Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
File:                     pyKwoONloK3D2e6zzL_MBi2Q76k.mft (raw, json)
Hash identifier:          +95FdlIShNIrRQnVBV2LGin+YPq/Z291oAmEjEwNaak=
Subject key identifier:   9C:7E:C7:2F:B1:05:91:1C:5E:7D:05:EE:04:95:4B:42:B6:47:9F:38
Authority key identifier: A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9
Certificate issuer:       /CN=F363BEDERI/serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
Certificate serial:       DE
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
Manifest number:          DE
Signing time:             Fri 18 Apr 2025 09:55:29 +0000
Manifest this update:     Fri 18 Apr 2025 09:55:28 +0000
Manifest next update:     Sun 20 Apr 2025 09:55:28 +0000
Files and hashes:         1: pyKwoONloK3D2e6zzL_MBi2Q76k.crl (hash: xdkV1hOCeSajHJrgHvmcbojabw5kdC388hTHSJiZX1g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
                          rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Apr 2025 05:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BEDERI, serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
        Validity
            Not Before: Apr 18 09:55:28 2025 GMT
            Not After : Apr 20 09:55:28 2025 GMT
        Subject: CN=68022191-af56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:d0:7c:10:b2:13:db:ae:9f:60:5a:27:ca:
                    d1:b3:c3:90:73:58:18:48:8b:57:fa:ab:9c:6f:3c:
                    13:96:52:16:ea:b7:77:4f:90:9a:a4:7d:93:57:d3:
                    36:3a:37:4a:74:15:92:9d:da:0c:88:34:15:32:ef:
                    47:1e:5c:71:44:22:95:b0:cb:bd:3c:0b:73:26:fc:
                    27:50:aa:6f:f7:d4:53:de:94:eb:a5:c8:56:a6:f7:
                    73:0e:7d:cb:aa:17:63:54:75:ea:6d:60:fa:a0:29:
                    65:8a:9b:9a:be:ab:f1:fc:14:e4:e9:5f:90:1e:c2:
                    32:5e:68:3c:e8:bf:cf:89:7d:47:d7:75:76:c7:eb:
                    cc:62:c3:b5:53:ba:66:66:44:59:a0:d1:88:7b:86:
                    12:ed:81:8f:5b:6a:2b:3f:62:4c:7f:53:2a:f0:f2:
                    fe:89:bf:4e:aa:3b:4d:f2:93:e1:a1:51:14:5d:73:
                    ed:00:d6:85:06:c4:4f:eb:05:6e:72:85:a0:38:e0:
                    3b:c5:c4:68:f5:c9:2e:31:f4:28:5f:bf:b3:64:fa:
                    eb:4a:98:e0:7d:4b:de:72:de:a8:33:da:da:db:d9:
                    4d:4a:01:c3:4b:bb:be:37:c5:9c:84:b1:a3:fa:9d:
                    18:78:70:4c:dd:c5:4a:9c:36:fd:ea:c4:d9:f7:f5:
                    cf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7E:C7:2F:B1:05:91:1C:5E:7D:05:EE:04:95:4B:42:B6:47:9F:38
            X509v3 Authority Key Identifier:
                keyid:A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:a0:dc:85:d4:4b:fb:4f:75:33:31:21:2a:15:94:68:ae:
         f4:34:ab:b1:f5:df:74:26:f6:54:13:9b:7d:fa:f9:05:0b:ab:
         a4:76:50:68:cf:3e:73:19:91:8d:83:d8:70:fa:b0:d4:0d:19:
         c8:a8:9f:87:fc:47:29:f2:b5:32:b9:13:ff:d3:09:11:5f:34:
         60:53:5b:3c:4e:d2:93:11:56:e9:a0:6f:cc:a6:05:59:de:b4:
         18:66:b9:66:47:a8:7e:8b:5b:08:bf:3b:41:e3:9e:d4:20:4e:
         c4:64:1d:fe:19:40:49:a5:06:b8:ee:af:ea:c9:e5:6a:dc:a3:
         1a:f9:64:bb:6b:c4:c9:70:dd:19:a6:d0:40:3a:e1:9d:58:a4:
         7b:1c:a4:85:a0:51:d4:9a:14:38:13:55:b2:b8:2c:21:4e:42:
         0b:1e:7a:78:e9:fe:7e:11:e2:36:e1:e6:c8:9d:39:4c:26:46:
         ee:61:3a:e4:a5:80:9b:03:01:de:0b:9d:ba:66:85:18:77:c1:
         d4:e5:f9:fc:ed:bc:d9:b4:cd:12:19:37:67:53:12:3b:ae:99:
         1c:29:61:1e:ff:cd:bd:94:f3:27:b5:da:35:23:60:2f:44:41:
         8e:16:04:1e:4b:bb:5a:f8:d2:a3:d0:91:87:50:97:00:09:50:
         9c:7f:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:58:28 2025 by rpki-client