Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
File:                     GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft (raw, json)
Hash identifier:          Bh6MV/3zVdEWxsSsPxKJ2sozIwDMuFcJxXefK8cjcSo=
Subject key identifier:   0B:61:FD:2B:72:59:4A:47:A8:96:16:70:CB:A1:EC:3B:50:98:31:74
Authority key identifier: 18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
Certificate issuer:       /CN=F361E99DAF/serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
Certificate serial:       0617
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
Manifest number:          0615
Signing time:             Thu 03 Apr 2025 01:34:23 +0000
Manifest this update:     Thu 03 Apr 2025 01:34:23 +0000
Manifest next update:     Sat 05 Apr 2025 01:34:23 +0000
Files and hashes:         1: GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl (hash: KYppbMOv0y/P/H6vYq6TeMQ/gVdqRVN+3VXMH8HMa8I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E99DAF
        Validity
            Not Before: Apr  3 01:34:23 2025 GMT
            Not After : Apr  5 01:34:23 2025 GMT
        Subject: CN=67ede59f-a045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:4b:96:8a:42:05:06:fd:f2:a1:e7:f2:49:
                    2b:ef:e7:a0:b1:33:be:ad:bb:d9:fc:a7:f8:a6:36:
                    b3:2c:74:29:2c:26:be:2a:77:2b:7d:a5:90:94:c5:
                    aa:76:28:78:3e:e8:4f:42:4c:6c:40:4c:c8:92:29:
                    c4:fd:96:35:68:7a:82:8e:3f:c2:9e:a6:d0:54:f8:
                    3e:f6:2f:24:9c:a4:0d:6e:87:83:c9:4b:2b:a3:1a:
                    31:94:5a:6d:94:98:93:70:67:99:64:bc:ce:2c:35:
                    98:d0:db:df:81:cf:5c:3d:e3:ce:c4:6a:e2:44:e3:
                    32:a5:45:36:20:ba:ad:56:cc:65:0d:92:a5:e3:22:
                    e1:3d:d9:c4:40:66:52:a9:a3:11:3d:d0:4c:49:cb:
                    e1:52:63:1a:87:fd:af:83:85:b2:b8:39:5b:40:d5:
                    4a:bc:b4:27:3a:39:6a:2c:88:16:5c:73:a4:bb:82:
                    e4:1c:46:32:ae:ac:9a:5a:48:3c:de:10:ab:bd:92:
                    ae:d3:67:0d:92:6b:fd:ec:a2:56:2f:03:13:be:0f:
                    f5:ab:f2:1b:42:06:12:f0:4c:37:77:59:3d:c6:d9:
                    e7:4e:78:f6:64:90:72:b2:37:0d:ab:4a:ae:83:b3:
                    b2:c2:2a:72:30:b5:26:76:99:a1:34:e9:c1:b3:b6:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:61:FD:2B:72:59:4A:47:A8:96:16:70:CB:A1:EC:3B:50:98:31:74
            X509v3 Authority Key Identifier:
                keyid:18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8b:0f:d2:cb:bb:ae:78:b9:32:ea:58:01:fe:f5:f7:6e:47:
         0f:90:1f:57:ca:59:fd:25:7a:fd:0c:c0:f9:43:95:68:09:b7:
         e3:93:50:76:6a:0c:02:9a:2b:75:9e:6f:b8:6f:7e:67:8c:a5:
         e8:2c:e6:47:f3:35:13:cb:a2:85:6d:72:5f:17:a7:6b:4e:9f:
         dd:31:4b:14:e6:57:9e:54:0c:b6:0b:13:71:88:7b:83:73:a0:
         a6:a5:1d:9b:84:26:e2:94:fe:a3:24:6b:80:af:d9:c3:d7:bf:
         18:a6:b6:87:81:bd:18:3e:57:a8:54:66:d4:0e:6b:2a:46:83:
         2c:f6:fa:8a:fd:d8:08:ce:59:ee:15:fc:99:7c:81:e1:7d:09:
         91:98:0b:84:86:ae:97:d5:cb:8c:8b:25:9b:3d:05:21:c7:62:
         93:12:b7:18:08:9e:eb:d2:38:33:e4:dc:5a:e0:d3:2e:59:08:
         bc:e9:37:51:6b:49:b5:67:44:55:fc:93:06:5a:00:cd:41:2a:
         76:6e:ab:2a:b6:5e:4c:c8:19:fd:12:81:3b:f4:50:7e:b9:62:
         d2:35:a4:05:ac:61:b4:0a:c8:03:01:b8:9c:19:98:4b:ff:1d:
         d0:ee:4b:d7:f8:0c:e6:56:d9:42:f9:72:da:81:fe:63:84:6b:
         7f:9c:8a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:08:40 2025 by rpki-client