Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
File:                     JBS5msCAHawVts3PjThpoMT_Gh0.mft (raw, json)
Hash identifier:          XvfV4efSkzCj5Z5VJ/zX7EpnxMbbJE+FQFxKqIPoi2Q=
Subject key identifier:   4E:D9:64:9A:99:25:8D:8A:DE:C6:1E:8B:A1:8E:79:8A:DE:A6:A6:77
Authority key identifier: 24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
Certificate issuer:       /CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Certificate serial:       04FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
Manifest number:          04FB
Signing time:             Sat 23 Aug 2025 02:50:28 +0000
Manifest this update:     Sat 23 Aug 2025 02:50:27 +0000
Manifest next update:     Mon 25 Aug 2025 02:50:27 +0000
Files and hashes:         1: JBS5msCAHawVts3PjThpoMT_Gh0.crl (hash: k50+TYhuRvwH5VsTKJCwRG0mbwXOR7n0vMVwMVvkki0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFD9AF, serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
        Validity
            Not Before: Aug 23 02:50:27 2025 GMT
            Not After : Aug 25 02:50:27 2025 GMT
        Subject: CN=68a92c74-4f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:af:f3:3d:30:51:e4:31:2c:f3:92:5b:ed:34:
                    de:bc:99:19:03:e5:18:28:ff:f4:7e:ee:8d:1d:c3:
                    00:12:e4:61:f6:55:b2:0f:ad:2d:e7:65:0a:17:80:
                    70:33:7e:a5:0f:2b:a2:e9:d3:cd:07:fc:0f:dd:f8:
                    9e:d1:a9:4d:9f:b1:dc:74:42:66:28:ce:60:0d:25:
                    69:63:96:0f:d1:63:f0:f6:6b:4e:8b:30:f3:a4:05:
                    6c:ae:c7:30:b5:67:6f:b6:9f:ac:ff:e9:08:c8:16:
                    d0:3c:ad:e9:f8:88:1f:71:09:1c:90:5a:74:fb:3e:
                    74:c0:67:55:f6:d5:4a:75:5b:51:8b:c3:23:b8:69:
                    35:ce:41:a2:59:d6:b0:4d:89:eb:5d:55:6d:94:b7:
                    a8:f4:af:45:d0:58:6d:3b:6b:09:e6:7f:09:ef:57:
                    5e:c0:7b:d2:06:1f:fc:0f:69:39:5d:2d:b8:f2:d8:
                    3d:31:40:1c:c7:c7:52:17:5c:ba:e9:8c:47:25:6e:
                    ba:75:bc:8f:ce:62:87:03:5c:e1:6e:a3:48:11:8f:
                    68:1e:ef:dd:fb:d2:05:0c:6f:9b:77:76:28:86:a5:
                    28:f0:a2:7b:f0:d7:a2:40:79:ab:4c:af:ef:8e:77:
                    36:3d:57:06:ca:b7:0a:e7:d2:1e:ff:a3:48:34:18:
                    b4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D9:64:9A:99:25:8D:8A:DE:C6:1E:8B:A1:8E:79:8A:DE:A6:A6:77
            X509v3 Authority Key Identifier:
                keyid:24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:15:e9:d4:d4:a1:3d:ac:95:58:ec:43:97:1a:5f:21:16:36:
         c6:f9:45:63:10:2e:f7:f6:af:aa:6f:26:ce:3d:e1:1b:94:e8:
         a2:d6:07:4c:8d:ca:84:95:82:d5:d8:58:6e:6e:f2:6b:a6:ac:
         ee:c1:db:c3:6e:5f:1a:cf:81:42:e2:64:29:38:ae:7e:fb:fa:
         fa:46:a3:2d:2c:86:da:2c:47:62:e9:9a:a4:71:1e:4f:89:cb:
         74:c9:5f:97:b2:37:52:cb:01:f9:9f:4a:91:5a:88:77:3a:08:
         e0:58:b6:54:89:37:69:cc:4b:cb:3c:4e:34:7c:94:4d:fb:37:
         4b:c1:99:10:ed:14:bb:dd:96:29:37:71:45:9f:2a:92:1a:22:
         a9:3e:1d:34:82:ec:46:50:86:14:4a:5e:e2:5d:1a:28:28:2d:
         33:ca:07:c6:be:39:53:ca:fd:c2:68:af:c3:aa:19:f3:a1:a1:
         a3:8d:54:d7:ff:08:25:da:d5:8a:0c:9a:fc:b5:1a:dd:f1:ab:
         64:cf:ca:89:c4:39:0c:90:db:f7:01:d6:0c:de:1d:a0:bd:c6:
         71:ef:6a:48:22:25:ad:ec:40:e6:aa:7f:54:89:28:67:47:15:
         35:21:e1:b6:bd:0b:3b:28:e5:80:ae:7b:70:7d:72:e0:d1:31:
         d9:c6:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:03 2025 by rpki-client