Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
File:                     FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft (raw, json)
Hash identifier:          B5EyYktwBOjF+lhLwLYXzMSgY7y1HkD12K+OpaqAl8w=
Subject key identifier:   80:36:39:AE:0B:C5:A1:17:B3:7C:08:44:4B:97:E4:D1:A4:2D:AD:09
Authority key identifier: 16:C3:69:2A:83:39:1D:C8:FB:92:2E:9E:0F:15:A6:85:E5:44:67:69
Certificate issuer:       /CN=F3634E30AF/serialNumber=16C3692A83391DC8FB922E9E0F15A685E5446769
Certificate serial:       0E72
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
Manifest number:          0E72
Signing time:             Sat 10 May 2025 00:50:58 +0000
Manifest this update:     Sat 10 May 2025 00:50:57 +0000
Manifest next update:     Mon 12 May 2025 00:50:57 +0000
Files and hashes:         1: FsNpKoM5Hcj7ki6eDxWmheVEZ2k.crl (hash: zNI+KTLZAy6HoFjM7EKmL51NSltO0loLAV8eHa73N3M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3698 (0xe72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634E30AF, serialNumber=16C3692A83391DC8FB922E9E0F15A685E5446769
        Validity
            Not Before: May 10 00:50:57 2025 GMT
            Not After : May 12 00:50:57 2025 GMT
        Subject: CN=681ea2f2-eff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:21:d0:e3:95:ac:ef:b2:0a:82:f9:16:0a:
                    32:56:d7:7f:46:04:75:dc:b0:51:47:48:3c:1b:28:
                    d1:71:5b:7b:ff:36:71:fb:9d:ac:22:8c:02:33:b2:
                    a4:38:de:0f:65:df:09:35:b3:8f:3b:46:dc:41:d0:
                    cb:8a:41:a4:a9:89:8d:58:32:2b:a0:62:4c:f1:20:
                    74:95:3d:75:f4:2a:d3:5e:2d:0f:04:7f:4c:6d:14:
                    6d:e8:51:7f:47:b5:17:f9:5a:b5:9a:b5:f7:75:ba:
                    0c:6a:10:68:d6:71:2c:ec:ff:89:b3:1a:3c:cb:bd:
                    4c:ab:48:dd:99:b9:64:59:cf:50:74:9d:c1:9b:2b:
                    40:8d:07:52:58:04:2c:80:f2:d1:0f:72:56:d6:23:
                    b8:5d:b1:a1:06:32:60:28:3b:83:d5:9c:f8:5f:5e:
                    43:1c:25:05:78:99:a0:cd:c6:ce:41:b2:21:24:9b:
                    d8:98:e2:33:e8:22:af:8e:e6:45:a6:ad:2a:4c:bc:
                    1b:ad:d6:f8:47:3f:b5:9b:9b:9e:b0:9d:ce:bd:46:
                    0b:b3:29:ea:9b:f3:5e:05:3c:c2:a7:10:36:37:8a:
                    7c:c3:9d:1a:f4:9d:69:4d:4f:01:99:e6:72:42:4d:
                    7b:30:c5:fb:25:22:80:eb:11:d3:bb:bd:eb:53:c2:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:36:39:AE:0B:C5:A1:17:B3:7C:08:44:4B:97:E4:D1:A4:2D:AD:09
            X509v3 Authority Key Identifier:
                keyid:16:C3:69:2A:83:39:1D:C8:FB:92:2E:9E:0F:15:A6:85:E5:44:67:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:8a:0e:99:52:95:a5:af:2a:be:8a:d0:ba:cf:c5:e6:ec:6d:
         5b:bd:cf:4b:fe:7b:3b:26:c0:b8:44:a6:75:57:32:23:35:55:
         c4:19:f1:ac:a2:70:5a:d5:7a:57:80:90:f3:b0:bd:e7:d8:38:
         64:51:ae:6b:a2:49:f4:14:ac:6e:69:29:1e:2b:3d:e6:69:13:
         5f:95:2b:f5:0d:24:e6:0a:43:78:f7:3d:86:a5:fe:d4:de:33:
         04:04:23:1c:4f:4e:7a:97:1d:10:b1:29:63:df:6b:af:e5:99:
         3e:e8:ec:50:27:6a:38:ca:67:5f:d6:84:a7:69:7d:84:2f:72:
         c3:2c:04:c8:2e:ba:5a:3e:e6:3d:4b:4b:00:12:93:56:a8:f5:
         97:73:2d:03:6c:7a:b7:af:07:60:5b:24:10:c6:b3:f9:5f:e3:
         38:38:aa:c1:25:33:d0:5c:b2:d0:d7:5d:c8:eb:12:2c:4e:49:
         7a:33:0b:16:4c:ce:0a:c3:0d:44:72:b3:e2:1a:3e:64:b0:a5:
         28:31:4c:05:26:b0:e8:83:24:14:ed:94:6e:ec:c4:05:ba:c9:
         9f:ed:c0:a1:ab:12:d0:8e:47:a2:f5:c1:39:fa:84:ab:20:7f:
         11:d2:00:bd:5a:c5:d5:13:68:7e:df:f6:75:3d:0e:e8:34:00:
         09:09:83:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:33:23 2025 by rpki-client