Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
File:                     hv5z7TaP-SiSCjS0l1tObR5U4GM.mft (raw, json)
Hash identifier:          JtJw9/NZefbVcHqB+0Z5BseemFq4yzNvM51J12492wI=
Subject key identifier:   04:D5:7E:7A:E4:37:AB:C4:5D:F7:39:F0:6F:30:32:99:CF:DD:EA:C6
Authority key identifier: 86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63
Certificate issuer:       /CN=F3627A5BAF/serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
Certificate serial:       010E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
Manifest number:          010E
Signing time:             Thu 03 Apr 2025 03:07:16 +0000
Manifest this update:     Thu 03 Apr 2025 03:07:15 +0000
Manifest next update:     Sat 05 Apr 2025 03:07:15 +0000
Files and hashes:         1: hv5z7TaP-SiSCjS0l1tObR5U4GM.crl (hash: c0LrgRPOyLlSprC+KuwSvQe4jpja/CT47+1M5czfbGI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A5BAF
        Validity
            Not Before: Apr  3 03:07:15 2025 GMT
            Not After : Apr  5 03:07:15 2025 GMT
        Subject: CN=67edfb64-670d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:b5:c6:45:22:8b:0b:53:eb:19:5c:fa:03:
                    a4:71:fe:75:59:49:b2:35:8f:6f:66:2d:00:25:00:
                    63:f0:27:49:5c:25:5b:58:82:a8:23:cc:81:27:10:
                    00:3c:4c:61:2d:e7:fc:2a:f6:27:4f:31:95:58:c5:
                    5f:d9:7e:4d:ef:2b:1b:62:1a:f5:75:d6:5c:50:7c:
                    0e:ab:9e:9b:8f:88:47:c8:1c:f7:24:6a:a9:f2:0e:
                    b7:93:fb:61:f1:ad:40:37:44:64:9d:dc:0d:ba:52:
                    4d:31:bf:1f:c1:61:5e:d4:3b:b7:6e:b7:b9:35:b8:
                    96:ca:e5:47:bf:90:89:7d:45:d4:96:5b:81:13:81:
                    2b:52:ab:4c:44:11:27:a8:b0:28:68:0d:a4:eb:7c:
                    df:ef:54:6f:b7:94:33:99:b6:f6:e3:49:02:7a:29:
                    32:91:16:38:35:87:a3:3b:c1:aa:69:05:6d:0d:fd:
                    f0:cb:6d:fc:23:8a:d9:2f:2a:7a:a2:7c:89:88:fe:
                    23:05:30:5f:d3:e4:33:60:1c:ea:a7:98:7d:d6:03:
                    fd:c6:e6:3e:d1:dd:54:66:7f:2f:56:91:40:40:e2:
                    fb:94:6a:bc:d7:2b:22:c2:ab:96:1e:bc:b2:cd:ec:
                    b6:ee:a6:fc:a8:2a:9b:25:c2:b1:a2:91:e2:c7:a2:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D5:7E:7A:E4:37:AB:C4:5D:F7:39:F0:6F:30:32:99:CF:DD:EA:C6
            X509v3 Authority Key Identifier:
                keyid:86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0d:cc:46:7a:67:ba:34:e6:15:40:85:39:a1:61:36:b1:d5:
         f8:41:ba:5e:c8:83:ba:22:09:95:f3:5a:bc:d4:a3:a9:09:bf:
         01:20:b7:cb:69:ff:5a:1d:55:59:eb:e2:29:6a:88:92:71:c8:
         ae:85:39:0d:ea:cb:16:54:e5:ae:99:67:1b:56:9f:de:ce:45:
         ba:ec:27:3b:a6:c9:64:dc:da:6b:94:ed:8f:51:37:d8:17:6d:
         78:fe:a3:38:90:2d:ae:7a:cb:78:15:9d:4c:85:79:43:e9:cd:
         b2:07:2e:dc:c5:12:5e:48:33:73:64:06:a4:fa:e2:b6:c7:f1:
         71:75:66:f3:71:9e:3d:c9:80:7d:12:29:d0:f4:a9:4d:c1:0e:
         99:25:c5:30:ab:57:78:7f:64:15:d9:65:ce:0c:41:e3:ee:34:
         15:72:18:21:aa:a7:65:0d:0c:d2:a5:ae:d9:1f:ff:e8:18:5b:
         70:11:80:76:de:8c:ad:fa:8d:a6:42:15:c8:95:df:df:33:f6:
         37:b7:70:ba:4b:2e:83:1a:ef:e5:5a:43:57:c5:2e:69:99:98:
         00:4f:0f:14:65:c0:a4:13:98:27:04:67:d4:6c:8b:52:7d:d4:
         4f:83:7a:d8:dc:e1:bf:78:52:08:b4:42:e7:b0:a5:5f:22:95:
         09:6c:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:22:08 2025 by rpki-client