Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
File:                     OwiJEFfOiidoEQQFlcyqxAjfUaY.mft (raw, json)
Hash identifier:          +mXXTrkFhe6It50a1QpjRv+reE5FJdWUeEYf+KqsuhI=
Subject key identifier:   13:B0:78:35:1D:8B:6A:37:5A:D7:BA:C1:CA:23:D9:6B:88:6C:CE:98
Authority key identifier: 3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Certificate issuer:       /CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Certificate serial:       04F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
Manifest number:          04F6
Signing time:             Thu 03 Apr 2025 01:54:23 +0000
Manifest this update:     Thu 03 Apr 2025 01:54:23 +0000
Manifest next update:     Sat 05 Apr 2025 01:54:23 +0000
Files and hashes:         1: OwiJEFfOiidoEQQFlcyqxAjfUaY.crl (hash: ATJcSV+oCS5rK+SwrmIWmle9qgU0wBwm1XiymvZqhZM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271 (0x4f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679CB8AF
        Validity
            Not Before: Apr  3 01:54:23 2025 GMT
            Not After : Apr  5 01:54:23 2025 GMT
        Subject: CN=67edea4f-921c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:85:f4:14:93:dc:12:ef:c0:84:1e:cf:c7:25:
                    64:72:f4:6a:d0:84:a0:1d:b9:c9:8a:fe:7d:7c:2e:
                    a1:ea:ea:3b:e9:5f:57:b4:fa:4e:be:55:32:35:fd:
                    a5:c7:2f:05:32:ec:f6:b3:c4:32:66:23:dd:d4:63:
                    e0:2a:b0:f8:b1:ba:d5:6b:a9:4c:c7:6e:61:4d:19:
                    3f:21:85:00:9c:de:c7:86:7d:b9:89:c7:94:e7:61:
                    03:7c:04:fa:47:14:63:a1:13:1c:e6:4d:42:f6:65:
                    14:45:32:1a:8a:15:94:d4:c3:db:e1:3b:72:48:c0:
                    d9:b8:ca:19:e5:fa:9f:08:ee:57:24:31:f4:dd:0d:
                    58:e5:de:79:6b:9e:e3:f4:7e:62:f2:d9:02:cc:70:
                    09:6b:2d:04:4e:ee:c2:34:bf:f5:e2:f0:97:5d:11:
                    c3:db:4d:f5:62:68:51:44:f0:94:96:17:68:b3:71:
                    e6:89:ad:a6:be:d0:a1:5c:84:d4:f8:32:c0:de:6a:
                    20:78:0a:fd:3e:ef:38:45:ab:8a:81:72:d6:5e:28:
                    bc:6d:d7:c6:8b:be:b6:a4:65:fa:1d:bf:d8:21:58:
                    74:c7:8f:35:68:49:dd:de:a0:e5:ff:67:1d:0c:91:
                    14:61:d1:a2:33:e2:2d:75:45:8c:69:b1:e7:82:98:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B0:78:35:1D:8B:6A:37:5A:D7:BA:C1:CA:23:D9:6B:88:6C:CE:98
            X509v3 Authority Key Identifier:
                keyid:3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:f7:9b:d7:70:2f:24:d7:93:f3:44:16:a4:69:73:f8:ac:82:
         e2:f9:83:5e:3b:14:3c:17:b8:dd:36:10:85:71:6b:7e:84:96:
         96:9a:c6:4d:09:94:ab:a5:db:4d:ca:c8:da:9a:04:33:94:4b:
         51:2d:1d:0d:78:ed:25:be:f9:31:3d:ef:18:1a:6b:d2:dd:c2:
         d1:0d:82:df:81:f7:c4:96:33:09:a3:e3:f1:63:7e:15:99:de:
         31:c4:c3:3c:5f:d1:4e:7f:0f:36:41:98:12:48:b9:c1:2c:ff:
         7e:c1:9a:fe:3e:ee:62:f4:31:15:f3:8b:4c:5d:1f:f0:c3:6a:
         96:8b:24:9c:f5:7e:61:6b:1c:dd:4a:cd:a1:a4:76:c1:9b:57:
         48:49:77:79:b6:fa:b3:fa:a4:4a:a1:d0:6e:98:af:e5:9f:fb:
         4b:68:03:ba:cf:a7:74:23:c8:e5:e4:17:d6:c7:83:5f:24:93:
         50:cf:b0:31:a3:30:78:f2:a7:2f:46:b6:ac:60:6c:65:fe:8a:
         42:fc:0e:c3:e4:d8:32:0d:51:75:05:af:47:ef:fa:56:1d:59:
         45:ee:a7:d2:5f:f5:e8:fa:b4:84:52:b7:ec:e9:87:47:5e:50:
         97:26:ca:95:d9:1d:d9:c9:85:ef:04:5b:46:ff:51:e0:15:81:
         4b:df:7f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:28:43 2025 by rpki-client