Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
File:                     7cVihK_vMTf8afnaeD_pzHg6baw.mft (raw, json)
Hash identifier:          Jnwtl+40Xy65h+u5ZwdVauq6PP7cmtJhLI9XXgn2kpg=
Subject key identifier:   C7:DA:C3:02:17:D5:65:90:B4:CB:6E:AF:81:6C:04:9B:F3:82:65:82
Authority key identifier: ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC
Certificate issuer:       /CN=F36C1D14AF/serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
Certificate serial:       0786
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
Manifest number:          0784
Signing time:             Mon 12 May 2025 01:50:37 +0000
Manifest this update:     Mon 12 May 2025 01:50:36 +0000
Manifest next update:     Wed 14 May 2025 01:50:36 +0000
Files and hashes:         1: 7cVihK_vMTf8afnaeD_pzHg6baw.crl (hash: 5edlknnEpm7XZ5+Mmfn5+bVcwfv6ryiBotMsr5zIAkU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1926 (0x786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1D14AF, serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
        Validity
            Not Before: May 12 01:50:36 2025 GMT
            Not After : May 14 01:50:36 2025 GMT
        Subject: CN=682153ec-341c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:2a:54:97:4a:e6:e8:d4:f5:7a:ef:65:99:
                    19:7f:1b:6e:95:fe:c3:46:26:95:d9:78:87:19:35:
                    c0:e9:18:4b:01:bb:22:f0:0a:09:79:5b:76:71:6c:
                    c6:0d:f8:5a:6f:12:85:0b:d4:49:55:9b:d6:64:d7:
                    c6:f9:bf:74:bc:ff:22:6f:3f:e9:75:e2:22:f7:da:
                    28:7a:c5:85:1b:71:c2:d7:ae:11:66:55:90:f2:72:
                    ea:fc:64:12:6b:1b:c7:bd:28:df:4a:42:87:36:5d:
                    ec:10:85:78:97:ba:81:27:9d:de:1d:2b:b3:21:b6:
                    f5:5c:3c:9d:20:66:15:9d:f9:a0:d1:20:a1:fd:d9:
                    cb:e3:8a:f4:16:6e:1e:62:d3:47:59:b4:82:2d:99:
                    1e:7c:cb:da:f7:06:b6:06:4c:e1:7f:25:7a:21:8a:
                    ae:d3:f7:e2:99:dc:1a:15:a5:93:4f:2f:76:18:da:
                    3c:eb:62:8c:3f:90:6a:a2:8c:18:73:ef:1d:82:8e:
                    77:cc:1a:f3:00:24:a2:03:fb:58:fb:35:fd:41:02:
                    0b:4c:47:00:11:e0:ac:3d:60:45:c4:de:6f:4a:4e:
                    ef:af:b3:5c:b0:19:8a:4e:36:be:60:3f:9d:de:59:
                    c7:a0:5a:a3:c7:40:27:8f:17:aa:7a:98:bf:c5:c0:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DA:C3:02:17:D5:65:90:B4:CB:6E:AF:81:6C:04:9B:F3:82:65:82
            X509v3 Authority Key Identifier:
                keyid:ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:37:e6:2f:99:12:89:40:df:ae:34:05:34:65:b3:77:90:86:
         56:40:38:5f:7d:a3:cc:6e:99:89:98:3d:68:c8:5b:6a:14:56:
         71:ae:4d:3b:1f:b5:58:b3:5c:86:3f:13:14:c4:64:a8:4f:7d:
         7a:e8:52:3b:ef:88:8d:1a:09:1f:90:eb:0e:c5:dd:ef:87:8d:
         54:07:b4:95:4d:5f:ac:b3:e3:76:fa:19:8c:2e:14:90:1b:80:
         89:1a:d3:3f:04:81:df:9d:98:1e:f4:31:36:34:68:39:0e:d7:
         0f:90:ed:73:ae:b7:20:99:45:d9:3a:ae:c8:8b:e5:bb:c9:db:
         d6:a3:df:60:ac:7a:43:93:5d:27:ec:4f:e8:b7:83:9d:5e:1c:
         18:c0:6d:82:e8:d8:51:dd:95:23:ee:71:43:47:6c:21:96:86:
         86:36:de:35:4c:ff:f9:91:19:40:fd:53:8c:ed:72:ac:44:4d:
         d1:d0:0a:ec:20:40:79:af:67:1b:73:e5:3b:29:b1:3d:35:48:
         73:01:c3:6b:f7:14:49:8a:d5:8a:61:e3:ad:32:62:6d:46:59:
         0d:14:11:57:0d:71:b9:d5:e0:f3:8b:67:d3:90:8c:cc:75:a7:
         4d:57:fb:b1:1d:bf:40:34:ad:f3:98:fc:e7:bf:d2:92:b3:b8:
         b3:86:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:53:33 2025 by rpki-client