Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
File:                     0BDpIA7Z7cna8sP23VVz1wVhII8.mft (raw, json)
Hash identifier:          enSFmsuTuThCPx33pP1J+z/rIWR+4f6Z51l/nZdm1uQ=
Subject key identifier:   00:13:23:56:90:19:6E:0D:80:21:8C:83:58:38:3B:E2:20:D3:8E:F8
Authority key identifier: D0:10:E9:20:0E:D9:ED:C9:DA:F2:C3:F6:DD:55:73:D7:05:61:20:8F
Certificate issuer:       /CN=F362C1A2AF/serialNumber=D010E9200ED9EDC9DAF2C3F6DD5573D70561208F
Certificate serial:       02CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0BDpIA7Z7cna8sP23VVz1wVhII8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
Manifest number:          02CB
Signing time:             Sun 04 May 2025 03:48:22 +0000
Manifest this update:     Sun 04 May 2025 03:48:21 +0000
Manifest next update:     Tue 06 May 2025 03:48:21 +0000
Files and hashes:         1: 0BDpIA7Z7cna8sP23VVz1wVhII8.crl (hash: TwVUfbPNBnEVACEhLvSnr1arM9blhhaqyKJ1sE6ZWCs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0BDpIA7Z7cna8sP23VVz1wVhII8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 May 2025 03:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C1A2AF, serialNumber=D010E9200ED9EDC9DAF2C3F6DD5573D70561208F
        Validity
            Not Before: May  4 03:48:21 2025 GMT
            Not After : May  6 03:48:21 2025 GMT
        Subject: CN=6816e386-296e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:79:1c:eb:b1:f5:47:97:02:64:c7:c2:91:
                    11:40:09:71:f0:bf:03:1e:7d:a3:d6:74:81:65:0b:
                    70:d5:39:95:d0:ad:fb:48:72:b5:c4:ec:72:79:6d:
                    51:b9:6f:e2:fb:ed:1a:d9:47:71:ed:05:29:48:8c:
                    05:c8:29:7a:c9:91:82:51:61:78:5f:3f:84:a1:6c:
                    5c:67:74:75:81:13:6e:aa:f0:6a:8f:34:09:c8:d3:
                    ec:61:5e:99:1f:64:f8:19:57:77:c7:e7:ad:1f:ca:
                    fa:0a:69:82:01:fd:f7:38:8e:b8:c6:ab:2e:19:23:
                    ba:b7:15:51:04:f2:1d:25:84:c7:42:d5:0b:ec:87:
                    ea:6a:e9:79:9c:f6:55:1f:71:0f:4d:95:3e:ef:21:
                    5b:4b:9d:d7:22:a2:2f:14:d2:91:19:91:7d:92:b1:
                    c1:82:a8:56:50:f5:b6:10:2b:c4:2a:be:ab:30:71:
                    5b:fe:1f:6c:df:ab:08:57:4f:cf:ea:e6:e0:78:60:
                    e2:bc:b7:ad:8e:41:57:5b:50:a0:41:f5:da:08:bf:
                    e9:ff:3d:88:8f:eb:6a:3d:d6:1e:72:c5:57:8d:0b:
                    fd:a4:85:21:a7:52:5b:47:13:e1:1d:87:9f:fe:26:
                    cf:13:2a:d6:a6:f9:d0:4b:35:48:f4:fd:97:e5:3c:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:13:23:56:90:19:6E:0D:80:21:8C:83:58:38:3B:E2:20:D3:8E:F8
            X509v3 Authority Key Identifier:
                keyid:D0:10:E9:20:0E:D9:ED:C9:DA:F2:C3:F6:DD:55:73:D7:05:61:20:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0BDpIA7Z7cna8sP23VVz1wVhII8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:91:b7:b6:f6:93:50:66:ce:ea:4b:ea:95:83:0b:aa:ef:7d:
         a1:38:20:48:4e:f6:ec:65:b7:53:8c:c3:b1:b1:92:42:28:a5:
         1f:bf:5a:34:a0:46:1d:c5:98:91:99:f2:71:b3:ef:d5:74:3c:
         1f:d4:2c:b7:7c:73:fd:db:05:3d:db:9b:f8:e2:0f:14:6b:c5:
         0c:33:51:4f:cc:36:6e:e1:29:c6:21:2d:25:0d:f3:b2:1f:50:
         8b:de:b5:b1:59:62:f2:be:ea:1c:50:b6:e3:81:3e:01:39:d4:
         9f:c6:88:57:22:c3:0d:2c:71:6c:63:1d:93:00:9a:9d:b4:b4:
         6c:a3:96:14:1e:2f:e4:a6:f2:59:e0:b7:87:ba:ef:3a:39:7c:
         85:85:dd:52:e8:5e:41:5e:0e:ea:90:78:8f:a4:87:56:72:ac:
         b0:6c:5d:43:bc:05:ab:dc:35:a5:ad:d6:b0:9b:bd:6b:ed:d0:
         12:19:89:d9:1c:80:1b:83:31:07:bd:b7:b3:8b:0f:04:6d:e3:
         89:8c:4d:ab:af:56:5f:60:2a:a4:4f:3b:80:2e:cc:cd:02:90:
         35:d9:5f:d5:73:80:4c:1e:fe:51:e9:88:c1:87:48:bd:49:36:
         af:b7:72:5d:cb:2f:be:d4:6a:bb:bc:eb:ce:23:dd:eb:34:ad:
         a1:ae:8e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:01:29 2025 by rpki-client