Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
File:                     LWxhNdlQPaoy1mWGoi7WGSlcar8.mft (raw, json)
Hash identifier:          Bo5vdI2cH7/WZyn0X1x6LfwQCMiccDnIpUFls7pwEHM=
Subject key identifier:   99:07:44:5F:F8:99:EF:30:FF:38:2A:45:19:35:47:A9:A0:11:26:1B
Authority key identifier: 2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF
Certificate issuer:       /CN=F367FE62AF/serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
Certificate serial:       0574
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
Manifest number:          0573
Signing time:             Sun 20 Apr 2025 02:28:04 +0000
Manifest this update:     Sun 20 Apr 2025 02:28:03 +0000
Manifest next update:     Tue 22 Apr 2025 02:28:03 +0000
Files and hashes:         1: LWxhNdlQPaoy1mWGoi7WGSlcar8.crl (hash: uliy9vbvh3Sf/VA644KjGJFDkUo2t92ScJL2vS5SulI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Apr 2025 00:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FE62AF, serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
        Validity
            Not Before: Apr 20 02:28:03 2025 GMT
            Not After : Apr 22 02:28:03 2025 GMT
        Subject: CN=68045bb4-39f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:84:69:05:de:30:a9:f6:5c:df:e1:76:8d:
                    5d:0e:93:05:66:ed:32:9b:69:ad:cc:b2:9a:55:45:
                    2b:76:fd:f4:f6:cc:15:d8:65:a8:04:d2:77:87:06:
                    9c:1a:46:9e:90:07:6b:e2:aa:eb:e0:50:e6:f0:12:
                    b8:54:8d:65:bf:0a:dc:f0:ca:6f:97:f1:3a:26:5d:
                    d7:58:71:49:53:50:99:3e:24:2f:2e:fc:0b:4c:b4:
                    56:25:a7:a4:87:85:d0:bf:cc:8f:4d:e2:2b:15:fc:
                    4a:ff:2c:99:26:f2:78:ec:7b:33:33:0f:44:e8:42:
                    cc:da:be:34:d0:ac:b8:74:e1:8f:2b:00:43:14:12:
                    b7:67:f8:2b:36:8d:96:c4:27:97:56:c9:77:cb:52:
                    f1:0b:b5:90:a6:1b:3c:21:01:47:bf:28:ba:8b:68:
                    87:79:b6:ec:61:6e:08:8f:f1:1e:1b:36:57:12:84:
                    43:0c:41:c0:56:9a:bf:b8:4b:b6:b4:fb:0d:8f:15:
                    e9:d1:fa:92:ea:83:f3:3d:58:f3:0e:0d:91:2e:53:
                    19:6f:3a:d2:d9:61:8f:61:2e:24:0a:1a:93:00:66:
                    12:8f:40:83:62:ba:49:67:43:c8:b5:04:64:c6:07:
                    15:dd:47:65:9c:c4:38:50:84:2d:9c:5d:3e:49:c8:
                    7a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:07:44:5F:F8:99:EF:30:FF:38:2A:45:19:35:47:A9:A0:11:26:1B
            X509v3 Authority Key Identifier:
                keyid:2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f9:aa:ab:aa:9e:25:39:08:60:cc:cc:9f:a7:38:a9:44:53:
         a6:2d:1f:5e:a7:a7:ce:d3:b6:ee:b4:41:e0:12:35:31:4c:1f:
         7a:14:87:e1:e2:52:05:4c:9f:96:b1:2f:72:f2:ca:03:9e:4f:
         6d:07:76:12:84:a7:52:73:96:89:35:47:25:3c:1b:a1:0f:91:
         b6:03:67:9a:86:15:4f:d5:42:2e:a4:9e:66:99:7d:94:22:b4:
         05:8c:28:89:0a:40:5c:3a:55:6b:ec:43:8d:24:7f:fb:0c:d4:
         27:9c:ae:ba:24:fd:15:27:64:59:4a:74:63:f7:f1:51:a9:35:
         ac:21:47:27:73:f2:42:c2:a7:47:97:bd:68:2d:9c:4e:30:27:
         07:02:1d:2e:c6:fc:7a:8d:c4:b8:93:17:2e:99:67:08:03:51:
         e7:61:e8:a0:a9:4c:cc:d9:6b:8e:4f:f8:e8:f3:7e:ad:e5:a6:
         1d:e9:49:0f:28:e6:47:a9:51:16:85:b2:2d:0a:8d:cf:13:41:
         dc:be:76:5c:c5:b1:7d:75:d1:d3:f3:81:89:e5:00:d5:04:8c:
         44:83:97:d6:7f:c1:a5:4b:ed:a3:0a:da:c5:d1:40:e9:a3:37:
         47:d4:ec:d3:aa:e6:a8:3a:cb:2d:70:29:5a:7f:0d:94:fa:0b:
         c7:ac:c4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:19 2025 by rpki-client