Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
File:                     M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft (raw, json)
Hash identifier:          DPUQleL9jrbgoSt5F5/QOeKyMBwMOv2UTbPiY0bjdfY=
Subject key identifier:   43:96:4E:4D:2C:E9:23:60:38:C6:E1:45:6F:1F:9C:0B:A2:62:01:EE
Authority key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
Certificate issuer:       /CN=F366828BAF/serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
Certificate serial:       0731
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
Manifest number:          0731
Signing time:             Tue 01 Jul 2025 02:01:53 +0000
Manifest this update:     Tue 01 Jul 2025 02:01:52 +0000
Manifest next update:     Thu 03 Jul 2025 02:01:52 +0000
Files and hashes:         1: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl (hash: 0mFIcOJHrkHAOevxUOnjLvJ8Uh2cXGK6vNa3yI3ZH44=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 02:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841 (0x731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366828BAF, serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
        Validity
            Not Before: Jul  1 02:01:52 2025 GMT
            Not After : Jul  3 02:01:52 2025 GMT
        Subject: CN=68634191-9bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:fa:4b:9b:4c:89:4e:4e:14:55:87:4b:26:
                    46:e5:f3:9b:4f:ef:18:24:0b:f2:83:4f:b4:c2:0d:
                    45:03:57:f6:73:a4:69:d4:af:c3:34:21:71:88:1d:
                    c3:d9:3d:ce:89:35:f2:a2:cf:8f:02:92:16:72:da:
                    ff:aa:88:e0:ad:85:89:c8:b9:af:a8:c5:04:82:ca:
                    26:46:64:38:81:57:ca:98:91:33:90:e6:aa:26:fc:
                    0b:54:99:38:bd:69:64:23:6f:70:37:4e:36:b0:80:
                    61:d0:35:90:27:ca:f9:df:c7:37:14:1d:af:04:c6:
                    a6:22:04:2c:cf:b3:78:6b:92:dc:fb:5e:78:da:89:
                    dc:f9:50:a5:b5:b3:db:d4:f4:03:dc:57:65:1a:86:
                    3c:95:1b:62:94:97:d1:56:93:45:1a:16:27:ba:5c:
                    41:14:70:48:fd:3a:e1:27:f6:ff:d9:be:a6:e8:92:
                    b7:18:cd:71:3c:2e:75:a0:62:49:43:51:01:c8:66:
                    4b:06:65:cd:14:d3:ec:39:06:70:2f:2e:2f:f5:0b:
                    55:dd:b2:b2:4e:b3:21:50:5c:18:85:b9:e4:fd:89:
                    f1:5b:72:a0:47:4a:55:31:43:5e:4c:67:a0:64:67:
                    1a:68:f2:60:b5:25:1d:04:66:cf:69:a6:27:53:5a:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:96:4E:4D:2C:E9:23:60:38:C6:E1:45:6F:1F:9C:0B:A2:62:01:EE
            X509v3 Authority Key Identifier:
                keyid:33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:86:a4:05:41:63:a9:5a:01:0a:56:d9:e4:ec:cb:d3:a2:44:
         db:98:40:5c:5b:2d:3b:b0:60:cc:61:71:58:30:0e:71:67:3b:
         0e:4f:18:56:e7:af:77:36:35:d9:9c:0d:7c:21:e8:35:05:71:
         5c:02:4d:08:c0:5c:5b:03:d2:78:9d:9f:8a:48:8f:8e:46:5a:
         c3:da:0b:9e:a8:b1:21:2a:22:34:3a:7f:df:43:ea:bd:31:c1:
         e2:37:1f:99:e2:d2:1f:b8:aa:30:d4:ef:fd:91:3b:9f:6b:01:
         8f:3b:47:0c:04:b5:84:2b:45:c5:11:54:c2:bd:07:ca:7f:f9:
         c1:fa:1f:dc:9f:75:75:62:6a:f7:9c:4a:5c:7c:73:c4:9a:0a:
         35:9f:a5:15:f4:87:9c:19:a3:23:ce:6b:a1:ed:5e:f1:8e:4a:
         82:15:43:cc:b3:b2:78:55:af:bd:00:d1:1a:71:5e:1b:e9:23:
         fb:53:d3:5d:ec:28:73:21:fe:9f:fd:3a:47:a2:5f:d5:42:f3:
         1e:af:a3:6d:6d:b1:21:5a:2a:5c:87:78:92:1e:6a:38:54:45:
         24:f0:21:e9:b7:8f:1b:91:6d:50:64:84:ab:97:b9:38:a7:ad:
         a8:60:5f:0a:5c:ec:f6:35:4e:39:2a:ee:5c:40:94:99:7e:28:
         0f:9a:ec:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:28:08 2025 by rpki-client