Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File:                     NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier:          Q7FFcpUBHTPzTQAgJZB90BOZ8a4PpkWl9dbM8OI04XI=
Subject key identifier:   04:D9:A4:CD:32:71:55:D7:DC:AD:0C:E5:A6:E2:5C:A3:B7:C6:42:63
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer:       /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial:       06E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number:          06E1
Signing time:             Tue 01 Jul 2025 02:03:53 +0000
Manifest this update:     Tue 01 Jul 2025 02:03:52 +0000
Manifest next update:     Thu 03 Jul 2025 02:03:52 +0000
Files and hashes:         1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: 81GEwXgYd9JE8y8kko0Y+05jnlR9D610+eqpGmueczI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 02:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764 (0x6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6DD4AF, serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Validity
            Not Before: Jul  1 02:03:52 2025 GMT
            Not After : Jul  3 02:03:52 2025 GMT
        Subject: CN=68634209-e442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bc:cd:3f:7f:1b:43:40:28:67:28:cd:d3:51:
                    e9:05:46:c8:55:7e:a0:92:c3:d1:ec:ff:80:f8:16:
                    86:a1:24:d5:c8:74:6e:bf:ed:c1:b4:6b:1f:d8:d9:
                    02:cd:25:bc:ce:c7:72:b9:81:eb:2c:f0:5b:40:3e:
                    86:46:56:ed:6b:6b:1c:46:92:8a:10:ad:b0:9a:7e:
                    d5:14:7d:a2:ee:62:93:d3:1a:0c:16:b1:56:8d:ef:
                    5c:ef:48:a8:45:5d:8a:eb:4d:fa:9b:37:19:8c:9e:
                    c7:d6:2b:a7:30:cb:9a:2b:63:02:05:e4:9b:fd:2f:
                    45:dd:e7:ef:f1:16:19:a3:e7:05:16:8a:32:f5:f8:
                    3b:25:b8:eb:65:a3:80:e9:4d:84:16:67:26:ef:b6:
                    e7:2b:26:97:ca:8b:28:ba:16:7d:78:c6:c1:b8:88:
                    3e:57:a4:e4:03:2e:f8:0f:82:89:b4:f7:82:33:0f:
                    69:5b:70:35:c5:3c:93:b8:96:f8:45:e2:b6:b4:98:
                    58:5a:4e:68:c4:52:87:1e:30:00:99:b1:f6:8f:98:
                    f2:2c:ca:d2:6b:1b:ff:15:21:89:f6:65:72:59:b8:
                    0a:7e:57:2e:d7:50:1e:12:29:66:de:3c:7c:25:a1:
                    91:2a:89:e1:4d:ea:b4:45:74:d6:b7:b1:64:62:f2:
                    be:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D9:A4:CD:32:71:55:D7:DC:AD:0C:E5:A6:E2:5C:A3:B7:C6:42:63
            X509v3 Authority Key Identifier:
                keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7d:34:5b:cf:88:71:49:66:20:43:08:2e:ab:6d:20:6a:91:
         0a:af:87:7a:cd:33:45:63:05:e1:fe:44:d0:5b:fd:a2:26:8b:
         d7:f4:f1:eb:e2:d1:c3:f8:b8:0d:af:23:35:78:05:e8:79:2b:
         fb:60:30:31:56:8b:e0:0a:f6:9e:ec:a2:f0:f9:3f:a9:ea:9a:
         07:4b:7a:6e:ee:d2:71:d3:a6:0e:21:80:09:e1:a4:3f:04:48:
         4e:d9:41:e3:8b:9f:b5:a7:61:69:8a:e4:c2:89:38:f4:7c:86:
         5b:7f:35:e1:17:17:10:af:73:90:1e:b3:72:4e:d5:ee:77:1b:
         fd:79:19:2c:0b:9c:34:73:a7:a1:74:89:48:46:a8:4c:8b:e6:
         e1:4d:d4:dd:24:c8:bc:36:42:39:ec:45:cc:d7:0e:91:2a:b3:
         64:6a:13:94:2d:c9:55:fd:a6:34:d4:6c:b8:f5:8f:0c:17:76:
         09:84:37:a7:88:fc:fc:dc:88:74:a9:77:ea:93:33:68:81:cb:
         cb:46:cf:f4:10:53:b0:33:41:c1:d1:dc:96:39:df:5d:4c:6e:
         12:e4:6f:a9:49:28:d3:4f:85:cc:87:08:d9:63:6e:14:25:4d:
         91:5d:d2:2e:27:82:f3:b2:b2:32:d4:4f:2a:55:35:32:04:d5:
         4b:6b:18:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:41:43 2025 by rpki-client