Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File:                     rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier:          ysuAOacfCmWqCwQS861IUuCPSLGg9xxsm8jhPqlh39U=
Subject key identifier:   C4:31:8E:CB:EC:29:62:C4:41:16:28:EF:13:D2:3B:CC:EA:FE:C9:3A
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer:       /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial:       032B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number:          032B
Signing time:             Fri 16 May 2025 02:19:06 +0000
Manifest this update:     Fri 16 May 2025 02:19:06 +0000
Manifest next update:     Sun 18 May 2025 02:19:06 +0000
Files and hashes:         1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: qlYoJvaNZfasTEvGphPrX/Kik7tdTYlYLKfecd92BuU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 May 2025 02:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
        Validity
            Not Before: May 16 02:19:06 2025 GMT
            Not After : May 18 02:19:06 2025 GMT
        Subject: CN=6826a09a-7dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:2a:f3:a8:de:dc:4e:94:bc:d3:ff:90:39:
                    20:12:5e:95:23:ec:2d:24:c7:7a:3b:d8:27:cc:53:
                    00:a7:8b:33:65:1d:6a:41:1a:6c:20:d3:1b:89:ae:
                    23:66:27:39:5f:61:88:f1:a8:f3:71:31:d2:83:a6:
                    95:40:d7:85:21:2e:14:b4:c7:72:12:5b:5d:11:75:
                    b0:7e:d6:b8:51:ad:17:08:54:5a:a4:29:e5:1f:27:
                    e1:54:7f:fc:52:23:a3:3e:4e:b9:39:9f:c4:70:25:
                    fe:31:04:5e:78:6a:8f:d5:11:8b:d8:9d:28:22:52:
                    61:f2:b6:bd:11:e3:48:f8:63:1e:a1:de:a8:a4:f8:
                    6f:1f:be:71:e5:37:32:8f:21:b4:fe:ee:53:b1:a0:
                    e8:ae:61:db:f6:ba:49:ff:1b:77:ca:48:00:9e:35:
                    c2:bb:f7:96:cf:5c:88:26:f9:eb:4d:09:80:76:a7:
                    e6:c6:39:ee:a1:b5:c0:da:90:4a:64:1f:e7:13:aa:
                    c2:f5:36:5f:5c:78:d8:fc:8c:50:8b:46:83:fb:14:
                    e7:53:6e:f1:5d:6b:70:0b:ff:99:7c:ae:49:21:72:
                    5b:d4:f6:e8:60:43:37:74:23:81:ea:9f:ab:93:da:
                    4b:27:70:83:a9:76:e5:67:ef:27:45:a0:96:ee:2e:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:31:8E:CB:EC:29:62:C4:41:16:28:EF:13:D2:3B:CC:EA:FE:C9:3A
            X509v3 Authority Key Identifier:
                keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:cf:57:d1:55:1a:58:96:41:29:8a:7a:89:e1:6b:d7:e2:7c:
         9d:b1:9c:04:3d:04:eb:27:12:e7:35:57:19:1a:f8:d2:95:ee:
         db:6e:62:fc:3d:ba:e1:e6:d8:13:62:a0:af:e1:06:e1:12:98:
         ba:d9:4a:fd:c8:99:af:e4:8b:b1:b7:84:83:c6:5a:34:fe:4f:
         b2:fe:7e:19:da:76:62:df:1f:64:66:c4:15:60:88:e9:46:6f:
         b8:ed:f8:2a:99:52:13:c8:7d:56:7c:8a:75:01:ce:57:85:59:
         f5:36:5d:f4:d6:93:a8:98:77:b5:d9:54:8d:2a:84:a2:84:9b:
         ee:f1:af:8f:dd:ab:83:41:c6:43:1a:e8:62:76:89:89:1a:a3:
         7d:61:17:e3:6e:60:2a:dd:68:97:39:7b:25:c3:d3:e7:8c:d1:
         91:65:b5:18:04:10:76:25:ef:fe:bd:57:3a:de:61:4f:d9:09:
         13:eb:a9:b8:d3:f3:85:b1:7c:d3:65:18:a3:76:a1:75:b3:9d:
         36:57:79:d0:cd:7f:3b:ba:61:bd:32:f7:1e:3c:64:31:2e:25:
         94:51:ea:35:44:cf:43:85:a0:04:fe:ee:d9:96:f2:ad:82:7f:
         8d:a1:4e:19:2d:32:31:8f:e8:47:60:90:16:20:ac:48:36:1b:
         72:dc:38:38
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAyswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTZCOTVBRjExMC8GA1UEBRMoQUUxMjhCMjJGNTFEQzY1OEQ1NUUyMTU2RUJBRjcz
RDZDNkFENzYyQTAeFw0yNTA1MTYwMjE5MDZaFw0yNTA1MTgwMjE5MDZaMBgxFjAU
BgNVBAMTDTY4MjZhMDlhLTdkYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+dyrzqN7cTpS80/+QOSASXpUj7C0kx3o72CfMUwCnizNlHWpBGmwg0xuJ
riNmJzlfYYjxqPNxMdKDppVA14UhLhS0x3ISW10RdbB+1rhRrRcIVFqkKeUfJ+FU
f/xSI6M+Trk5n8RwJf4xBF54ao/VEYvYnSgiUmHytr0R40j4Yx6h3qik+G8fvnHl
NzKPIbT+7lOxoOiuYdv2ukn/G3fKSACeNcK795bPXIgm+etNCYB2p+bGOe6htcDa
kEpkH+cTqsL1Nl9ceNj8jFCLRoP7FOdTbvFda3AL/5l8rkkhclvU9uhgQzd0I4Hq
n6uT2ksncIOpduVn7ydFoJbuLmqtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxDGO
y+wpYsRBFijvE9I7zOr+yTowHwYDVR0jBBgwFoAUrhKLIvUdxljVXiFW669z1sat
diowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2Qjk1LzYyNDEyQUMwQ0EyNjExRUQ5MkU5Qzk4RkYxMjIyNDY4L3JoS0xJ
dlVkeGxqVlhpRlc2Njl6MXNhdGRpby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JoS0xJdlVkeGxqVlhpRlc2Njl6MXNhdGRpby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTZCOTUvNjI0MTJBQzBDQTI2MTFFRDkyRTlDOThGRjEy
MjI0NjgvcmhLTEl2VWR4bGpWWGlGVzY2OXoxc2F0ZGlvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCez1fRVRpYlkEpinqJ4WvX4nydsZwE
PQTrJxLnNVcZGvjSle7bbmL8Pbrh5tgTYqCv4QbhEpi62Ur9yJmv5Iuxt4SDxlo0
/k+y/n4Z2nZi3x9kZsQVYIjpRm+47fgqmVITyH1WfIp1Ac5XhVn1Nl301pOomHe1
2VSNKoSihJvu8a+P3auDQcZDGuhidomJGqN9YRfjbmAq3WiXOXslw9PnjNGRZbUY
BBB2Je/+vVc63mFP2QkT66m40/OFsXzTZRijdqF1s502V3nQzX87umG9MvcePGQx
LiWUUeo1RM9DhaAE/u7ZlvKtgn+NoU4ZLTIxj+hHYJAWIKxINhty3Dg4
-----END CERTIFICATE-----
Generated at Sat May 17 01:21:53 2025 by rpki-client