Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
File:                     kXMyk_xjUK7funWpFv_0G1Fez0w.mft (raw, json)
Hash identifier:          Kybq4afJG9bC4tyS997zbLsCgVzKTgV9v1uprO8mRnI=
Subject key identifier:   78:BA:2C:7F:6D:5D:90:14:6B:57:B8:A8:D1:6F:34:64:6F:B6:41:DA
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       052F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
Manifest number:          052C
Signing time:             Thu 03 Apr 2025 01:51:10 +0000
Manifest this update:     Thu 03 Apr 2025 01:51:10 +0000
Manifest next update:     Sat 05 Apr 2025 01:51:10 +0000
Files and hashes:         1: kXMyk_xjUK7funWpFv_0G1Fez0w.crl (hash: xJ7dSM01Hl9he5W2Hz6OdnZv0aJfnJaPB99cNGx3sEE=)
                          2: 951EA1701F7811ECB1D1961AD8A014CE.roa (hash: 1vZMKT9K0+T6pwn8OE0g59G7GIGSdRRo7NEdcXkRfVc=)
                          3: 7EE185A6B21611EFA9BDF294762E951A.roa (hash: G6244Azl/uqe8/mj3zsQM21nztQl1zF4+5qvnRVhw/Q=)
                          4: E739D1BE1F7811ECBE14071BD8A014CE.roa (hash: XvzpJAf5CAfqUsf2t3F2RGOpHSqxkl68xqf6tTZaymg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1327 (0x52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF
        Validity
            Not Before: Apr  3 01:51:10 2025 GMT
            Not After : Apr  5 01:51:10 2025 GMT
        Subject: CN=67ede98e-edaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:7e:74:05:13:31:85:67:99:d6:c2:25:4d:
                    62:46:38:50:77:98:ac:a3:74:9e:aa:75:d5:cc:29:
                    ec:1b:df:21:2f:ce:42:c9:01:19:11:b8:bc:f9:53:
                    ca:91:e2:18:5b:f0:dd:5e:72:dc:46:53:5d:f6:c9:
                    7e:8e:f8:42:bf:2f:d2:34:d2:20:5e:3b:83:80:7d:
                    5b:14:4d:cc:24:cd:66:59:2a:fd:bb:b0:e2:cd:b4:
                    de:76:6c:e9:48:2b:bc:cc:82:78:66:3e:f8:fd:df:
                    f0:c4:6d:55:93:a5:e1:3b:78:b3:30:f5:a7:96:5e:
                    ab:fa:72:d5:33:09:56:1b:1c:68:d5:f4:4d:a7:f2:
                    37:cd:6d:a9:51:5f:7b:59:23:ec:e3:c6:7d:89:51:
                    e0:d5:92:c6:8b:ce:c2:7b:ca:ee:a5:ad:19:0c:98:
                    47:05:b5:41:f2:ae:e1:d8:be:03:95:4d:d5:ca:e9:
                    17:d6:9f:cb:e9:89:99:d6:cc:5a:fa:05:89:a2:b2:
                    2d:42:76:7e:53:45:82:cd:d5:f8:a4:cb:6e:49:80:
                    5f:7a:6d:bb:fb:7a:4f:70:1f:d3:7f:91:65:6a:dc:
                    ff:77:6a:5a:3f:93:2d:5c:e7:33:b5:1f:ef:27:25:
                    6c:de:8f:f5:e9:de:5b:2c:30:b1:87:dc:ac:3e:5d:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BA:2C:7F:6D:5D:90:14:6B:57:B8:A8:D1:6F:34:64:6F:B6:41:DA
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:70:bf:d3:70:5f:0f:1a:b6:2a:d0:5a:40:b2:91:bf:66:57:
         35:11:e8:12:cb:c1:fb:5c:61:3b:d0:e7:8f:6d:c0:5b:ab:be:
         a1:d1:1b:ed:81:55:48:d7:25:df:d1:1c:8e:f2:d5:4a:f2:48:
         69:ea:f0:f7:f6:59:46:05:91:15:cc:da:36:a2:4b:48:0d:c9:
         de:0e:69:80:46:0e:a2:e3:d7:53:04:0c:35:8f:22:f5:35:1c:
         32:b2:b1:9a:cc:94:e3:74:f9:cc:82:12:fa:4d:67:a2:97:ce:
         2b:5e:49:79:03:27:09:bd:05:f0:a2:91:f1:b8:26:06:29:b0:
         12:86:f3:91:c4:2d:49:25:a6:d6:dd:d9:c7:ba:26:5b:67:75:
         51:99:f3:f1:77:06:ad:af:13:e9:10:ce:29:f7:e7:1e:ae:86:
         79:2d:29:7a:b2:b3:3c:af:14:84:ca:44:9f:af:20:bd:0b:a3:
         1e:56:4a:17:15:33:de:7d:67:21:49:45:bf:17:3c:85:e6:d6:
         d9:57:ae:52:56:da:de:62:7d:66:21:39:da:c4:c5:26:dd:3c:
         24:e2:45:92:ed:f2:ad:89:cb:83:52:eb:79:51:33:35:5b:a5:
         cf:3d:57:01:09:f9:03:7c:2b:6f:a7:7e:9e:ff:b1:7b:9b:79:
         61:35:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:47:36 2025 by rpki-client