Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File:                     kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier:          I2I9XKR07w7/9AFcjccTCleE8L1o9EtMt8AR4swg8tA=
Subject key identifier:   C0:EE:AA:14:17:D6:AF:02:35:14:AF:A8:4D:86:52:9F:10:54:AD:BE
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer:       /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial:       0612
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number:          0610
Signing time:             Mon 30 Jun 2025 02:18:34 +0000
Manifest this update:     Mon 30 Jun 2025 02:18:33 +0000
Manifest next update:     Wed 02 Jul 2025 02:18:33 +0000
Files and hashes:         1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: U5wUB3BS2y/QqmUm3YRF1sfkbFzr2O1n3KgAptNvSjI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 02:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554 (0x612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
        Validity
            Not Before: Jun 30 02:18:33 2025 GMT
            Not After : Jul  2 02:18:33 2025 GMT
        Subject: CN=6861f3f9-97a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:12:31:43:c3:29:11:e3:8e:c7:98:58:cf:
                    46:a4:92:d6:36:9b:8a:42:65:a6:7a:2e:c9:e5:a7:
                    62:a9:5e:61:5f:8b:87:47:c4:24:3f:1f:f3:81:d0:
                    47:6d:81:71:a7:29:7e:44:7c:9a:38:b5:c5:bb:71:
                    5e:d7:70:1a:a5:5f:70:d6:6c:1f:18:fa:8a:6a:ca:
                    9b:a5:be:59:ed:ae:7e:73:68:72:5f:54:e5:74:4f:
                    8b:8f:89:af:d7:bb:99:a6:fd:02:fe:3e:64:2e:e6:
                    60:e1:bf:06:9b:d9:b0:03:a7:bb:21:b8:57:f0:bb:
                    c7:6a:88:69:a2:df:a6:4b:67:c1:8a:a4:a6:1b:85:
                    8c:20:be:68:e1:86:18:9a:11:7a:91:83:e1:0e:40:
                    81:ce:0c:12:e2:b3:7f:d9:09:3a:ab:6f:2f:e0:d5:
                    ea:32:9b:5c:b6:ac:ff:0f:2c:ce:f2:ae:c1:06:98:
                    d7:01:20:a0:f3:91:13:31:30:17:32:82:fe:cc:db:
                    60:ca:1b:b0:ed:96:0b:f2:f9:e1:f7:0a:85:1f:27:
                    98:fd:c7:a9:36:dc:ea:66:9c:ec:10:64:db:bd:b3:
                    62:5a:cd:00:33:8c:ec:38:dc:51:83:e5:ca:81:34:
                    b8:2b:6e:7f:ee:1a:4b:d3:42:b1:54:47:e1:f4:f4:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EE:AA:14:17:D6:AF:02:35:14:AF:A8:4D:86:52:9F:10:54:AD:BE
            X509v3 Authority Key Identifier:
                keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f0:68:5d:7e:9b:e0:1d:62:fe:1e:67:77:fb:64:c3:c3:c4:
         ae:fe:84:40:49:50:6b:4a:78:c1:eb:24:e5:ea:95:37:b2:5c:
         cc:d2:cb:fa:c2:f9:cb:95:b5:6d:bc:af:66:c1:33:2f:f4:e7:
         a4:78:59:f3:b2:8a:11:09:3a:68:70:4b:2f:23:51:31:22:a4:
         87:d1:43:01:23:08:53:0d:e1:fe:95:be:56:57:68:ac:19:72:
         69:bc:17:d4:be:12:44:b8:17:af:c8:17:21:54:be:dc:c1:2f:
         1f:bd:e7:ab:a9:b4:6b:e1:bc:4a:1e:df:4f:ea:4f:cb:20:49:
         1c:36:4f:c1:51:0a:ed:3f:c5:27:20:e7:f2:9b:26:fb:a9:93:
         86:83:e8:2b:fc:cf:8c:6d:e7:c6:2a:86:16:1a:70:8c:1a:ce:
         4a:f4:45:df:12:91:e6:88:98:92:15:b6:ef:b3:81:b5:ca:ba:
         e7:7c:9a:7a:04:14:a2:b2:7d:ad:7f:a0:44:23:c1:43:3c:2f:
         d6:a2:a9:2c:8d:44:ed:67:06:a0:cb:35:3b:d6:3b:da:e1:ad:
         c0:b9:94:08:1e:53:c9:22:53:bb:ec:3b:92:93:45:59:46:1d:
         8f:76:9b:80:67:b3:94:df:0b:a0:97:16:7e:7d:2e:b8:80:af:
         a1:d7:a0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:47:53 2025 by rpki-client