Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
File:                     Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft (raw, json)
Hash identifier:          FPJ2rgPLFd3WqlSy9Fxetef+fMz1FOIMJAEx8CyBs+0=
Subject key identifier:   B5:FF:F0:0D:E8:B8:D6:74:29:DA:E5:9F:03:21:C5:24:0A:F5:1C:A7
Authority key identifier: 0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE
Certificate issuer:       /CN=F36F8434AF/serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
Certificate serial:       01B1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
Manifest number:          01B1
Signing time:             Wed 07 May 2025 04:26:44 +0000
Manifest this update:     Wed 07 May 2025 04:26:43 +0000
Manifest next update:     Fri 09 May 2025 04:26:43 +0000
Files and hashes:         1: Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl (hash: Ou6e9iKPmZD0DH+A0mJ+EEmD3rEGAbh7nZuQjNwYrLE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 May 2025 00:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8434AF, serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
        Validity
            Not Before: May  7 04:26:43 2025 GMT
            Not After : May  9 04:26:43 2025 GMT
        Subject: CN=681ae104-c20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:dc:d8:51:38:da:27:b4:e3:3f:83:52:02:
                    e0:02:25:37:ee:80:25:16:a7:a2:98:df:71:36:9e:
                    a5:a1:81:e3:9e:4b:d5:43:a1:c3:0f:55:4a:60:f4:
                    cf:6f:70:8c:6e:ba:5a:b0:15:a9:1e:d3:5d:2c:63:
                    82:75:27:7f:c8:75:20:4d:c1:aa:66:77:0c:59:fd:
                    a8:f5:ce:bc:5d:03:91:93:fe:3e:23:5d:be:81:78:
                    3d:bb:ac:8e:0c:22:23:03:68:92:e1:c5:d8:ce:ab:
                    45:7f:22:33:41:a2:29:79:87:96:f4:0b:fb:8d:29:
                    0f:25:e2:cb:61:ba:9c:73:07:3a:0c:c9:55:eb:e0:
                    75:b1:02:a9:cb:5a:01:15:e1:70:fe:12:1b:c6:6b:
                    73:c5:59:cd:e3:30:20:13:91:98:80:d7:8c:9f:c6:
                    55:ac:ea:a3:fd:16:a1:28:7f:54:45:a1:bf:af:25:
                    66:7f:fa:8e:f4:2c:b7:16:88:f8:90:70:1f:e1:20:
                    7f:c1:c0:5a:bc:9d:53:f8:f0:f5:e2:fb:73:01:b7:
                    0b:d6:b1:99:77:68:c4:27:0f:4f:d8:22:3d:6e:12:
                    4e:b7:b8:b7:7e:c0:a9:81:a9:20:15:88:de:4d:1d:
                    ed:3e:1b:5d:4c:6f:c9:26:7b:5b:fc:1c:71:1f:e3:
                    2f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FF:F0:0D:E8:B8:D6:74:29:DA:E5:9F:03:21:C5:24:0A:F5:1C:A7
            X509v3 Authority Key Identifier:
                keyid:0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:12:c1:8b:42:05:f0:90:e3:f0:88:a0:08:6c:2e:d8:9f:52:
         5b:eb:8f:6f:06:73:5c:95:79:4d:c4:19:26:33:fa:c4:dd:c5:
         20:5f:c4:fe:e8:97:41:12:49:e9:f0:23:bf:d8:3e:84:b6:c4:
         8c:de:dc:c5:cb:87:1d:d5:aa:6f:a4:0c:1e:3e:07:e5:21:78:
         77:f0:2f:a6:43:00:dd:7c:34:95:3a:4e:4e:8b:32:21:27:05:
         68:51:78:56:81:da:3d:30:c4:94:31:9f:2f:51:83:8c:89:0a:
         9b:37:2a:81:2c:c4:c6:66:8d:bd:3e:0c:2d:e6:e3:6e:3b:a3:
         4b:62:1b:a6:a5:a8:cb:aa:92:50:0d:d1:ad:b3:27:af:0b:4b:
         9c:04:47:0b:b8:77:49:6d:fa:63:50:b3:44:6f:63:20:f5:52:
         57:b5:a3:8c:cd:1d:29:26:2b:e7:81:9e:4c:95:36:bc:a8:d4:
         39:b9:71:38:69:3e:86:1d:5b:21:b8:bf:29:8a:74:4c:df:a2:
         44:39:32:ed:a5:f4:51:c9:d3:73:a4:d7:c9:41:d9:52:d5:9a:
         cb:9b:9f:fd:3f:54:12:28:1f:76:57:04:4e:83:31:8a:12:c7:
         bd:cc:a7:8c:8f:48:55:7b:36:7f:f3:47:63:f8:4c:f1:4a:11:
         b8:e1:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:12:37 2025 by rpki-client