Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
File:                     PUpO_QKaES64mqyOyp2RekfLbFw.mft (raw, json)
Hash identifier:          2+cXeIiCoDkQ3QemnXwkXhM2JOj7anTXDXZKf8uf194=
Subject key identifier:   F3:37:E9:90:94:40:18:EB:91:0E:19:52:D9:19:10:E3:27:18:6A:7A
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Certificate issuer:       /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial:       0464
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
Manifest number:          0461
Signing time:             Sun 11 May 2025 02:56:29 +0000
Manifest this update:     Sun 11 May 2025 02:56:28 +0000
Manifest next update:     Tue 13 May 2025 02:56:28 +0000
Files and hashes:         1: PUpO_QKaES64mqyOyp2RekfLbFw.crl (hash: oXLzR5YGyuAujBlutwOu1Z2f2eREzhGo1WohHnuZTlE=)
                          2: FDE0E02C1E4611EF94A680057DDC24C2.roa (hash: 1djty5fRWOAsejw0HL8rgxOF0W9HT4RaKUN6d3OwjTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
        Validity
            Not Before: May 11 02:56:28 2025 GMT
            Not After : May 13 02:56:28 2025 GMT
        Subject: CN=682011dd-8c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:f5:76:d6:9e:43:29:da:94:50:9d:f3:f7:
                    dc:e4:0d:1e:da:65:fb:05:5b:52:4e:a9:51:93:4d:
                    07:1d:b5:dc:a3:4d:b8:79:2f:05:a5:93:b3:8b:4d:
                    e2:09:ff:4c:6a:36:76:9d:5f:9d:85:d8:78:21:06:
                    9a:90:a1:76:97:4a:b6:49:a9:b8:23:9b:48:5a:41:
                    2c:c8:ea:c8:66:aa:28:d3:30:87:56:bb:2a:d4:fd:
                    18:fe:b1:7c:f1:e5:44:e4:33:c4:c2:12:93:41:3e:
                    61:26:02:a5:9b:bf:1c:e5:52:6c:a1:ec:59:52:3e:
                    10:80:de:62:ec:83:86:6f:a6:6d:fd:22:37:12:83:
                    a8:c2:75:3c:c4:30:7f:50:89:50:bc:5c:0a:dd:74:
                    8d:6d:05:c9:31:eb:f4:59:07:5d:c6:73:dd:7e:01:
                    3e:25:25:66:50:95:c0:c1:fe:5f:58:d2:a4:31:04:
                    a8:9b:55:c6:74:6c:98:de:c5:06:12:2a:f6:50:2e:
                    92:59:ee:77:4f:d3:ea:38:3e:37:88:bf:57:e5:ce:
                    b0:39:ed:a0:98:af:d9:70:93:10:d3:cc:c3:6f:dd:
                    93:5d:ce:df:83:52:d2:e8:9d:ec:f7:0e:18:6f:64:
                    a7:3e:ac:23:25:89:59:ef:fb:f0:4b:0b:61:18:30:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:37:E9:90:94:40:18:EB:91:0E:19:52:D9:19:10:E3:27:18:6A:7A
            X509v3 Authority Key Identifier:
                keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9e:bb:f5:36:8f:a8:14:01:2c:c0:33:63:1e:9b:33:c7:e1:
         bc:56:73:45:58:95:b8:88:84:a4:1e:16:1a:af:68:65:5d:ec:
         ae:fb:79:b0:72:20:8f:27:b1:34:d1:6c:71:dc:2e:08:f0:6a:
         0a:ad:84:b9:03:7f:f7:43:e9:bf:f0:94:b5:2b:f0:59:c1:b8:
         e4:43:09:53:e5:2b:f5:76:d0:82:0d:19:5f:8c:ef:c8:93:d6:
         bf:3b:fd:76:df:df:2e:88:c0:1b:d3:5c:00:a5:7b:d6:10:b8:
         13:91:dd:f3:5c:c5:09:d7:fe:e0:94:4e:0b:88:e7:8a:be:d8:
         69:fe:73:50:06:cb:b8:79:19:1c:d8:94:d1:0e:53:80:c4:01:
         01:70:f9:75:ee:75:27:97:20:b3:61:17:9c:46:b4:19:f9:06:
         b4:8e:69:5c:1d:aa:be:40:74:82:1c:89:dd:fa:ea:7e:4d:cc:
         aa:25:4e:fd:d4:d1:d0:a0:3d:e1:68:cb:5e:67:34:8a:82:8f:
         33:c6:8c:87:e2:83:c8:d8:d4:79:7e:76:b7:e7:89:f4:68:ca:
         e8:be:e1:4e:27:94:77:de:59:1a:e6:8c:d6:cb:7d:79:c5:62:
         27:e8:d2:c8:f7:ee:e7:3b:33:84:36:8d:14:47:bb:4d:26:91:
         67:ca:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:37:09 2025 by rpki-client