Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
File:                     dwjmbxwHwddnCuvbrhhtpCvLMMc.mft (raw, json)
Hash identifier:          Hr20vPWpgDq23REHW3RISnyWYBbwM7xC4GOzrYud1Lk=
Subject key identifier:   D2:B7:64:0A:02:59:9A:C0:60:30:2C:FE:73:2A:CA:58:74:FB:08:87
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Certificate issuer:       /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial:       1D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
Manifest number:          1D
Signing time:             Wed 05 Feb 2025 03:22:51 +0000
Manifest this update:     Wed 05 Feb 2025 03:22:51 +0000
Manifest next update:     Fri 07 Feb 2025 03:22:51 +0000
Files and hashes:         1: dwjmbxwHwddnCuvbrhhtpCvLMMc.crl (hash: RWfzNkAdLT730m4SMJyQl2pLEwhL3EXcrocXynfbvbg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CD72AF
        Validity
            Not Before: Feb  5 03:22:51 2025 GMT
            Not After : Feb  7 03:22:51 2025 GMT
        Subject: CN=67a2d98b-d6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:95:c4:32:a4:a0:52:e7:8d:ae:44:c7:02:
                    a9:b7:0e:c4:4a:38:9a:a3:44:50:36:42:ea:12:96:
                    6c:c0:58:d4:7f:b4:fd:3f:1c:f0:21:d8:66:bb:13:
                    fa:e5:08:d7:0c:5b:97:fd:e9:23:a3:76:d9:1a:14:
                    62:8a:af:bd:a0:8e:56:5b:ad:ee:86:ba:6c:c6:fb:
                    3a:d5:c8:02:93:be:a9:6e:d6:46:02:85:3a:61:d2:
                    9f:39:5b:af:37:fd:6d:fd:ee:c8:2e:1d:37:47:ff:
                    f6:d2:71:5a:2f:1d:bc:0c:de:da:8b:fa:5c:63:b0:
                    30:98:a6:b7:4e:61:de:c2:bc:eb:60:5f:dd:14:b1:
                    f8:29:c0:ad:02:72:b2:f1:bd:e4:dd:b2:5c:c7:dd:
                    5d:98:92:34:fe:57:9e:e7:c7:9b:3e:1a:a2:c4:44:
                    49:20:b3:05:18:6d:2f:71:3e:5b:3a:d7:e6:ac:60:
                    35:f8:0a:bf:8a:47:00:14:4d:1c:2d:de:b8:7b:c7:
                    2e:92:74:aa:3f:bf:77:17:d6:91:b8:c0:6d:4f:ab:
                    04:9e:45:57:62:8f:c4:d7:a9:f2:e5:05:3f:40:65:
                    3a:46:dd:9d:d6:36:35:51:16:af:c7:d2:a9:b3:fb:
                    7a:91:ca:f4:c5:0b:df:5d:37:24:6e:97:18:fd:cf:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B7:64:0A:02:59:9A:C0:60:30:2C:FE:73:2A:CA:58:74:FB:08:87
            X509v3 Authority Key Identifier:
                keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d4:5f:d9:dd:3d:29:83:da:17:12:66:01:ec:9f:a8:01:36:
         f6:67:66:4f:ac:bd:60:d0:95:7d:95:28:04:40:a0:dd:a3:1c:
         dc:04:9e:e7:ca:a9:2c:6a:d3:90:94:9e:83:cb:42:9d:0f:d5:
         7e:0b:f8:5b:0a:02:d2:29:0d:79:de:56:92:18:62:68:95:7d:
         2a:f8:50:87:9e:e5:09:f9:1b:72:67:fd:50:ff:a2:80:31:b7:
         5c:8c:11:96:6e:46:bb:4d:74:ed:8b:0c:93:d9:f3:64:02:8e:
         42:58:f0:44:c0:f6:19:3e:e0:e1:97:4f:2c:5e:ad:2a:96:a3:
         09:2f:f9:eb:ab:3d:d6:49:b3:f3:b4:1c:82:39:c8:30:2c:35:
         8c:13:2c:56:9c:29:c8:b3:87:ae:25:54:b0:75:c8:f6:ed:b6:
         bc:f9:14:ef:95:f4:90:b1:0d:00:bf:85:18:5d:a6:aa:46:9c:
         e9:13:d9:c5:18:75:77:5b:b4:f9:7b:f1:bb:6b:3d:39:d6:ec:
         ec:65:46:79:23:2a:fa:89:6f:1d:f0:61:c4:40:dd:40:09:ee:
         d2:4c:ea:8a:50:17:ff:0d:31:71:23:b5:cd:2c:df:86:41:cc:
         0b:ac:a2:d0:91:3d:65:32:7e:85:8e:d7:2e:53:6c:10:6f:63:
         fe:8e:1d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:58:57 2025 by rpki-client