Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File:                     KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier:          82rLk7BitMAArqCatP1703Ppqf/37LgPCIPU1rZLISU=
Subject key identifier:   6C:C3:AD:A4:43:31:6D:2A:3C:72:B9:B6:92:F5:C8:AE:81:1F:09:9B
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer:       /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial:       0D4B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number:          0D4B
Signing time:             Fri 04 Jul 2025 01:02:18 +0000
Manifest this update:     Fri 04 Jul 2025 01:02:17 +0000
Manifest next update:     Sun 06 Jul 2025 01:02:17 +0000
Files and hashes:         1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: hIROX3c0c6Txg55uzhWv6GX/CoB/GZrK7gta5AC05bI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                          rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3403 (0xd4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
        Validity
            Not Before: Jul  4 01:02:17 2025 GMT
            Not After : Jul  6 01:02:17 2025 GMT
        Subject: CN=6867281a-8efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:89:40:a9:00:96:a1:ce:99:50:37:24:cc:
                    0c:f8:59:08:1d:d8:d7:9a:95:0c:f5:3b:ed:9d:42:
                    c1:a1:dc:7b:f3:38:d0:b7:ee:25:9c:4d:d5:18:3e:
                    c4:07:61:38:4b:66:69:a6:83:d4:dd:ae:85:d8:26:
                    4f:bd:dd:86:2c:03:91:73:16:c0:1e:39:97:84:f7:
                    2a:86:95:60:f3:fc:fd:ca:02:8f:36:92:f5:3e:a0:
                    f7:96:13:e8:c4:38:38:68:09:e0:b5:51:a6:35:9a:
                    af:9f:e2:29:c1:f8:39:ad:b0:cf:4b:8c:df:ae:92:
                    a4:4d:0a:e1:46:22:34:9d:bf:75:33:56:a0:01:b6:
                    da:da:ce:83:42:37:fc:c8:e3:a7:ce:b4:8f:3f:a7:
                    b3:2f:4e:ec:a3:66:1d:0f:61:bb:93:60:a8:cd:cf:
                    07:a4:af:c8:a8:a7:31:c5:6f:86:c1:e2:1a:0c:e5:
                    29:7f:66:c8:5e:04:24:90:b2:54:31:9c:38:b4:6a:
                    bb:b1:1c:b7:fd:be:0b:ad:25:c4:26:75:cf:b6:1e:
                    ae:34:e3:db:07:5d:d2:52:da:19:1f:c2:00:5d:fc:
                    f6:f0:46:b4:1d:ce:85:6e:0c:c7:d9:d0:4e:0d:57:
                    82:4e:8c:9e:4e:d3:7e:21:1f:8c:48:6c:6d:53:c6:
                    61:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C3:AD:A4:43:31:6D:2A:3C:72:B9:B6:92:F5:C8:AE:81:1F:09:9B
            X509v3 Authority Key Identifier:
                keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:50:f7:4d:75:d0:96:a2:9b:4b:a8:c8:07:06:26:af:6e:1f:
         c0:87:e0:ad:54:f9:f8:14:9a:f0:e7:6e:05:ea:09:e0:73:7d:
         96:1f:25:3a:ee:6c:13:d6:c4:02:8b:2e:54:06:d0:6b:7e:e8:
         2d:61:22:78:30:5d:28:20:ce:b4:51:ae:02:a3:3b:9f:35:49:
         21:0e:c8:8b:ba:22:19:58:db:17:51:47:0f:76:39:8d:88:94:
         94:1d:59:2a:8c:36:45:ed:ee:eb:c6:27:aa:76:b3:f7:3d:82:
         9f:8c:76:44:3c:66:4f:d0:c4:df:59:bb:bf:c3:ac:d5:79:2a:
         d5:a2:c2:f2:40:07:73:82:d0:65:f3:a7:5a:14:fd:b4:3c:16:
         67:77:a6:0b:8e:6a:ba:0d:3a:8d:7a:68:e8:c2:2f:94:62:33:
         23:f4:66:be:4a:76:77:11:55:b4:ac:96:e6:83:35:8b:5b:a4:
         b5:88:30:b1:75:ee:d7:d2:1b:f4:9b:39:01:76:ed:b7:29:da:
         d5:27:7f:30:c0:ae:4c:6f:46:93:e0:06:02:0a:08:f7:2f:87:
         25:55:8c:52:dd:80:2d:a5:56:5c:d4:1a:fe:32:fa:97:fb:76:
         0a:3d:11:1d:0d:ab:c1:01:eb:04:c3:1d:d8:be:50:55:54:50:
         cd:b9:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:40:13 2025 by rpki-client