Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          oG4YmZ25cwFR2r9PDj2cL6dDj4VSbvRSTH4JjHS/E0M=
Subject key identifier:   ED:7E:34:E2:07:38:8B:DD:67:DB:E8:44:BF:AD:37:BD:1C:39:4F:5D
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       089B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          089B
Signing time:             Sat 17 May 2025 01:35:17 +0000
Manifest this update:     Sat 17 May 2025 01:35:16 +0000
Manifest next update:     Mon 19 May 2025 01:35:16 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: zJ6Uu1YMmwQl9gBHGG0hOGCmKXgQeH1YN2BZWc7bgPU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 May 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2203 (0x89b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: May 17 01:35:16 2025 GMT
            Not After : May 19 01:35:16 2025 GMT
        Subject: CN=6827e7d4-c1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:a1:dc:a4:74:8d:a0:34:e3:7a:29:c4:aa:
                    c9:b5:5a:f3:a7:82:b5:9d:c8:6c:75:54:cb:7f:4d:
                    58:2b:4f:5f:47:44:93:0a:a4:de:4b:88:6f:60:aa:
                    2a:4d:94:92:d2:25:51:7a:59:26:bc:0c:87:db:4d:
                    c1:3c:cc:1b:38:80:22:7b:35:49:85:54:9e:45:66:
                    20:4d:b4:bd:06:27:e9:a3:ba:54:96:72:17:2a:0d:
                    09:a9:ab:b8:c4:4c:01:91:34:5e:e3:30:6c:94:8c:
                    c9:ec:43:1a:0e:9d:7f:15:8a:d5:20:bd:da:3f:30:
                    bf:80:33:0c:8e:b1:07:99:7d:ab:68:a2:47:ef:e2:
                    46:80:57:e8:95:c7:92:64:28:43:eb:15:56:21:7f:
                    ac:08:c9:2d:a9:6a:9e:43:4a:ed:c2:ef:33:57:68:
                    c9:1a:63:cc:af:7d:cb:1c:64:16:42:28:6e:f9:e3:
                    2c:3a:fc:fa:79:70:3c:9c:4f:b6:97:3a:ba:68:df:
                    a6:55:70:02:bf:a0:3c:00:f4:0f:9d:6a:bc:fa:c2:
                    46:44:86:59:59:64:db:00:52:a9:b3:cd:03:8c:6b:
                    0d:9a:7d:2a:8e:c1:92:04:b7:33:05:0a:0d:a8:46:
                    11:7f:01:8c:7f:5e:d8:ec:33:10:33:58:94:bd:fb:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7E:34:E2:07:38:8B:DD:67:DB:E8:44:BF:AD:37:BD:1C:39:4F:5D
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:50:84:43:50:ba:d6:ea:b0:5d:75:71:5f:05:f0:da:bd:
         e0:66:20:f3:27:22:7e:a1:0f:be:9e:21:29:cd:a7:4a:ef:c2:
         ef:46:a7:72:af:50:2b:51:5d:c4:b5:77:3d:9a:bd:74:e8:ff:
         b9:38:c8:13:eb:5b:d9:40:81:01:d1:2f:97:a4:02:39:fe:ae:
         24:fc:5a:dc:65:24:98:a1:5b:16:c1:1e:fd:f2:ef:c0:0e:ab:
         26:04:f0:19:dc:8e:a5:e9:11:69:84:2c:77:8e:45:c7:8c:84:
         76:2a:e7:d2:5f:28:78:91:90:94:1a:7b:2f:25:b5:6b:fe:a1:
         8e:75:e3:a5:f8:1a:f1:89:fa:63:0b:10:ce:82:7b:b2:79:4b:
         32:d0:16:0a:c7:db:6d:c1:d5:09:8d:59:44:a4:d0:25:d1:6e:
         90:80:f4:e3:f4:38:8c:2c:a5:83:9c:2c:58:70:ac:ed:55:f3:
         b5:e4:1b:85:30:32:86:83:61:ab:6c:67:4d:81:45:d2:ff:cb:
         31:4b:53:b0:d6:a7:6f:58:13:27:f5:52:77:22:00:68:13:f5:
         c0:44:5a:41:38:66:20:7a:d3:89:48:85:80:86:ea:85:88:61:
         2e:0e:87:77:91:79:3b:2b:94:fc:aa:77:d4:72:52:70:e4:c0:
         97:bb:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:56:20 2025 by rpki-client