Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File:                     xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier:          JvE8xZkClu7X3IqrQeym4pClLS5D/kb7OZbkKkGUs+k=
Subject key identifier:   62:43:4D:58:41:FD:70:9F:ED:3A:79:3E:66:BD:95:0A:A9:04:7C:10
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer:       /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial:       049F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number:          049F
Signing time:             Wed 02 Jul 2025 02:54:52 +0000
Manifest this update:     Wed 02 Jul 2025 02:54:51 +0000
Manifest next update:     Fri 04 Jul 2025 02:54:51 +0000
Files and hashes:         1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: 8UxKZZszmmeTrrqtAbtKhGObUb8u1QuYMUVqLRxQiSc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 02:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB1A3AF, serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
        Validity
            Not Before: Jul  2 02:54:51 2025 GMT
            Not After : Jul  4 02:54:51 2025 GMT
        Subject: CN=68649f7c-f565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:37:17:fe:7f:76:50:d5:10:fb:24:01:ef:c1:
                    04:bf:78:54:21:93:37:52:30:b7:0e:82:eb:d0:cc:
                    52:e4:47:60:28:2f:12:07:29:2d:70:58:a5:01:35:
                    1f:dd:40:15:c1:99:64:54:07:32:5b:49:32:c2:be:
                    a9:d1:bf:db:a6:90:40:9e:49:c8:b7:3e:41:73:2c:
                    35:94:ab:5c:8c:b5:08:de:63:b0:26:48:09:c1:0d:
                    d4:62:a0:21:00:7d:e1:40:c2:b7:3f:04:63:1a:8a:
                    be:63:26:83:83:06:d3:30:c2:3a:9e:06:b1:7c:da:
                    a4:b7:0a:e8:8f:18:b5:df:cf:cc:0e:30:22:ee:e1:
                    0a:18:d4:27:24:d4:43:82:67:a2:2f:f4:2b:9b:3f:
                    8c:78:e7:75:6a:b6:25:cc:41:32:e2:26:b1:76:70:
                    2e:99:11:2d:91:15:2c:91:cf:32:26:2e:a7:df:d3:
                    31:b6:4d:c5:43:40:9a:05:60:04:5c:4a:f0:7a:5e:
                    8c:83:15:66:48:a3:cd:52:f8:e0:d9:52:5b:21:bf:
                    91:dc:1b:f9:87:56:48:74:b7:d9:60:34:06:ac:f8:
                    9f:3c:5a:a6:70:7c:cc:ba:91:8c:17:16:fc:c0:55:
                    ec:6d:58:af:28:79:52:3f:42:b9:8a:a3:8a:45:35:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:43:4D:58:41:FD:70:9F:ED:3A:79:3E:66:BD:95:0A:A9:04:7C:10
            X509v3 Authority Key Identifier:
                keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:71:5a:60:86:cd:2a:35:3f:24:c5:31:36:fd:d6:60:94:
         af:8b:1c:b4:a6:71:45:99:75:07:2b:70:a2:86:05:6e:6a:83:
         6e:95:00:ee:b6:35:57:d9:0e:ff:07:63:75:a0:10:68:34:2f:
         bd:89:60:f0:4a:ac:2c:80:0e:59:ba:fc:7c:14:8d:07:50:8f:
         19:89:24:1c:89:1d:fd:07:f7:4a:e4:08:2d:e4:3b:0d:ba:02:
         1a:91:cc:35:91:83:9a:7e:dc:60:d2:f7:92:29:11:d4:46:a5:
         bf:2e:de:e9:f8:9f:09:49:46:68:73:16:29:b0:92:2f:a0:00:
         9a:31:29:97:f5:b4:1d:76:e3:f9:de:17:a6:a7:f2:ab:4f:8a:
         ae:83:81:23:a7:1e:89:8b:f0:c1:35:c3:dd:63:5c:ec:c0:07:
         33:56:41:24:0f:bf:2a:63:03:86:0f:dc:a2:e6:b4:25:88:f4:
         4b:dc:d8:8c:d7:8a:ab:d2:5e:a3:de:22:a3:08:32:f8:23:b8:
         47:b7:e9:30:31:5f:8b:29:9b:f9:cb:b2:b3:fd:14:cb:eb:e1:
         4f:41:4c:9c:b2:a0:d0:67:46:52:56:c7:4d:fe:8e:2b:ab:f4:
         64:37:0f:7b:71:52:f9:95:1e:26:cc:21:aa:7d:15:c0:ae:df:
         ff:06:07:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:20:13 2025 by rpki-client