Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
File:                     PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft (raw, json)
Hash identifier:          21zO3wSVxx8GkctE+jWezUXbrq+F8czNgUmqrHWk85A=
Subject key identifier:   B6:A1:48:97:46:51:45:F7:37:4F:06:1D:CF:E0:9B:9A:7E:F2:26:2F
Authority key identifier: 3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F
Certificate issuer:       /CN=F36AAA81AF/serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
Certificate serial:       0125
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
Manifest number:          0125
Signing time:             Sun 11 May 2025 04:43:21 +0000
Manifest this update:     Sun 11 May 2025 04:43:20 +0000
Manifest next update:     Tue 13 May 2025 04:43:20 +0000
Files and hashes:         1: PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl (hash: nGawfNWDLHBPxP8ITrtgP8Tc2yAfbmAEWa4lyZWVXmg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AAA81AF, serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
        Validity
            Not Before: May 11 04:43:20 2025 GMT
            Not After : May 13 04:43:20 2025 GMT
        Subject: CN=68202ae9-38f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:c2:5a:af:d7:25:70:fa:35:a7:40:c0:fa:
                    99:5e:2e:a5:0e:b0:67:7e:4a:90:2a:6f:06:73:3b:
                    e4:0b:60:2a:c6:e8:f0:5d:57:7d:3c:1d:69:42:75:
                    76:02:0f:2a:08:41:19:7b:83:f6:13:7c:2b:32:cf:
                    0e:a1:3b:e5:57:78:fb:86:e9:07:82:64:66:c9:0a:
                    91:d6:35:8b:97:65:31:d7:27:2f:93:ce:a4:19:66:
                    4b:9b:06:3c:18:c8:02:99:d0:1d:5d:82:e2:0a:2f:
                    32:1c:36:6d:a0:60:48:50:e8:8e:71:d1:76:33:72:
                    d9:49:88:0f:a0:18:8d:9c:b2:41:e0:a8:e2:8e:c2:
                    1c:ed:ac:30:fe:f4:59:31:55:97:e9:68:ab:6a:40:
                    6e:7f:79:e4:3b:59:b1:96:ac:8e:7c:d2:90:29:85:
                    c4:ac:54:91:37:a8:b5:53:62:a3:6e:3f:24:6d:ff:
                    6f:ab:cd:b9:86:2e:b6:8f:2f:6f:e0:fd:ac:19:ff:
                    df:db:17:72:03:05:c1:b1:a2:7d:5d:db:2d:03:da:
                    ac:24:a1:64:b5:78:13:25:7d:d4:04:70:8b:63:08:
                    09:cd:79:82:02:c4:74:a2:d4:cb:43:03:ef:53:5e:
                    0f:47:14:74:cd:78:5b:ff:a0:07:c5:19:de:79:4a:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A1:48:97:46:51:45:F7:37:4F:06:1D:CF:E0:9B:9A:7E:F2:26:2F
            X509v3 Authority Key Identifier:
                keyid:3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:16:c6:04:f9:27:43:d1:41:32:b2:75:3a:d8:c8:93:31:b9:
         e8:9b:81:6b:85:8e:ec:b3:28:4e:95:a0:45:5a:5e:33:c6:bc:
         3f:92:d5:f8:d7:87:f4:1a:13:d0:2a:2b:32:30:36:35:31:06:
         5a:b3:87:a5:fe:c6:e7:8c:a8:d2:96:89:bf:b6:e7:0b:83:40:
         95:6b:5a:36:2c:be:4c:76:6c:b1:9e:c3:7a:f9:00:eb:db:44:
         9d:08:39:80:a1:92:d1:8d:8b:43:6e:a2:ab:67:4c:81:6a:8b:
         1a:43:e0:d1:4f:1b:75:9a:ad:ad:c9:a2:14:63:75:e4:54:d9:
         4b:ae:04:f3:9a:f4:7a:95:6e:e4:c3:02:ef:1c:58:c0:04:1e:
         76:41:30:98:44:aa:d6:36:0d:20:53:5a:a4:b1:a3:70:dd:01:
         f7:23:f2:c8:d5:c2:69:b4:a3:de:45:63:11:1b:f5:7e:0e:96:
         58:e3:08:82:35:f7:87:6a:80:bb:89:4c:87:d4:a2:fc:fb:12:
         c4:9e:04:78:19:ad:56:04:b4:6a:64:d1:53:7b:c4:c7:e8:53:
         d4:63:07:9d:77:81:30:fa:78:89:3e:cc:e9:38:36:7d:1d:7f:
         c0:55:82:5c:cd:d1:8c:fd:b4:8a:cb:e1:84:5e:11:95:c9:33:
         79:f6:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:50:04 2025 by rpki-client