Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File:                     LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier:          3AIWhyK9ItSxxlPfxJhJpgGFBLAGE/02M/0JNswEkcw=
Subject key identifier:   01:78:4A:A5:61:57:A6:1C:1F:FD:D1:61:7E:E7:1D:8B:83:7E:7F:1E
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer:       /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial:       05BD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number:          05BD
Signing time:             Sat 07 Jun 2025 02:26:42 +0000
Manifest this update:     Sat 07 Jun 2025 02:26:41 +0000
Manifest next update:     Mon 09 Jun 2025 02:26:41 +0000
Files and hashes:         1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: QV0dtAZ7PFeTSbY2BiBl0JkWMtdpcsn8dZpz2oNDu9o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 02:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
        Validity
            Not Before: Jun  7 02:26:41 2025 GMT
            Not After : Jun  9 02:26:41 2025 GMT
        Subject: CN=6843a362-b753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:bc:b2:b2:61:5d:26:11:38:4e:bc:ba:e3:
                    be:3b:6f:c0:e1:03:05:cf:7a:4d:0c:5e:db:f3:49:
                    55:ad:93:37:8f:cb:50:8a:7a:31:b6:c2:b5:1b:13:
                    82:cb:6b:51:4b:4b:a3:43:76:10:83:80:f8:97:4e:
                    a3:3a:28:85:98:e5:de:11:a6:bb:e6:78:e2:ab:04:
                    51:dd:fa:ac:66:73:1e:73:68:a2:0d:c3:2b:2a:b1:
                    8f:33:9e:d3:d6:ab:3b:0d:6b:c2:93:2f:16:9b:da:
                    bf:5f:07:38:6c:49:3b:d3:cc:a1:a3:69:f7:b2:34:
                    cc:8d:8a:3f:b2:f1:1e:03:07:a9:95:ed:8f:60:09:
                    27:a6:55:83:fb:ea:0c:22:a1:e9:f7:d7:3c:ac:11:
                    58:b9:d8:1c:a4:5f:60:53:f6:e0:32:96:cd:76:e0:
                    0c:00:57:8a:3e:3e:fd:72:9d:24:0a:95:75:aa:4e:
                    ae:88:70:4c:63:47:52:23:d7:84:2f:54:a6:ee:a1:
                    b3:90:48:cf:82:9c:b9:27:1d:56:2e:56:7f:49:8f:
                    a6:d8:2c:a8:df:a1:ee:ce:15:d3:d3:74:27:31:2a:
                    0c:68:68:7f:cb:51:ca:fc:8d:50:01:a1:2f:22:70:
                    a5:8d:77:d7:d4:d5:ea:4a:85:a9:38:72:cc:cf:00:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:78:4A:A5:61:57:A6:1C:1F:FD:D1:61:7E:E7:1D:8B:83:7E:7F:1E
            X509v3 Authority Key Identifier:
                keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:89:56:e0:6a:db:ed:c6:e9:81:c1:e4:ad:7a:8e:5e:ba:7f:
         8d:41:76:ae:45:9b:c3:b1:c2:0f:0a:c0:8b:b3:ed:1b:95:4c:
         f9:de:f7:37:47:f1:6a:2d:83:59:98:19:9d:e2:ca:b1:9b:a0:
         c8:c9:40:a4:5a:3c:2c:42:59:38:d6:1e:5b:cc:03:28:3f:f7:
         6d:db:04:49:8e:67:7f:2e:76:ab:b2:bc:42:b2:09:57:b0:8f:
         41:b5:19:d5:72:74:1d:a9:16:a0:c9:6c:6b:40:54:af:3e:49:
         87:15:23:36:f7:71:99:ed:82:93:48:9a:c6:d4:c0:7f:77:3b:
         e5:86:f5:55:98:6d:c4:01:96:3e:6e:cd:e0:0e:78:bd:64:6c:
         6b:3c:53:45:48:9f:0f:a9:8a:cc:d5:f8:b6:6d:01:f6:b0:37:
         e1:60:61:12:21:8d:81:84:09:f2:e5:a9:91:d5:a4:c8:fd:94:
         f2:60:ab:4b:6f:ac:73:81:95:5d:ec:1c:f7:fb:df:e5:1b:c6:
         70:0d:0e:a2:67:75:d9:7d:43:cf:01:72:64:cf:58:11:76:89:
         e1:98:3e:04:46:3a:93:30:03:86:19:f8:4c:37:26:16:92:20:
         b1:3d:7d:48:a8:f4:5f:d9:93:c0:71:47:cc:b4:85:ca:59:ec:
         c4:24:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:13:05 2025 by rpki-client