Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
File:                     QUU0FvBOj22xFq-_-XGXUae9vPc.mft (raw, json)
Hash identifier:          12vQgjx0/GXtmy9Mnez/0Y2xqtdbE7epEIvMeHAAUJo=
Subject key identifier:   9E:41:3C:77:D0:1E:9D:1C:24:99:8B:98:B5:97:F9:78:D6:2B:98:73
Authority key identifier: 41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7
Certificate issuer:       /CN=F36AC99EAF/serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
Certificate serial:       0502
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
Manifest number:          04FF
Signing time:             Fri 16 May 2025 01:51:28 +0000
Manifest this update:     Fri 16 May 2025 01:51:28 +0000
Manifest next update:     Sun 18 May 2025 01:51:28 +0000
Files and hashes:         1: QUU0FvBOj22xFq-_-XGXUae9vPc.crl (hash: U6UEBVe3Z6VYibiRBnRjt12rnQrOsVPCucxTOPxThz4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 May 2025 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282 (0x502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC99EAF, serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
        Validity
            Not Before: May 16 01:51:28 2025 GMT
            Not After : May 18 01:51:28 2025 GMT
        Subject: CN=68269a20-67b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:21:9b:9e:dc:cc:c1:1b:ec:d2:3a:1a:62:
                    8f:0e:3d:a8:e2:8c:96:e6:a7:06:6f:5b:70:99:62:
                    a4:56:6a:e6:90:e9:f9:fa:f9:0a:3a:a7:dc:39:ce:
                    bd:59:db:2a:d9:cb:ba:9d:1e:3d:ca:b5:16:ea:f0:
                    e2:67:83:91:93:10:6d:d0:6a:e5:be:27:e8:e3:f5:
                    14:9d:57:b6:7e:87:63:64:9b:c2:27:dd:58:cb:fb:
                    d9:7c:90:5c:d4:7d:be:2f:32:6c:f3:d0:07:72:ba:
                    d6:6e:48:6c:e1:b8:ae:2c:65:39:c5:93:ae:48:c9:
                    03:5c:cc:be:84:b5:de:b4:92:53:a4:ab:a7:00:95:
                    43:93:77:ce:a6:36:27:57:ef:58:a0:a3:ee:56:f1:
                    c0:e5:32:6f:f5:58:7d:56:0e:5e:08:84:d8:7d:de:
                    f4:f6:72:44:9a:05:ea:0a:67:53:55:cf:7b:22:87:
                    ab:f4:f0:82:1c:d7:8b:73:15:51:ac:2a:8b:33:22:
                    e6:a4:76:e1:92:79:16:2b:e1:00:18:0d:c7:b1:26:
                    c5:4a:da:2a:ea:1b:5f:17:3f:09:92:c0:e8:8d:7e:
                    b1:da:b4:ea:2f:d8:74:89:d9:fc:71:46:e7:a5:de:
                    34:64:9e:e6:66:f7:be:75:bc:cd:22:41:14:8e:86:
                    b7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:41:3C:77:D0:1E:9D:1C:24:99:8B:98:B5:97:F9:78:D6:2B:98:73
            X509v3 Authority Key Identifier:
                keyid:41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:99:1d:14:a1:57:a4:2e:c9:2a:4b:83:6c:a9:17:b8:47:8c:
         b9:35:1a:0c:26:56:ce:21:69:57:77:5c:ee:3f:2a:2f:b2:7e:
         53:03:d4:d6:b9:a1:f1:a7:53:bd:a9:ef:84:76:c0:36:a1:71:
         94:ac:37:b7:12:a2:71:18:ee:73:5c:c6:fb:29:44:b6:40:d8:
         b9:0d:e3:c7:f7:94:49:38:12:66:50:66:dc:b7:a0:88:4a:17:
         46:20:57:20:94:8c:0b:0d:9f:44:7c:4e:cb:3e:a5:ad:25:03:
         31:05:54:a7:86:4a:f8:17:e3:0f:36:d6:97:f6:42:92:59:54:
         03:04:a5:5c:d0:c2:20:6e:8f:64:32:a5:f1:39:0d:05:ce:ec:
         05:35:ce:36:f2:ab:18:58:66:50:8d:25:30:c9:dd:d3:1b:2c:
         ac:dc:94:c5:eb:c3:d0:79:48:a3:ae:0b:dc:7c:06:a0:68:11:
         8f:2e:c9:92:61:b6:cd:08:21:ed:3a:da:c1:73:18:dc:e4:f3:
         eb:4b:da:aa:b4:16:b4:d5:cc:3d:49:1b:db:92:fe:1e:26:ef:
         21:e6:38:73:23:b2:fb:07:07:4d:5b:01:6e:27:8d:12:82:fb:
         b2:df:c0:2e:28:90:71:64:0a:8a:c5:89:41:55:2b:7c:1e:fb:
         9f:3b:93:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:16:42 2025 by rpki-client