Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File:                     IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier:          Wsqde1yX5vpdpSLtyP/tsP3grijBxw7GuqDXufygMx4=
Subject key identifier:   9F:DB:BE:8F:42:72:7A:38:C4:27:C5:E6:36:AC:2C:E9:D5:10:61:49
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer:       /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial:       04A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number:          049F
Signing time:             Sat 14 Jun 2025 02:55:31 +0000
Manifest this update:     Sat 14 Jun 2025 02:55:30 +0000
Manifest next update:     Mon 16 Jun 2025 02:55:30 +0000
Files and hashes:         1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: VtRvnPzCXcZvk0xy2R2TUEp1ownT0mmUpwzHoJ1Kpsw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
        Validity
            Not Before: Jun 14 02:55:30 2025 GMT
            Not After : Jun 16 02:55:30 2025 GMT
        Subject: CN=684ce4a3-473b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:8d:89:5f:42:8f:b8:5a:5d:1c:06:07:5c:
                    20:7a:d7:ec:81:0a:45:fa:bf:38:87:43:b7:bc:0b:
                    e4:7a:38:73:bc:e7:9e:1c:04:c7:cf:30:ca:29:ec:
                    31:71:5a:2c:93:f1:de:bf:09:33:54:10:a7:71:81:
                    1b:24:93:02:ec:08:fc:db:29:1c:63:01:89:d0:3b:
                    c4:de:de:ef:c9:9b:2e:8d:80:78:b1:22:68:4e:4d:
                    db:4f:60:9a:75:99:22:a3:d8:59:3b:29:5e:69:17:
                    b5:10:7b:c1:e4:f4:1e:a0:3b:16:2d:6e:90:17:37:
                    a4:86:cc:39:f7:c0:b0:e5:06:f1:61:74:e0:9e:64:
                    3f:de:f9:4c:d8:54:f9:2d:6b:f2:bf:d4:c3:b6:d6:
                    c5:0b:62:15:44:93:25:5b:46:cd:d1:60:9b:b0:d6:
                    be:14:1e:f1:72:f9:04:e6:94:ea:90:9f:20:fb:38:
                    b4:b2:21:3f:6f:4a:03:28:9b:f9:c4:e0:3b:62:dc:
                    fe:b7:01:2a:08:75:a2:d2:47:75:4a:93:ee:b3:fc:
                    ac:65:5f:8d:99:5b:b5:ef:41:50:24:f8:7e:9a:2e:
                    b4:88:5d:ce:95:63:ce:6c:63:ce:a1:9a:93:b9:cc:
                    f9:d6:2e:1e:69:56:9e:87:5a:f7:f0:90:d9:c0:bf:
                    da:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DB:BE:8F:42:72:7A:38:C4:27:C5:E6:36:AC:2C:E9:D5:10:61:49
            X509v3 Authority Key Identifier:
                keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:94:65:8d:fd:e6:fc:e0:49:9d:15:cf:11:62:d0:88:c7:6f:
         75:55:5a:45:90:c0:13:0e:47:87:7b:b4:0f:f6:9c:b5:a2:a1:
         37:17:9e:52:06:ed:76:cc:99:90:4a:bd:fe:be:39:f3:e2:30:
         27:3d:d4:19:23:76:41:6f:02:53:04:4e:33:36:ac:a6:f6:41:
         bf:dc:7e:56:c3:f6:f2:2c:fd:fa:0a:22:af:20:27:3d:ba:b7:
         72:df:70:f1:d4:04:ee:78:2b:61:b3:b1:ed:22:c1:fa:1d:9b:
         8c:b0:0f:c2:d2:ac:c9:7e:02:18:03:87:fb:a1:42:35:a2:77:
         41:b3:03:51:25:cf:b1:1b:46:f1:5a:f3:91:fd:e1:7f:05:cb:
         8f:f7:7f:16:53:f0:fc:dc:14:6d:fa:6a:11:fd:3f:e0:9a:57:
         65:3e:51:2e:20:6e:09:d4:8b:9a:7f:ea:29:99:4e:8e:dc:e5:
         ca:96:4d:64:f9:c5:c0:bd:20:98:c1:b2:fd:c4:14:66:e4:f0:
         82:19:b5:3c:12:b8:32:41:b6:e8:f3:58:55:b8:94:5b:34:eb:
         d3:84:e3:0d:53:53:46:4e:75:cc:5e:a8:15:f3:16:e0:1c:b0:
         8b:1d:a9:df:90:12:ed:57:28:95:7b:d7:0d:5d:72:03:5a:16:
         50:f8:2e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:30:33 2025 by rpki-client