Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File:                     xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier:          TCBZq9XwD73t9/9+eF24OiUfklqcarE5XqDDzUcZyus=
Subject key identifier:   AE:6F:AE:79:34:63:EF:70:B3:16:C8:85:AE:13:52:E7:33:13:9E:68
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer:       /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial:       04B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number:          04B6
Signing time:             Fri 04 Jul 2025 02:54:15 +0000
Manifest this update:     Fri 04 Jul 2025 02:54:15 +0000
Manifest next update:     Sun 06 Jul 2025 02:54:15 +0000
Files and hashes:         1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: 0DYlbTSQSYI75DX7HPL+sKqF2Q4mqhwEU4ayH2tkGdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 02:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAF, serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
        Validity
            Not Before: Jul  4 02:54:15 2025 GMT
            Not After : Jul  6 02:54:15 2025 GMT
        Subject: CN=68674257-35ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:62:ed:3f:99:5a:77:b4:05:4f:6e:d1:d2:8b:
                    7f:fb:6f:75:03:be:6a:ee:f5:f7:33:79:7e:68:ff:
                    ac:be:ac:80:c1:f2:2c:15:69:a9:05:58:2d:c0:2b:
                    e5:b2:df:78:d4:92:71:ea:49:dd:b9:b3:f8:e0:7a:
                    ce:61:2c:54:e5:d7:73:bf:75:d2:36:49:41:03:18:
                    a7:ed:90:d4:e3:2d:90:11:0c:90:f0:50:f4:6c:4b:
                    f9:e4:4e:7c:a4:a6:d6:55:38:5e:5d:64:0c:df:50:
                    2c:d5:14:6e:a0:80:5b:3e:5a:82:aa:10:b9:cb:d5:
                    95:ad:4e:45:ba:ac:39:43:bc:77:8a:2e:e2:24:47:
                    4f:80:27:2f:a9:66:ce:10:7c:0e:ae:b3:0d:b3:08:
                    06:84:70:b3:a3:8e:99:c6:e1:e9:62:fe:18:c1:f5:
                    b9:a1:b5:e8:6e:f8:d4:69:07:08:0c:84:0d:c7:49:
                    a0:eb:2a:f2:e7:cf:52:3a:7f:8b:19:3b:24:73:b0:
                    c0:e4:4f:f3:12:be:fd:89:55:39:28:b2:2b:2f:ca:
                    2f:42:8e:92:67:ce:e4:19:47:e1:86:65:d5:b9:4e:
                    15:bb:73:0c:01:35:1f:44:b2:57:6f:74:45:e8:df:
                    7e:c2:d1:ec:d4:f7:2d:35:38:4e:6f:0f:f0:05:39:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6F:AE:79:34:63:EF:70:B3:16:C8:85:AE:13:52:E7:33:13:9E:68
            X509v3 Authority Key Identifier:
                keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f2:cb:35:06:13:89:75:95:11:84:f6:8f:3c:a8:69:5b:ab:
         3a:10:32:36:98:dc:19:ee:45:97:3f:4c:54:97:52:32:e5:6b:
         a3:92:9c:dc:e0:c4:b4:24:2f:be:2d:51:30:39:da:42:94:7e:
         5d:92:af:58:7a:37:58:05:25:b7:61:8d:bb:b1:7c:a2:21:72:
         7a:e4:ab:5c:28:98:65:34:f7:05:df:ac:57:7f:14:8a:39:aa:
         42:34:a9:95:1d:f7:a2:3f:95:50:ee:65:45:65:a8:9d:fb:6b:
         a9:f4:5a:cc:ca:c7:56:a9:84:76:4d:90:17:97:c4:76:bb:76:
         8c:c7:28:76:1e:1a:5e:57:a1:4e:ed:c1:fc:d8:1f:b9:2e:14:
         e9:6f:03:3d:dc:68:b6:ac:4b:35:ee:4b:78:11:f1:9d:01:ad:
         35:95:71:30:ce:23:34:37:e5:63:b2:28:d3:11:4d:bb:f7:0c:
         15:18:99:b8:8d:d1:ee:5b:11:10:39:6a:6a:b8:ca:c7:cc:63:
         fc:6c:05:bc:fb:3d:8e:c3:08:14:d4:5e:0f:6d:25:cb:03:ac:
         b0:3b:f7:b9:a1:fe:6e:be:4e:f9:2e:d4:b3:c3:0b:8e:dc:c6:
         92:ad:62:36:79:99:0a:57:e2:ed:e5:30:b5:d3:ff:1e:c4:c4:
         7a:a3:2d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:48:56 2025 by rpki-client