Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
File:                     6J7-NR5gJSomJW2N7o9p53JMrVo.mft (raw, json)
Hash identifier:          9elKq1N3dnxilDMBSs4/e/g20K/ILxjIIsJtl/cgsSU=
Subject key identifier:   88:35:09:2A:48:F6:E9:79:B8:8D:3E:A7:2D:98:4B:4C:BD:CC:D4:11
Authority key identifier: E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Certificate issuer:       /CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Certificate serial:       034B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
Manifest number:          0345
Signing time:             Thu 03 Apr 2025 02:20:13 +0000
Manifest this update:     Thu 03 Apr 2025 02:20:13 +0000
Manifest next update:     Sat 05 Apr 2025 02:20:13 +0000
Files and hashes:         1: 6J7-NR5gJSomJW2N7o9p53JMrVo.crl (hash: vknbU3XFA+JRLW5q6UWTXIZhq5V7BZ5HJiH9DL/nmwc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FF0AF
        Validity
            Not Before: Apr  3 02:20:13 2025 GMT
            Not After : Apr  5 02:20:13 2025 GMT
        Subject: CN=67edf05d-d3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ec:7e:f1:da:f2:19:48:5a:6e:1d:61:d9:1a:
                    44:d2:8c:bb:d0:99:ff:37:0e:d2:d1:8c:6a:06:c7:
                    75:97:28:1f:9c:1f:39:e6:ea:c5:4f:fa:b6:19:2c:
                    c4:22:ea:cc:b9:e4:cc:a2:05:df:9a:52:9a:28:b1:
                    62:5e:21:30:d5:a4:eb:44:09:32:a4:4a:b5:c5:3c:
                    62:43:82:42:02:9d:3a:ac:c9:8a:c7:8c:9f:fd:2c:
                    4e:8a:9c:9b:8b:5f:ed:03:31:a8:18:7e:fb:a3:7a:
                    ae:d7:23:96:52:4b:11:75:50:ad:33:30:a3:ba:f0:
                    78:52:0e:7d:c4:b6:1d:6d:16:a1:ed:2b:dd:4c:42:
                    1d:8e:ab:1a:e5:04:70:8e:f3:19:45:4f:1f:0f:4d:
                    34:d7:36:31:99:8c:93:66:09:4a:87:7f:84:2d:78:
                    e7:d5:0e:49:46:72:0c:bf:87:f2:49:c9:74:8c:97:
                    58:39:69:a7:b3:9b:c2:9a:f2:8e:d6:da:31:cb:ce:
                    43:ed:32:9d:56:90:ba:db:d0:f8:47:41:e2:21:90:
                    d3:27:79:fc:2a:27:2d:71:19:e6:a5:8a:7e:b3:4b:
                    b7:56:7d:cc:5c:35:cb:c4:4d:f6:9f:a1:ae:bb:3f:
                    05:dd:99:8e:58:23:d8:80:a1:fe:2a:d2:4d:a6:fe:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:35:09:2A:48:F6:E9:79:B8:8D:3E:A7:2D:98:4B:4C:BD:CC:D4:11
            X509v3 Authority Key Identifier:
                keyid:E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1e:5a:1f:1c:33:4f:4d:93:eb:86:6c:bb:d7:07:4d:66:f0:
         67:1b:98:02:08:bc:b5:21:71:f7:80:2c:84:61:47:9d:44:6b:
         ea:ce:4f:bc:02:82:65:94:40:0c:2e:d6:ec:b1:b5:cc:51:44:
         cd:90:0d:09:34:f7:95:80:d5:0f:03:44:26:3d:5e:25:6a:85:
         a2:de:18:b1:97:51:48:71:e4:58:95:19:24:ab:9b:ca:ad:12:
         07:7b:03:d5:17:fb:8d:d5:2f:f5:bf:75:fc:c3:bd:5a:8b:dc:
         8f:7e:7a:ac:7a:4d:a1:b2:0f:2a:9f:cd:52:69:ed:c5:18:03:
         3e:c4:80:bc:bb:3f:c0:8b:b3:9e:a9:51:d9:1f:44:9c:0a:5f:
         ff:81:46:ac:76:9f:05:9c:f6:24:db:f4:4b:16:e6:d1:14:57:
         d0:37:b9:63:27:f3:30:b5:d0:4e:09:78:94:0f:62:87:58:48:
         86:d2:72:23:6f:5c:aa:f1:95:e1:6a:d5:f6:aa:9f:05:c5:b8:
         bf:81:e9:cc:3c:2d:a2:40:f2:96:b9:71:66:32:91:3f:ec:78:
         94:7c:39:2f:60:66:a0:c1:bc:f0:e7:0c:39:a9:0e:ab:1d:77:
         a2:c7:9f:67:2e:c2:4c:ba:81:9b:93:f2:13:f1:bd:f1:9f:27:
         5b:c4:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:17:22 2025 by rpki-client