Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
File:                     0mlPWs5d97eiscdbRLGLWndoOGg.mft (raw, json)
Hash identifier:          h7rkZrCUghsM9J9VLrjZIY+h2uij6PXdomaaxxpvVUs=
Subject key identifier:   90:66:EE:C9:7D:35:90:40:B5:0C:A4:A3:7D:AB:3D:7A:E3:FD:C7:9F
Authority key identifier: D2:69:4F:5A:CE:5D:F7:B7:A2:B1:C7:5B:44:B1:8B:5A:77:68:38:68
Certificate issuer:       /CN=F36C5814AF/serialNumber=D2694F5ACE5DF7B7A2B1C75B44B18B5A77683868
Certificate serial:       0C74
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
Manifest number:          0C6F
Signing time:             Sat 10 May 2025 01:08:06 +0000
Manifest this update:     Sat 10 May 2025 01:08:06 +0000
Manifest next update:     Mon 12 May 2025 01:08:06 +0000
Files and hashes:         1: 0mlPWs5d97eiscdbRLGLWndoOGg.crl (hash: MRcVPWVjOlcmTUsGC0gGd4QG8/j2ff6gaF99NHBXZz0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3188 (0xc74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5814AF, serialNumber=D2694F5ACE5DF7B7A2B1C75B44B18B5A77683868
        Validity
            Not Before: May 10 01:08:06 2025 GMT
            Not After : May 12 01:08:06 2025 GMT
        Subject: CN=681ea6f6-f2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:c5:71:b9:b0:0b:46:f5:26:e7:df:2b:e6:
                    26:96:93:3f:a7:2a:28:5a:81:a3:ec:61:20:ed:62:
                    32:15:15:81:8d:42:af:82:6d:35:e0:77:d7:d1:22:
                    8d:10:a0:d9:51:bd:9f:8d:82:86:a9:41:0c:16:d5:
                    ef:6a:82:cb:43:05:a7:52:01:10:9f:a7:d9:c6:b5:
                    c6:6b:aa:d9:59:10:88:b2:50:15:bc:c5:61:94:26:
                    fd:7e:fb:e9:0f:01:53:23:c5:2a:b7:35:54:6b:cb:
                    f1:bf:81:fd:9e:b9:50:85:aa:a3:55:ee:37:f2:77:
                    8c:78:de:94:01:5c:ea:ec:f3:96:dd:5d:a8:4c:d1:
                    56:bf:fd:ea:36:3f:15:4e:ca:77:32:55:be:ba:34:
                    d5:bc:d7:aa:f8:be:e6:53:a1:98:9f:69:5d:55:29:
                    bd:d1:e7:aa:e2:91:96:9d:2b:7a:21:ba:c8:67:6b:
                    24:a7:b0:33:51:b4:2e:e3:6c:59:9e:9f:e0:23:1a:
                    36:ab:6c:f1:41:65:9c:f4:70:57:82:41:27:7d:27:
                    0e:3e:ef:54:bd:53:49:36:56:bb:a2:df:3e:8f:9a:
                    99:84:73:3f:d6:f0:f1:09:40:07:fd:68:30:df:da:
                    75:23:ac:3f:c4:77:f5:94:6f:57:e8:ba:66:69:95:
                    71:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:66:EE:C9:7D:35:90:40:B5:0C:A4:A3:7D:AB:3D:7A:E3:FD:C7:9F
            X509v3 Authority Key Identifier:
                keyid:D2:69:4F:5A:CE:5D:F7:B7:A2:B1:C7:5B:44:B1:8B:5A:77:68:38:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ed:98:00:09:31:45:cf:f7:73:a5:56:25:08:1c:5e:28:ff:
         44:2b:ae:1e:7d:b8:0d:e3:27:f6:89:44:3a:bd:fa:4e:ff:18:
         3c:f1:14:5e:42:75:a4:e4:66:95:5d:f0:75:31:2f:0a:da:33:
         5e:12:ab:28:b0:5f:6c:66:6b:1b:5b:76:af:bf:33:81:b8:b3:
         e9:43:6b:2b:32:ea:db:13:03:15:36:4e:9f:4a:92:ca:36:0d:
         4a:05:a2:80:0c:19:b9:5e:fa:e9:d3:51:0d:af:98:be:94:fe:
         08:e2:f4:ae:9e:17:64:05:e2:56:ee:0f:f7:f9:f7:fc:35:f2:
         6d:cc:e4:62:2d:b7:2c:4a:e4:99:09:01:3a:6b:a7:46:28:80:
         1b:bb:3f:db:79:20:ed:7a:8a:dd:02:b3:1a:a0:90:b2:64:47:
         db:23:93:19:50:74:b8:2e:65:d8:9f:c0:a9:eb:19:c8:e9:24:
         88:92:80:9a:0e:e7:37:89:63:62:8e:a4:f8:ba:5d:5b:04:88:
         0e:e9:1d:2a:f2:3d:01:21:e6:fc:b8:70:a9:0e:19:88:e2:c8:
         88:43:cd:99:39:fb:9c:8d:73:fe:f4:f4:ba:0b:67:b4:ac:bd:
         8d:96:a7:b4:f4:70:bb:80:5d:d5:a6:19:a7:5e:de:65:19:95:
         b7:8f:36:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:48:12 2025 by rpki-client