Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/muu9NJ1kyzF42IIOBBzyKn9pnok.mft
File:                     muu9NJ1kyzF42IIOBBzyKn9pnok.mft (raw, json)
Hash identifier:          yT0xx3MlgEuyc5Em/3nLVe9beMHJM/MNhYflQ2QakpE=
Subject key identifier:   DF:76:91:5B:BA:24:D9:67:DC:57:3F:CA:C2:13:7A:B4:58:89:EB:1A
Authority key identifier: 9A:EB:BD:34:9D:64:CB:31:78:D8:82:0E:04:1C:F2:2A:7F:69:9E:89
Certificate issuer:       /CN=F366EFDFAF/serialNumber=9AEBBD349D64CB3178D8820E041CF22A7F699E89
Certificate serial:       0577
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/muu9NJ1kyzF42IIOBBzyKn9pnok.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/muu9NJ1kyzF42IIOBBzyKn9pnok.mft
Manifest number:          0576
Signing time:             Sun 16 Feb 2025 01:45:01 +0000
Manifest this update:     Sun 16 Feb 2025 01:45:01 +0000
Manifest next update:     Tue 18 Feb 2025 01:45:01 +0000
Files and hashes:         1: muu9NJ1kyzF42IIOBBzyKn9pnok.crl (hash: +PuGNKVQAafNhuajwswb0TIPbuwqwto8D/iVeEf7jBg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/muu9NJ1kyzF42IIOBBzyKn9pnok.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/muu9NJ1kyzF42IIOBBzyKn9pnok.mft
                          rsync://rpki.afrinic.net/repository/afrinic/muu9NJ1kyzF42IIOBBzyKn9pnok.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366EFDFAF
        Validity
            Not Before: Feb 16 01:45:01 2025 GMT
            Not After : Feb 18 01:45:01 2025 GMT
        Subject: CN=67b1431d-fc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:b6:15:7e:d6:9f:92:ec:70:ba:3d:98:67:
                    d2:4e:8f:1c:3a:fb:08:bb:da:18:db:37:61:93:70:
                    aa:42:4f:0e:77:40:02:d7:b7:3e:8a:6a:6c:9f:0e:
                    a2:5c:89:fc:8e:5e:ca:1d:66:b2:9c:96:d1:bf:30:
                    5d:35:a9:c6:3f:fe:ea:fb:7e:ae:81:22:90:d4:56:
                    87:ef:57:06:aa:4d:63:03:48:b3:5f:04:d9:54:ff:
                    1f:6c:80:96:1c:bb:a0:35:9b:f0:4b:8b:85:23:df:
                    c4:e4:8c:af:ca:ef:3b:f2:b7:d8:8a:26:22:72:40:
                    b7:4d:73:50:c5:e9:15:74:aa:1c:41:45:06:51:63:
                    79:f9:a1:ff:59:6a:2e:70:5b:5f:e5:01:d3:08:d2:
                    68:09:45:8c:63:d2:54:6e:83:90:d1:87:bf:fa:0a:
                    9b:be:93:c6:e9:81:a6:a7:45:86:6e:5b:b7:af:9d:
                    08:d8:3f:60:47:ce:0a:e5:59:60:76:61:df:4d:b3:
                    5b:90:52:aa:d5:1c:a7:1d:bd:e2:31:71:c0:87:50:
                    dd:f1:0f:bd:11:23:cd:e9:60:4d:7a:b8:b1:db:41:
                    e5:51:11:da:5e:1f:fd:28:7d:84:da:06:f1:db:ef:
                    9e:62:a0:33:55:85:c6:6d:d5:5c:68:76:da:f7:a1:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:91:5B:BA:24:D9:67:DC:57:3F:CA:C2:13:7A:B4:58:89:EB:1A
            X509v3 Authority Key Identifier:
                keyid:9A:EB:BD:34:9D:64:CB:31:78:D8:82:0E:04:1C:F2:2A:7F:69:9E:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/muu9NJ1kyzF42IIOBBzyKn9pnok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/muu9NJ1kyzF42IIOBBzyKn9pnok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/muu9NJ1kyzF42IIOBBzyKn9pnok.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b1:65:28:40:56:83:48:e1:40:df:84:55:a2:da:62:4b:1c:
         8e:7a:33:dc:fd:81:f1:79:4b:d0:da:17:96:ba:25:00:27:24:
         b7:0d:6d:25:fd:fa:8b:dc:86:7b:64:75:64:72:90:18:06:90:
         d2:07:7f:d3:08:9a:9a:ca:f8:bd:b8:53:9b:1a:e7:73:88:1a:
         ec:09:33:df:6e:b6:8e:75:3e:e2:56:25:06:7a:02:5d:00:63:
         d0:19:9e:e6:34:16:ef:a6:04:88:58:23:2e:45:81:7e:3e:09:
         53:c5:97:16:5d:29:25:9e:bf:3f:f8:be:d4:96:f3:3f:78:bb:
         11:c0:68:12:9c:89:b8:30:c9:67:52:a1:e1:ca:13:cd:4d:16:
         40:07:5d:12:47:dd:16:b5:5a:6f:f2:2a:95:b1:c3:a6:1c:a4:
         97:c3:7b:7e:7c:c3:fe:0e:ec:da:84:3d:e7:07:73:f4:99:8e:
         15:15:c7:b0:03:4e:5c:83:3a:48:df:24:4f:9e:bc:97:cf:a2:
         d4:a5:dc:05:c5:62:93:94:29:54:74:22:f6:21:f3:1a:1e:24:
         d4:07:a9:82:a4:73:3a:0b:f7:68:c5:84:77:2c:de:be:87:4f:
         38:7b:5b:cd:5f:4b:da:ae:ed:6a:18:f3:9a:64:80:b2:91:5e:
         02:d0:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:49 2025 by rpki-client