Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
File:                     M_vh3N40HGSYaNQWvz6gAALE3yA.mft (raw, json)
Hash identifier:          TtfH1bFKVcgevBeITktn6MsKxoIam4+fCo2wVESTEiQ=
Subject key identifier:   DA:8C:E9:5A:DF:42:CE:3F:8F:ED:AA:E9:CF:3D:49:9A:10:2E:23:E2
Authority key identifier: 33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
Certificate issuer:       /CN=F365C754AF/serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
Certificate serial:       0352
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
Manifest number:          034E
Signing time:             Thu 03 Jul 2025 03:39:08 +0000
Manifest this update:     Thu 03 Jul 2025 03:39:08 +0000
Manifest next update:     Sat 05 Jul 2025 03:39:08 +0000
Files and hashes:         1: M_vh3N40HGSYaNQWvz6gAALE3yA.crl (hash: xNT3MmbE0jUaPrRKGjodIm/s1M5xWfqEq772KzV61BE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C754AF, serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
        Validity
            Not Before: Jul  3 03:39:08 2025 GMT
            Not After : Jul  5 03:39:08 2025 GMT
        Subject: CN=6865fb5c-d708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:b6:ea:46:0e:6c:9d:30:df:d5:f0:ad:b8:
                    d7:e8:dd:39:11:b7:d9:2d:de:d3:b6:2b:d4:d7:32:
                    33:76:ec:76:15:1a:a3:78:7b:59:89:c5:1f:05:c3:
                    4e:30:1b:12:fd:2f:bc:08:41:69:f7:65:75:43:eb:
                    8b:3c:3e:01:2a:3a:3e:bf:c5:ad:8b:cf:da:ac:bf:
                    1d:3d:4d:b4:b3:89:a1:0e:82:71:30:05:1d:89:c5:
                    5e:1f:ac:12:c8:21:96:98:c6:df:96:55:11:14:94:
                    1a:f1:e2:d2:95:f2:30:1d:e9:44:a3:80:cf:94:e2:
                    9d:79:a9:34:a1:ac:d0:eb:fe:71:75:48:35:00:f8:
                    f2:f3:12:38:d7:38:ee:04:1e:90:2e:20:68:ef:93:
                    3e:fe:ba:61:ee:d9:84:9e:b1:d9:80:e0:56:5b:a7:
                    e1:83:b5:3a:fd:4d:44:1e:70:32:27:af:a1:ff:35:
                    bb:4f:82:f8:62:78:c2:09:2f:81:f6:65:79:af:eb:
                    92:e9:2d:74:4e:76:2d:43:b3:e6:91:c4:97:4d:47:
                    cf:44:89:c2:e1:97:12:32:ab:2a:50:8c:e8:8e:cd:
                    ff:e5:b3:96:3c:4a:89:0d:e4:9f:29:3f:53:90:77:
                    37:26:58:fa:96:34:d4:8b:f9:db:f1:09:8a:31:1b:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8C:E9:5A:DF:42:CE:3F:8F:ED:AA:E9:CF:3D:49:9A:10:2E:23:E2
            X509v3 Authority Key Identifier:
                keyid:33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c7:79:d8:4c:9f:b7:80:74:94:5a:57:d9:a0:67:02:f3:d2:
         75:21:75:ae:25:9f:72:5e:10:7c:cf:5f:f2:bd:f4:4c:69:df:
         ae:97:db:14:a0:eb:6f:7a:2b:be:71:67:7f:8c:05:66:56:c2:
         0b:8c:09:80:8d:c8:ea:ad:03:df:8d:08:cd:6f:0d:cd:ae:6c:
         ce:53:05:ea:89:c9:22:43:e9:f7:fb:2b:00:56:d8:59:31:ea:
         8c:5d:bb:4c:f7:6b:7a:cb:c4:86:6c:c2:18:c9:5d:60:17:b4:
         43:dd:4f:ca:35:af:db:4e:c6:45:c2:c3:f4:3d:dc:d7:13:b9:
         c7:9f:0c:78:c6:fd:e0:09:a8:81:8a:b5:d7:72:f4:8c:74:d9:
         54:4f:4f:b5:dc:83:40:17:26:50:4c:5f:d1:c5:c2:5c:6f:cf:
         5e:06:8c:60:06:96:d3:cf:e5:6a:f1:2f:4e:77:3f:27:a6:b7:
         ae:c4:61:48:ab:dd:fd:72:ef:43:01:11:8e:a9:ad:87:9c:c2:
         90:fd:c7:9c:1b:35:80:28:b8:bb:3e:60:70:19:70:78:66:df:
         a2:a7:2a:e4:73:51:79:a3:f8:a6:19:f2:da:44:84:27:b0:66:
         fb:9d:3f:90:05:1f:93:e1:58:39:2d:34:e7:40:e5:e4:34:aa:
         3b:a2:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:23:38 2025 by rpki-client