Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
File:                     Gui5Af04SDp0-NI1YM3fc7TRUGM.mft (raw, json)
Hash identifier:          aO/J+Z3QHpIiqoFjYBuxgsP8sw53f8AfUT3Oc7oczVU=
Subject key identifier:   F7:C2:A8:AB:77:97:0B:87:1D:30:4E:6F:F2:31:48:91:F0:03:35:15
Authority key identifier: 1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63
Certificate issuer:       /CN=F3644574AF/serialNumber=1AE8B901FD38483A74F8D23560CDDF73B4D15063
Certificate serial:       010A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
Manifest number:          010A
Signing time:             Wed 04 Jun 2025 04:55:31 +0000
Manifest this update:     Wed 04 Jun 2025 04:55:30 +0000
Manifest next update:     Fri 06 Jun 2025 04:55:30 +0000
Files and hashes:         1: Gui5Af04SDp0-NI1YM3fc7TRUGM.crl (hash: 4G/lW0/p2Ph9sZtxCsrvPdGl3NvUOPQBIFNnvWw4NzI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AF, serialNumber=1AE8B901FD38483A74F8D23560CDDF73B4D15063
        Validity
            Not Before: Jun  4 04:55:30 2025 GMT
            Not After : Jun  6 04:55:30 2025 GMT
        Subject: CN=683fd1c3-4da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:ee:8b:e2:5f:a7:3e:48:4d:fd:57:46:18:
                    72:12:b2:f0:ef:2d:06:9b:fd:6f:f3:8e:57:36:07:
                    66:65:53:b1:f0:05:11:1d:d5:ca:f0:8f:58:c1:48:
                    1c:84:e7:97:d0:57:da:3a:20:53:26:4b:e0:d9:15:
                    1f:bc:0b:9c:76:84:05:93:64:d4:97:38:71:c4:19:
                    80:67:7c:5f:af:91:3d:3f:63:ee:6c:f2:e7:84:cc:
                    86:cf:d4:13:bb:ff:af:7b:c4:95:9c:2b:54:7f:0e:
                    21:8f:64:a5:51:59:5f:96:19:d2:7a:8b:da:38:08:
                    c6:6a:e2:a2:ba:a6:ab:24:2a:c3:88:ec:0f:21:81:
                    c4:af:29:57:1a:b4:74:38:59:93:a6:02:38:c3:76:
                    2f:6c:43:14:2d:0e:89:24:40:1a:31:4c:da:1f:60:
                    e7:f8:71:12:bc:f1:62:62:f9:2c:85:46:ad:a3:f1:
                    1f:01:de:07:96:02:43:d7:2a:04:f1:69:0b:74:7a:
                    3b:26:2f:87:b8:d1:c2:34:6a:0d:a9:a0:57:c3:3e:
                    59:b2:0b:0f:29:c3:7f:89:83:33:7d:7e:4e:27:a0:
                    43:e6:ba:d5:fa:b9:97:5d:27:00:d3:66:39:7f:59:
                    0b:99:be:12:56:88:ad:4d:8a:8e:82:fb:02:f6:0c:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C2:A8:AB:77:97:0B:87:1D:30:4E:6F:F2:31:48:91:F0:03:35:15
            X509v3 Authority Key Identifier:
                keyid:1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:76:32:63:5b:66:4e:5b:25:33:34:d0:09:d3:3c:e5:7e:a7:
         8b:d7:90:fa:d9:c0:7d:7f:45:b8:a3:3a:d2:2c:db:b9:ba:39:
         62:eb:a1:85:94:ba:73:2a:8c:b2:94:b1:b6:02:9d:7e:aa:7e:
         42:59:14:48:11:0e:1c:5d:2c:de:3f:e4:c3:56:bf:52:39:59:
         36:28:83:95:fc:b0:a7:e0:db:ee:9c:ac:1f:c8:50:ca:e5:f1:
         8e:ee:b5:55:86:29:23:5d:a0:25:6e:b4:89:b4:b0:dd:31:ec:
         f8:1d:55:3a:b1:63:62:64:75:d5:eb:9d:60:27:4a:c9:55:68:
         8c:a7:6e:2a:f6:b6:f9:a4:1a:cf:23:c7:db:55:f4:f0:d6:5f:
         b9:84:65:52:9b:69:d1:e0:a8:ca:49:a6:85:bd:ca:4e:51:82:
         0f:5e:da:18:32:30:06:ac:09:e1:07:14:4e:6f:4b:be:cf:47:
         cb:84:fb:9a:a0:89:a2:7f:4c:88:a7:4d:c6:3f:2e:61:6f:60:
         12:b0:d5:0a:ee:63:d1:22:1f:3b:08:1d:04:86:d5:d5:76:f0:
         aa:df:db:3c:09:10:f1:ff:ff:b5:9d:42:b8:e3:a2:97:d3:15:
         e3:6f:98:19:42:82:ee:35:e8:87:88:ba:2a:5b:bd:a0:ba:ed:
         61:fb:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:49:01 2025 by rpki-client