Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
File:                     48LJS_VpO0HwWh1WV9GnhLXVcmE.mft (raw, json)
Hash identifier:          r+xoxJ5bufffv8YvsCLRI8toV1avw42GEhKiTAdnaT0=
Subject key identifier:   AF:07:39:CC:73:26:09:7A:B6:68:10:86:4A:69:E2:F1:99:E2:8C:97
Authority key identifier: E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61
Certificate issuer:       /CN=F3695CC5RI/serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
Certificate serial:       054D
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
Manifest number:          054C
Signing time:             Sat 10 May 2025 02:36:00 +0000
Manifest this update:     Sat 10 May 2025 02:36:00 +0000
Manifest next update:     Mon 12 May 2025 02:36:00 +0000
Files and hashes:         1: 48LJS_VpO0HwWh1WV9GnhLXVcmE.crl (hash: m1bYdQuxChOjCs6Bk8YP39wwF6FeB4KOW6tv+N2tVFM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                          rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695CC5RI, serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
        Validity
            Not Before: May 10 02:36:00 2025 GMT
            Not After : May 12 02:36:00 2025 GMT
        Subject: CN=681ebb90-c722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:90:b0:f4:1f:61:9f:a9:ca:48:da:4a:bf:
                    29:b9:33:27:68:fc:36:c1:86:e9:4d:ce:30:2d:27:
                    e4:a9:bc:bd:00:08:26:66:ea:28:ee:85:c9:3d:a9:
                    45:ae:b1:a7:90:40:be:85:b8:a2:0d:30:a1:d7:e9:
                    5d:67:e4:ca:fe:7f:65:4a:77:f7:19:f3:6a:40:e6:
                    6e:d9:67:44:8a:c2:28:c0:84:ee:0b:e4:62:43:c9:
                    44:9c:27:e5:75:7e:d1:f4:87:38:7e:14:6c:59:6e:
                    48:87:fa:45:f5:ad:2a:7b:73:42:9d:c9:7f:a7:14:
                    c3:71:81:7d:56:b1:55:df:d6:e7:be:b2:b7:38:8b:
                    83:8e:d3:93:25:24:5c:17:19:0f:e0:c4:c6:b7:bb:
                    11:09:8f:61:7d:43:52:d9:c3:49:dd:83:c4:a4:ea:
                    cc:f9:11:74:cc:cc:86:fa:34:16:13:ec:73:d0:53:
                    f6:10:9e:1c:e0:4f:28:d4:ae:c7:79:b3:ea:0c:d4:
                    30:18:d5:1a:da:a0:63:85:36:55:fd:84:3e:d6:24:
                    25:84:15:04:78:1b:30:be:f9:3d:dc:d5:ac:88:83:
                    df:9e:23:4f:27:53:83:cc:3d:04:67:ec:8c:db:b7:
                    ee:6d:67:09:a1:f1:6b:ee:21:31:9b:90:e8:1a:64:
                    64:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:07:39:CC:73:26:09:7A:B6:68:10:86:4A:69:E2:F1:99:E2:8C:97
            X509v3 Authority Key Identifier:
                keyid:E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0f:4a:3b:81:fa:42:ec:5f:7e:1d:a5:ad:13:91:d9:a8:89:
         cf:54:56:ab:b7:d8:68:50:bf:21:24:4a:5d:a2:62:2d:9a:bd:
         54:dc:f4:5c:cc:b5:f0:89:e2:8b:be:fd:73:a0:20:77:97:1c:
         cd:62:35:99:f6:36:79:11:08:7b:e8:d5:1e:a2:c8:f6:f9:08:
         6c:3c:21:b4:f4:44:49:68:45:0a:a5:56:a1:db:6d:6b:85:e2:
         bb:e7:d7:1b:e0:f9:e5:fb:a9:c5:71:1a:d0:b2:a1:5d:41:d0:
         ef:24:9e:aa:64:7f:4a:fa:38:3e:6a:ee:a2:ae:61:71:a9:92:
         d8:c5:c1:36:4b:ad:a6:60:fe:54:36:3e:5d:63:26:9d:ca:9d:
         0d:19:5e:d4:0f:44:ec:ab:0a:c3:13:f4:cf:2a:be:24:32:1e:
         e7:1f:76:96:4b:69:23:77:90:9d:77:7b:d2:e7:ab:c0:03:31:
         c9:69:40:50:ed:ab:38:ee:66:7c:d5:f5:19:08:53:6b:43:4a:
         d8:75:a2:f9:b1:78:14:2f:83:84:48:4f:41:ad:b7:8f:95:1e:
         78:b5:25:51:89:2a:00:5b:0c:8a:0e:80:ed:4e:e9:58:d0:0b:
         b7:bd:da:c4:d9:13:87:e3:65:6c:a7:d1:4d:64:61:f0:1f:e0:
         e7:e1:8d:92
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVDQzVSSTExMC8GA1UEBRMoRTNDMkM5NEJGNTY5M0I0MUYwNUExRDU2NTdEMUE3
ODRCNUQ1NzI2MTAeFw0yNTA1MTAwMjM2MDBaFw0yNTA1MTIwMjM2MDBaMBgxFjAU
BgNVBAMTDTY4MWViYjkwLWM3MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRaZCw9B9hn6nKSNpKvym5Mydo/DbBhulNzjAtJ+SpvL0ACCZm6ijuhck9
qUWusaeQQL6FuKINMKHX6V1n5Mr+f2VKd/cZ82pA5m7ZZ0SKwijAhO4L5GJDyUSc
J+V1ftH0hzh+FGxZbkiH+kX1rSp7c0KdyX+nFMNxgX1WsVXf1ue+src4i4OO05Ml
JFwXGQ/gxMa3uxEJj2F9Q1LZw0ndg8Sk6sz5EXTMzIb6NBYT7HPQU/YQnhzgTyjU
rsd5s+oM1DAY1RraoGOFNlX9hD7WJCWEFQR4GzC++T3c1ayIg9+eI08nU4PMPQRn
7Izbt+5tZwmh8WvuITGbkOgaZGT7AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUrwc5
zHMmCXq2aBCGSmni8ZnijJcwHwYDVR0jBBgwFoAU48LJS/VpO0HwWh1WV9GnhLXV
cmEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1Q0M1L0Y1QTgxRDQyMjExQjExRUNCQzUwRTIyQkQ4QTAxNENFLzQ4TEpT
X1ZwTzBId1doMVdWOUduaExYVmNtRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzQ4TEpTX1ZwTzBId1doMVdWOUduaExYVmNtRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTVDQzUvRjVBODFENDIyMTFCMTFFQ0JDNTBFMjJCRDhBMDE0
Q0UvNDhMSlNfVnBPMEh3V2gxV1Y5R25oTFhWY21FLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAID0o7gfpC7F9+HaWtE5HZqInPVFart9ho
UL8hJEpdomItmr1U3PRczLXwieKLvv1zoCB3lxzNYjWZ9jZ5EQh76NUeosj2+Qhs
PCG09ERJaEUKpVah221rheK759cb4Pnl+6nFcRrQsqFdQdDvJJ6qZH9K+jg+au6i
rmFxqZLYxcE2S62mYP5UNj5dYyadyp0NGV7UD0TsqwrDE/TPKr4kMh7nH3aWS2kj
d5Cdd3vS56vAAzHJaUBQ7as47mZ81fUZCFNrQ0rYdaL5sXgUL4OESE9BrbePlR54
tSVRiSoAWwyKDoDtTulY0Au3vdrE2ROH42Vsp9FNZGHwH+Dn4Y2S
-----END CERTIFICATE-----
Generated at Sat May 10 13:47:52 2025 by rpki-client