Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
File:                     FU_bBWSxN90ijzXfSvbkB4DvENY.mft (raw, json)
Hash identifier:          yH8l9c9CS0Ye5Il0HKeegp2WpKdgqT4VMf6L+InMDBY=
Subject key identifier:   C8:F4:60:76:97:76:09:E6:A9:85:30:5E:E5:C5:1E:08:D6:55:1E:C0
Authority key identifier: 15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6
Certificate issuer:       /CN=F3683ABDAF/serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
Certificate serial:       0774
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
Manifest number:          0772
Signing time:             Sun 11 May 2025 01:50:45 +0000
Manifest this update:     Sun 11 May 2025 01:50:44 +0000
Manifest next update:     Tue 13 May 2025 01:50:44 +0000
Files and hashes:         1: FU_bBWSxN90ijzXfSvbkB4DvENY.crl (hash: TgrJKQPoZlrEX2T9lZ1icCDwE2DLyfDHQOwXQJ5VHU8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683ABDAF, serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
        Validity
            Not Before: May 11 01:50:44 2025 GMT
            Not After : May 13 01:50:44 2025 GMT
        Subject: CN=68200275-772d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:0b:24:69:74:df:e0:26:1b:d4:7d:50:38:
                    dc:07:ba:aa:47:e9:ad:ee:6b:3e:78:3f:7e:29:35:
                    a8:75:b7:e1:14:c1:55:d7:ed:cf:12:f6:2d:a0:3a:
                    36:88:5b:b0:f4:20:fd:c1:62:42:85:a2:7b:41:62:
                    e9:55:74:dd:0f:54:79:2e:2b:8b:23:93:01:e9:a9:
                    99:ac:af:a8:0c:35:9f:5d:d9:6b:4b:df:09:e6:87:
                    50:d5:6f:4b:39:42:e2:5f:cd:ad:0c:9f:5a:24:9c:
                    53:d5:33:e0:a4:77:54:d8:e5:f4:54:6f:42:f6:2c:
                    24:53:8a:10:99:2f:3f:60:a0:22:9f:f1:60:39:44:
                    0d:0a:84:10:c6:f9:87:6e:21:29:9b:d6:f2:ed:88:
                    3a:83:b4:b6:8d:46:3a:3b:73:14:a8:c5:27:77:e3:
                    52:57:15:d6:e2:34:fa:05:c9:c8:7e:3f:5e:9d:ef:
                    3f:39:4a:cf:bd:0c:f7:bc:87:ba:29:7c:04:3e:35:
                    b8:29:5c:74:a2:55:18:c7:04:9f:5b:04:67:d0:d4:
                    a1:18:3a:64:26:98:ff:74:3d:0b:86:ea:58:f9:8e:
                    73:7a:3b:7a:26:c7:72:73:5c:f7:fc:34:7e:5b:af:
                    48:03:8f:0e:d2:71:f9:20:9c:ce:47:41:6f:68:85:
                    6b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F4:60:76:97:76:09:E6:A9:85:30:5E:E5:C5:1E:08:D6:55:1E:C0
            X509v3 Authority Key Identifier:
                keyid:15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e6:05:44:f5:ca:f9:91:ca:2c:fb:9c:6e:54:a3:53:a8:85:
         c3:03:ee:8c:08:bf:93:6f:a8:eb:0e:e6:9a:2a:e1:0b:c8:2e:
         85:ef:9b:84:dd:4f:3c:ca:85:0b:29:9f:ce:75:9d:d9:f8:00:
         7b:24:30:7b:92:54:bc:bc:79:cd:b7:27:78:75:60:3d:07:c0:
         35:34:06:45:da:a5:e7:96:14:eb:75:4c:2e:bf:44:2a:ca:db:
         cf:12:ef:68:67:e7:d3:f4:7c:f2:7a:49:e2:80:53:a2:ac:cb:
         64:ae:d7:58:a5:74:c2:59:ae:4e:67:35:75:06:9c:ab:ae:3d:
         b8:5e:19:51:90:97:e6:00:00:55:4c:33:af:1f:3a:6d:39:8b:
         9a:f2:83:1f:f3:bb:5d:a6:8c:c7:e8:dd:2d:cd:58:e4:66:75:
         d9:ec:7d:10:0c:9c:69:ee:0e:0a:0b:85:18:88:3e:1b:56:69:
         16:21:a1:a9:53:32:74:c2:39:08:68:5a:d5:db:b4:22:19:f9:
         bb:79:07:51:8c:04:2f:e1:aa:b8:84:ed:bd:f9:ae:05:47:58:
         a9:f3:8e:20:63:14:e4:38:d9:5f:45:63:b6:65:38:48:17:3e:
         de:f8:81:fe:5c:b2:18:e8:e5:d6:d3:fc:55:7d:18:cd:86:11:
         f9:aa:1d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:50:23 2025 by rpki-client