Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File:                     OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier:          xwtlksrrddf/pvcmys+TiroB947KjxX/VhPv0WOC9MY=
Subject key identifier:   57:66:6F:40:9D:C2:CC:7E:E3:09:46:1F:E4:AA:24:00:59:08:4D:DF
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer:       /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial:       05DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number:          05DC
Signing time:             Wed 04 Jun 2025 02:21:09 +0000
Manifest this update:     Wed 04 Jun 2025 02:21:09 +0000
Manifest next update:     Fri 06 Jun 2025 02:21:09 +0000
Files and hashes:         1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: z8zFMTL7ztjOR2awjVq3FmyxRMsiHPlNluxWzWhIDNI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
        Validity
            Not Before: Jun  4 02:21:09 2025 GMT
            Not After : Jun  6 02:21:09 2025 GMT
        Subject: CN=683fad95-a407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:18:60:18:30:bf:02:da:93:46:02:c6:87:49:
                    7a:01:67:6d:2e:f0:37:bd:26:b8:b9:49:88:00:29:
                    85:e0:b5:80:43:22:f8:1d:06:c7:25:9e:86:ba:09:
                    26:81:bd:30:04:17:87:bd:18:75:a7:20:26:ba:67:
                    22:77:33:9e:c8:4c:ad:65:28:e2:43:4e:6c:fd:8e:
                    8a:c2:7e:00:0d:ce:a1:76:58:e8:8a:0e:6b:a6:22:
                    01:07:29:35:28:db:40:81:11:85:cc:53:66:37:a4:
                    90:8c:11:78:48:8f:b1:eb:62:c7:57:5a:92:62:0b:
                    21:da:86:0a:ed:4b:9d:95:ed:25:64:78:a0:fb:e8:
                    6a:57:89:7a:b4:5b:f6:d5:85:a2:c2:5d:00:26:ef:
                    16:cd:ad:57:11:9b:b2:30:e3:3f:86:68:2c:60:16:
                    f7:8e:ff:b0:d0:3e:1b:8c:b2:01:ae:42:54:52:f2:
                    05:1d:c6:1f:c0:9c:c9:e2:3e:12:db:56:24:36:60:
                    1b:5c:a2:74:c4:69:87:0e:09:69:36:31:22:f8:4f:
                    7e:8d:3d:ac:bc:94:b4:ce:84:a8:a0:ed:7a:44:6c:
                    ca:31:31:f9:ff:b6:f5:aa:e0:c2:e4:aa:b8:cf:35:
                    4f:62:08:24:83:e0:f6:e9:2f:1a:d9:22:34:77:cf:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:66:6F:40:9D:C2:CC:7E:E3:09:46:1F:E4:AA:24:00:59:08:4D:DF
            X509v3 Authority Key Identifier:
                keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:66:3a:ed:d3:00:20:03:90:e2:b5:3a:de:d7:95:a2:9d:1a:
         20:75:c9:7f:f0:8c:2e:aa:45:20:eb:2f:f0:b4:83:c7:3f:fc:
         88:2a:65:9d:99:87:f0:0e:b9:d5:a7:4a:35:a9:3f:99:13:98:
         13:23:7e:1e:9b:83:f3:66:2c:c6:4f:55:c4:e9:ba:17:33:ae:
         bf:85:de:4c:f0:78:7b:ca:87:51:6c:64:76:e6:f8:2f:7d:ad:
         12:7f:89:d2:91:80:b3:68:90:ff:4b:75:d4:d3:ec:b8:b0:95:
         7c:99:cd:d5:06:a7:c9:9c:a3:85:ad:c2:e5:04:5a:19:77:7e:
         4a:0e:ac:6c:a9:c6:4b:4f:39:f3:9d:6b:b6:1f:54:cf:5c:c3:
         9a:a9:b2:83:c2:33:64:b9:b9:65:28:af:ec:41:85:65:b9:f9:
         33:b9:d0:e5:34:41:54:59:aa:32:b7:32:2a:a9:de:02:b1:a3:
         1a:ad:19:80:07:8d:7f:a2:e1:91:98:ba:19:ff:e7:6c:6f:47:
         6d:28:6e:bf:11:37:30:09:32:75:5f:79:80:0d:40:a3:2d:9c:
         14:d1:c0:74:ae:5d:29:87:6c:b9:8e:73:4c:18:e9:26:93:a7:
         18:0a:34:cc:94:a0:ea:12:d9:fe:83:1e:15:93:84:3d:9f:a5:
         29:3f:7d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:52:47 2025 by rpki-client