Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File:                     IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier:          XTv5/n4G/1kLDr6DJ5bYaZDGL+Jd6ma0I+/ptadA6Fs=
Subject key identifier:   FF:F3:0D:8F:1B:6D:B8:C2:1D:F8:A7:34:E6:5E:F3:AE:F9:3C:28:9F
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer:       /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial:       04A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number:          049E
Signing time:             Fri 13 Jun 2025 02:56:04 +0000
Manifest this update:     Fri 13 Jun 2025 02:56:03 +0000
Manifest next update:     Sun 15 Jun 2025 02:56:03 +0000
Files and hashes:         1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: bs7l4cIo9yvBxqo2s7moSJtuNzRgIzwg9zztC8/mQXU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 15 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
        Validity
            Not Before: Jun 13 02:56:03 2025 GMT
            Not After : Jun 15 02:56:03 2025 GMT
        Subject: CN=684b9344-2db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fe:51:67:3f:07:9e:55:59:3d:76:4b:5a:ee:
                    d9:1c:5c:80:27:53:75:e2:6c:aa:99:4d:0d:d9:c5:
                    54:9e:86:18:d0:fd:97:6e:63:d7:69:09:6b:1c:fe:
                    c7:d9:64:41:6b:9a:8f:a7:45:3e:f0:e4:43:97:c8:
                    6e:83:6b:3f:7f:d0:95:4b:d6:46:99:62:30:53:1c:
                    00:20:32:a3:fa:11:05:70:86:9b:69:68:42:58:1b:
                    54:4d:34:4d:5c:55:6f:34:98:28:ce:91:2a:c5:bc:
                    95:fa:6f:0f:19:1b:e4:c0:14:55:4b:a7:11:70:b9:
                    a7:89:8a:c6:8a:af:6d:55:db:56:da:34:67:ca:ff:
                    af:c3:cc:2d:cb:11:66:18:07:c7:b3:0c:89:7e:1b:
                    dc:ac:10:74:62:3a:eb:28:9e:e6:41:46:e7:b2:69:
                    63:f8:fc:b8:be:a2:56:6e:97:c1:8d:0f:ff:c8:98:
                    31:15:2a:86:44:bd:18:eb:6b:4c:0e:3c:3a:bc:a0:
                    57:3b:c4:23:a9:4e:1e:1d:55:62:99:f3:07:da:e1:
                    5b:06:ba:55:22:a3:d8:2a:96:c1:0a:d3:fb:67:f7:
                    fa:90:4e:49:d6:e3:8c:8a:86:0c:03:86:59:52:11:
                    c2:3a:69:1f:a3:89:a3:22:bf:fe:67:16:51:d3:07:
                    8b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F3:0D:8F:1B:6D:B8:C2:1D:F8:A7:34:E6:5E:F3:AE:F9:3C:28:9F
            X509v3 Authority Key Identifier:
                keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:48:c8:85:03:d0:d8:5c:d3:cd:f9:66:45:02:a7:64:3d:ef:
         d3:bf:05:6b:d9:de:95:26:8e:80:9c:61:8f:15:3e:65:8e:ce:
         29:6b:4b:37:07:a8:72:49:b7:13:d9:26:a7:8a:6d:94:8c:6c:
         c8:ca:f3:9e:7a:a7:b7:04:e4:e6:33:19:93:23:52:4a:52:8d:
         a9:2d:75:ef:3b:29:8d:e6:5a:eb:79:df:76:d7:fc:d5:00:21:
         f8:a7:8e:52:a0:2f:2d:93:cd:e5:57:00:0f:2d:60:38:90:20:
         98:f8:88:96:63:f8:ec:52:d4:9a:52:88:cb:c0:d0:dc:ee:e1:
         1b:a1:aa:93:59:39:9b:dc:b9:f8:a3:4b:5c:45:ec:d3:28:80:
         cd:ce:71:32:22:69:03:03:4c:13:fd:a9:ea:f5:7d:71:08:31:
         24:55:0e:6c:05:ca:a7:1c:2c:09:7c:29:d3:98:2e:f1:36:31:
         27:ce:d6:7a:44:3c:b5:c7:6b:60:4e:fa:be:a7:7f:31:46:f5:
         b1:d5:5b:d6:21:76:30:5b:89:62:cd:10:f7:39:f0:90:b7:97:
         d8:0a:87:f6:8e:0d:fa:25:1f:66:7a:a3:45:bf:e6:91:fe:ca:
         b1:8f:bc:5c:d4:ac:42:b8:52:46:a6:46:26:13:e4:c7:16:75:
         ff:70:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:55:59 2025 by rpki-client