Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
File:                     vuhQJeKvFdQRCrom9RsNdAV9rss.mft (raw, json)
Hash identifier:          sPOjZlQz+cDXvIzoABWBi8N2RjMqyU/TMruSx7W2Qvc=
Subject key identifier:   B5:94:10:75:71:5D:C0:A9:7F:07:FA:00:12:87:A7:9F:87:C2:7E:44
Authority key identifier: BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB
Certificate issuer:       /CN=F3617D8EAF/serialNumber=BEE85025E2AF15D4110ABA26F51B0D74057DAECB
Certificate serial:       02E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
Manifest number:          02E2
Signing time:             Thu 03 Apr 2025 02:27:56 +0000
Manifest this update:     Thu 03 Apr 2025 02:27:56 +0000
Manifest next update:     Sat 05 Apr 2025 02:27:56 +0000
Files and hashes:         1: vuhQJeKvFdQRCrom9RsNdAV9rss.crl (hash: pVXuR5MjHRBVmAOsdtL3LstxwniUJ0Z/YB3l2JIz8S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617D8EAF
        Validity
            Not Before: Apr  3 02:27:56 2025 GMT
            Not After : Apr  5 02:27:56 2025 GMT
        Subject: CN=67edf22c-56a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:93:e5:2c:bb:71:89:79:db:4c:83:f9:79:
                    60:30:a6:6d:da:8b:2b:e0:30:cb:e8:ba:17:4b:fc:
                    52:c9:5f:53:23:ae:22:f4:93:de:95:88:a5:e8:14:
                    f7:f5:8c:f5:fd:a9:a6:76:ea:95:d0:8b:cb:dc:10:
                    36:01:58:8d:57:75:2a:2b:ae:fc:57:40:a3:17:4f:
                    9d:ed:3e:63:98:94:ab:1c:e2:8f:e8:0f:2a:34:39:
                    85:33:21:11:27:49:27:1e:0a:af:92:4e:4e:30:1b:
                    06:51:22:57:9a:31:42:41:6f:ff:0c:aa:65:28:07:
                    3b:0b:48:4d:03:51:d1:7a:d7:a1:5b:42:5d:08:8e:
                    26:24:f5:7a:65:f3:3f:b5:3b:c8:14:54:f2:2a:7a:
                    ba:bd:f3:34:1b:e5:6d:51:c7:cf:0e:71:da:b4:5f:
                    ae:27:0c:82:40:30:02:dc:0c:4e:e4:7f:fc:cf:bd:
                    e3:17:bd:18:8c:a3:0a:92:fc:b0:9c:d6:5b:15:55:
                    4b:e7:03:91:a1:24:e6:e9:02:82:52:29:a6:8b:e1:
                    a3:07:d0:99:15:f7:6a:e8:94:3f:57:55:99:68:0d:
                    3e:4c:e7:2d:b7:29:d8:28:cb:ea:79:23:be:a6:10:
                    88:41:1c:e8:04:94:14:84:30:8e:fb:09:96:92:6e:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:94:10:75:71:5D:C0:A9:7F:07:FA:00:12:87:A7:9F:87:C2:7E:44
            X509v3 Authority Key Identifier:
                keyid:BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:00:23:84:c9:66:56:59:1a:a9:03:71:53:f6:37:9d:7d:e3:
         73:c4:75:b3:5c:97:39:3e:49:04:54:cd:5c:f3:09:bd:a5:71:
         8d:3b:ba:28:84:9e:e4:56:11:1d:08:a0:10:c9:1b:5f:34:6f:
         d9:db:b1:3b:38:5a:7a:e3:ba:d9:9c:ac:f0:50:2e:74:2f:a8:
         fb:3e:55:fd:89:c5:12:cc:7e:c7:d5:61:9e:ba:2d:b6:99:1d:
         0e:91:23:02:a0:d5:ca:d1:2b:58:c5:a5:e8:b7:35:40:e0:66:
         c9:26:66:eb:38:58:ce:e8:1e:79:4b:98:fa:1c:cf:df:7d:e7:
         95:d3:d7:6f:23:1f:72:f8:53:55:dd:38:8b:42:bb:bf:fe:b5:
         bc:69:ad:e6:4e:52:57:55:5f:c1:07:f9:35:74:58:71:28:b2:
         f4:57:2c:87:70:81:21:2a:98:e7:8f:d9:cf:72:65:c6:71:c3:
         36:94:68:34:15:c4:9b:57:66:29:67:01:5d:14:58:01:e6:bb:
         75:81:9d:aa:df:e5:14:8b:63:34:36:16:ab:dc:3b:fe:56:e2:
         05:ba:a7:7f:2e:83:ce:00:9e:75:7b:89:0e:c3:02:c9:bd:fe:
         e4:18:d2:fe:41:ff:53:78:85:b1:8d:30:62:09:73:a6:69:9d:
         c9:41:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:09:26 2025 by rpki-client