Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File:                     xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier:          rvCOn0Y2VnkCYujukz8a1IfMn3ooZupKYC96qHNttGU=
Subject key identifier:   90:B4:0E:05:1D:1A:45:A9:E6:B2:79:7B:DA:81:09:09:C6:D5:95:50
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer:       /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial:       046B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number:          046B
Signing time:             Mon 12 May 2025 02:55:10 +0000
Manifest this update:     Mon 12 May 2025 02:55:09 +0000
Manifest next update:     Wed 14 May 2025 02:55:09 +0000
Files and hashes:         1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: BWpD97LYgFB9p27QKEPl4WcJEN6mQtzezjJ1/j+21oQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB1A3AF, serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
        Validity
            Not Before: May 12 02:55:09 2025 GMT
            Not After : May 14 02:55:09 2025 GMT
        Subject: CN=6821630e-6972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bb:c5:04:9c:45:c0:31:92:c0:95:5f:77:5e:
                    22:bc:06:40:8f:4d:5d:b6:6b:28:63:21:d1:40:bf:
                    1f:ae:27:9b:ec:ef:4e:f9:b3:e8:04:ef:51:db:f2:
                    32:0b:e0:aa:ff:e6:9a:e8:fc:91:46:a2:c5:30:03:
                    24:1f:71:10:29:4a:7f:2e:df:e7:ee:3f:23:2d:8c:
                    cf:75:ae:0b:e0:9a:e0:33:39:f8:93:ff:47:af:43:
                    fa:a2:b3:95:e8:fc:11:f4:34:c0:1d:6d:4d:73:39:
                    84:07:51:63:9f:f8:9c:69:13:10:ed:7a:b7:38:8c:
                    27:01:b6:f5:bd:62:02:07:61:c7:e8:a8:99:b1:7b:
                    cd:ab:7b:f8:8d:26:7f:c1:5e:09:a6:31:85:e6:4a:
                    f7:31:58:c5:a4:14:5d:83:b9:fd:f1:b5:f8:a6:f5:
                    c9:28:58:1b:67:c8:81:9b:d0:ec:be:59:c0:b5:81:
                    ff:6b:0a:9f:b1:f9:d0:04:e8:8b:b3:33:38:22:08:
                    13:66:42:17:6c:eb:35:8e:40:97:1c:c4:2a:8a:8e:
                    3a:30:9b:88:42:24:9d:e9:44:63:ce:a1:38:ae:0d:
                    82:dd:16:6a:bb:b8:aa:16:77:b2:a0:7b:9a:c0:a1:
                    a2:62:8c:6b:26:5a:16:f4:6b:0b:a6:53:09:5a:5f:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B4:0E:05:1D:1A:45:A9:E6:B2:79:7B:DA:81:09:09:C6:D5:95:50
            X509v3 Authority Key Identifier:
                keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:dc:87:3c:44:c9:70:11:bf:bb:9d:75:45:5e:f1:7e:52:64:
         c9:47:d8:2f:95:e8:a2:a1:4f:c2:ca:b2:44:e7:03:d9:a1:81:
         97:27:ae:73:a6:a4:f7:98:ab:6d:51:32:51:dc:77:c9:7c:65:
         86:fb:2e:1d:a7:92:bd:4c:ab:a5:79:bd:25:36:27:e2:03:e9:
         d3:fe:0c:4f:1d:31:41:2f:14:5f:b4:74:fe:26:e9:8d:24:7b:
         a5:03:8b:92:20:f8:2d:c1:3e:8e:cf:e5:89:bb:19:76:bd:2b:
         a7:75:7c:85:8a:8e:81:06:60:c5:93:2a:c0:64:46:58:f8:d1:
         86:45:b0:25:d9:2e:69:41:2a:a7:be:7e:f3:f4:63:94:a5:83:
         d4:ff:3f:4c:5b:4d:19:71:df:fc:b0:ce:d8:71:4d:a9:63:0b:
         ab:b2:52:44:12:c5:cb:44:a3:80:fd:ee:e0:a0:e6:77:12:1d:
         4a:7c:f9:2b:ba:c7:6f:a4:a9:db:d3:32:db:3c:3c:a4:94:cf:
         b7:1a:2b:8b:ac:63:a2:52:78:66:3f:bf:54:43:93:b3:40:50:
         93:4d:a9:23:6f:b4:02:f9:c3:11:18:34:9b:ea:ae:a1:7e:29:
         51:f9:6f:b2:4c:80:f4:e5:52:81:12:8f:14:0b:d0:47:4e:5f:
         3f:f8:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:19:54 2025 by rpki-client