Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
File:                     P4zuwyrakEaTvUAO9yxqKMfih0g.mft (raw, json)
Hash identifier:          tCAb3Kt7/B8gjoHhZXoXHLVCpPJuuMeHzwyhUXT81HM=
Subject key identifier:   8F:CC:0E:08:10:DD:2D:23:07:76:81:80:E9:9D:EA:79:2B:F2:A0:F8
Authority key identifier: 3F:8C:EE:C3:2A:DA:90:46:93:BD:40:0E:F7:2C:6A:28:C7:E2:87:48
Certificate issuer:       /CN=F36F550DAF/serialNumber=3F8CEEC32ADA904693BD400EF72C6A28C7E28748
Certificate serial:       64
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P4zuwyrakEaTvUAO9yxqKMfih0g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
Manifest number:          64
Signing time:             Sun 11 May 2025 05:10:38 +0000
Manifest this update:     Sun 11 May 2025 05:10:37 +0000
Manifest next update:     Tue 13 May 2025 05:10:37 +0000
Files and hashes:         1: P4zuwyrakEaTvUAO9yxqKMfih0g.crl (hash: ZkYtQE1lgYFy9KdVIfI0/YcujIcPvGQTa7ZSXBQSC5w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P4zuwyrakEaTvUAO9yxqKMfih0g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F550DAF, serialNumber=3F8CEEC32ADA904693BD400EF72C6A28C7E28748
        Validity
            Not Before: May 11 05:10:37 2025 GMT
            Not After : May 13 05:10:37 2025 GMT
        Subject: CN=6820314e-00f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:e7:91:1b:12:6b:05:05:29:d2:37:a4:bd:
                    e6:5f:7b:63:2b:4d:13:0d:25:a8:84:9d:76:60:8b:
                    21:ee:62:6b:0e:9b:d4:0c:c9:97:fb:7b:1f:a9:ab:
                    89:8c:4e:12:e5:b7:c9:a9:c3:4e:f6:d1:4c:2b:e4:
                    ed:8a:6b:ee:32:ee:bd:e9:eb:c4:a5:9c:eb:5c:05:
                    53:ec:ee:7d:f5:54:01:7f:d2:d1:c5:7e:ec:bf:99:
                    9c:9a:68:8a:2a:e3:69:fa:de:7f:ae:79:ee:91:79:
                    f0:fc:78:0e:f2:ea:31:d9:91:4b:5f:92:9a:44:59:
                    4c:6c:3b:93:a6:8c:c7:69:d6:00:22:8a:cc:54:17:
                    cb:0a:64:bf:03:96:ae:5a:68:49:96:ca:0b:94:05:
                    f4:7a:b7:3a:b8:5b:03:ce:d2:80:39:75:cd:12:b1:
                    f2:4a:e7:01:61:9d:6a:c6:bb:77:74:0a:77:80:55:
                    69:16:ec:69:4d:ca:fb:91:0a:d5:cf:d4:f5:ad:79:
                    63:d8:d4:a6:ef:b5:d9:3a:fb:10:d9:c4:cb:59:69:
                    73:3b:1c:76:f9:72:b5:13:29:7a:b9:c4:44:76:01:
                    51:70:56:af:be:18:49:9a:63:21:d2:9b:72:45:eb:
                    f0:b2:63:75:5f:af:27:a1:80:f9:87:6f:ff:a6:ab:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CC:0E:08:10:DD:2D:23:07:76:81:80:E9:9D:EA:79:2B:F2:A0:F8
            X509v3 Authority Key Identifier:
                keyid:3F:8C:EE:C3:2A:DA:90:46:93:BD:40:0E:F7:2C:6A:28:C7:E2:87:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P4zuwyrakEaTvUAO9yxqKMfih0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:59:f5:3f:4d:3b:2d:74:7a:40:2f:56:86:d0:3c:6f:0c:d9:
         5d:fa:ac:08:28:d1:ba:7d:33:2f:c9:8c:bb:81:9a:3e:2b:1b:
         7d:e5:d6:2b:97:47:f8:40:09:39:24:5d:21:88:10:88:ef:36:
         6e:32:a6:3b:4c:b6:22:28:d0:a4:0a:6b:cc:8b:af:10:3a:75:
         2a:91:b2:ee:41:78:23:53:cf:17:00:5e:74:10:fd:e7:8c:15:
         e6:0a:c4:e5:e1:c0:64:a7:fd:9a:57:82:eb:94:d3:67:18:03:
         c6:9e:d3:12:67:94:2f:e3:7a:bf:f5:3c:0a:68:3d:7d:75:85:
         77:cd:9b:14:60:be:3c:5a:27:80:e5:6c:18:e9:19:63:f6:a8:
         e1:d0:8e:00:dd:36:0e:d8:32:4d:9a:ed:02:d0:7a:65:30:12:
         11:cf:cf:75:af:54:46:ff:00:0b:fe:39:a1:04:07:c1:72:9b:
         a7:8c:14:2a:a7:a5:5c:7f:b5:72:fd:da:47:f3:f6:15:e4:22:
         69:e4:07:fb:72:d6:23:76:16:e7:ee:2c:c2:ad:66:f9:df:f2:
         f4:13:44:15:18:91:1b:9c:d7:6e:ac:ad:c4:11:f3:42:92:08:
         f3:2e:04:ac:36:07:96:58:2f:bf:81:09:61:c6:4f:0d:7b:7e:
         7c:2d:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:50:05 2025 by rpki-client