:d5:6c:90:7b:
                    eb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:06:99:C1:E9:D9:60:4C:2F:88:9A:11:8F:DC:B4:91:27:80:31:34
            X509v3 Authority Key Identifier:
                keyid:69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b1:ac:1e:db:fe:40:24:00:64:40:f5:52:9c:e9:86:21:8d:
         d8:de:4e:a1:14:b0:bf:af:b9:94:b6:18:27:5c:55:8d:77:d5:
         dd:7d:ea:1c:4d:2b:d8:59:81:14:a1:bd:28:5d:fc:d3:33:7a:
         11:66:a3:99:5b:88:53:9b:50:1c:0d:de:bf:10:11:b4:c4:80:
         85:68:ae:5b:78:3d:56:e6:ff:0d:ff:f2:67:b5:8e:d4:b8:62:
         13:48:24:61:25:cb:4e:49:36:5c:9d:a3:1b:01:0c:1b:e9:e8:
         63:dd:f7:e7:78:7b:a8:97:0e:3b:37:1a:f5:e6:87:33:09:fa:
         5b:11:bb:a8:4f:42:95:17:75:f9:35:07:e2:45:e8:8c:0d:c4:
         77:ac:27:97:60:2d:93:c1:a7:7b:b0:8c:74:19:67:e4:42:ca:
         09:10:6c:7c:06:80:dc:3a:63:fb:34:53:71:fa:03:66:99:ac:
         c2:13:b5:09:32:68:3f:bc:c5:a4:eb:4a:17:33:21:aa:14:0a:
         83:3d:d2:7a:8f:11:f0:6c:a4:99:a6:fe:75:f3:a1:04:9c:e8:
         5f:d8:e2:76:55:c1:2f:c0:25:f4:4a:27:1f:74:fd:b8:fd:56:
         17:4f:c5:5b:8e:42:44:39:22:e9:f9:13:da:22:d3:86:53:63:
         0d:57:50:90
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTU4MjZBRjExMC8GA1UEBRMoNjkxMUQ1NTBGMzhBNEY2RUM5MTAxQ0ZFNzJFRDdG
NkQ5MTYxNDc3MTAeFw0yNTA1MTAwMjI2MTZaFw0yNTA1MTIwMjI2MTZaMBgxFjAU
BgNVBAMTDTY4MWViOTQ5LWI1MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVV0mAVxreHW7ItvIfLNGXPnQuJA7028H12JaTLgJ76l1kXvZWuUWFaytv
UF6bEhc6oFWwViS2rEGXBXuI6OJZWzDwyYVabZBE+8RF3rnuRZrUiXZslK8YKpuU
RASPgOuTwFQcXwo+C62W+iOMc1HgnDLyI7LDq1Jspk5pxoz9NvBM7Fb68/quFX01
tmvZbDTm33rDp3VoIIdZgMP7Qy0HrNS7W/hUPjbRLOwR+s1onMRODOyWv/6wRGCV
3gZiOX686KSiTr0D+s0nXQqZPix1Z6jolotwnwTftMJjWS1E4DVxozLqZBG56yM/
MSCJF83Qx8SmhoOVmm2f1WyQe+sRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvAaZ
wenZYEwviJoRj9y0kSeAMTQwHwYDVR0jBBgwFoAUaRHVUPOKT27JEBz+cu1/bZFh
R3EwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1ODI2LzM4MTg2RDEyRjA1NzExRUI5M0Y5QTEzOEQ4QTAxNENFL2FSSFZV
UE9LVDI3SkVCei1jdTFfYlpGaFIzRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FSSFZVUE9LVDI3SkVCei1jdTFfYlpGaFIzRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTU4MjYvMzgxODZEMTJGMDU3MTFFQjkzRjlBMTM4RDhB
MDE0Q0UvYVJIVlVQT0tUMjdKRUJ6LWN1MV9iWkZoUjNFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgsawe2/5AJABkQPVSnOmGIY3Y3k6h
FLC/r7mUthgnXFWNd9XdfeocTSvYWYEUob0oXfzTM3oRZqOZW4hTm1AcDd6/EBG0
xICFaK5beD1W5v8N//JntY7UuGITSCRhJctOSTZcnaMbAQwb6ehj3ffneHuolw47
Nxr15oczCfpbEbuoT0KVF3X5NQfiReiMDcR3rCeXYC2Twad7sIx0GWfkQsoJEGx8
BoDcOmP7NFNx+gNmmazCE7UJMmg/vMWk60oXMyGqFAqDPdJ6jxHwbKSZpv5186EE
nOhf2OJ2VcEvwCX0SicfdP24/VYXT8VbjkJEOSLp+RPaItOGU2MNV1CQ
-----END CERTIFICATE-----
Generated at Sat May 10 16:37:19 2025 by rpki-client