Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
File:                     48LJS_VpO0HwWh1WV9GnhLXVcmE.mft (raw, json)
Hash identifier:          WW1UthzK4cMfdKXVQmYcS2IvhuAfxqUHkVWWdQuCTuQ=
Subject key identifier:   05:68:DD:0B:47:05:41:F8:2C:BD:5B:34:FF:66:59:BC:33:15:7D:96
Authority key identifier: E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61
Certificate issuer:       /CN=F3695CC5RI/serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
Certificate serial:       0529
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
Manifest number:          0528
Signing time:             Sat 05 Apr 2025 01:51:40 +0000
Manifest this update:     Sat 05 Apr 2025 01:51:40 +0000
Manifest next update:     Mon 07 Apr 2025 01:51:40 +0000
Files and hashes:         1: 48LJS_VpO0HwWh1WV9GnhLXVcmE.crl (hash: 92kpC9LrN7qq/5oNs50XlI3ru9p0hMwhNsBVENpf+O4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                          rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1321 (0x529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695CC5RI
        Validity
            Not Before: Apr  5 01:51:40 2025 GMT
            Not After : Apr  7 01:51:40 2025 GMT
        Subject: CN=67f08cac-987d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:ef:5b:02:f8:f4:ee:c5:1f:fb:8c:cb:17:
                    17:75:9c:f4:76:f5:62:c2:fb:ab:bc:36:a4:aa:5e:
                    dd:58:a3:e2:21:fe:aa:e6:1d:30:0e:0d:0a:24:a7:
                    58:08:65:f5:a6:80:91:67:98:1a:0f:e2:82:13:5e:
                    8e:6a:47:39:f3:ff:16:a3:87:5f:81:8d:54:73:15:
                    89:a9:a7:29:d2:ca:96:9b:b9:d9:7c:b4:6f:a2:79:
                    85:36:b3:ea:93:e5:88:b0:26:68:d8:1b:f6:c7:32:
                    b7:42:8a:22:2d:90:4e:da:59:76:74:61:e4:bb:ff:
                    09:17:9c:73:fe:4a:eb:0e:1d:63:dd:8b:00:50:a0:
                    b9:c5:ee:0a:af:fd:f0:6f:46:1c:d5:a3:55:72:6d:
                    52:de:92:f4:af:61:58:6f:19:a8:c7:d5:6c:6d:e2:
                    91:67:9d:4c:3a:99:99:f3:75:9d:36:f5:81:49:7c:
                    6e:95:14:50:8b:22:71:27:9d:ff:65:50:a3:e8:fc:
                    7f:75:54:bd:3a:22:ae:87:00:12:40:e7:97:81:64:
                    64:8e:3c:74:13:7b:aa:cb:41:93:47:63:db:5e:33:
                    ed:07:5f:ee:35:27:66:57:22:51:b9:b0:eb:b4:8d:
                    5e:3d:f2:9d:a8:28:79:aa:25:bd:39:3a:e0:3d:94:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:68:DD:0B:47:05:41:F8:2C:BD:5B:34:FF:66:59:BC:33:15:7D:96
            X509v3 Authority Key Identifier:
                keyid:E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5a:e1:4b:31:e8:58:21:c4:a2:e8:bb:48:92:fe:34:27:d1:
         06:49:c6:02:b8:59:29:ba:42:f9:b7:9b:73:89:ec:1d:c9:bc:
         de:60:ec:67:ea:39:90:87:2f:14:15:79:75:1b:5c:4a:14:04:
         b8:9f:5b:61:6a:3b:ac:82:b4:2f:ab:b1:73:c2:e0:42:e9:1d:
         d2:60:59:d3:79:30:7b:68:b4:86:99:50:12:86:d6:81:32:1c:
         6f:f1:72:13:7c:6c:f6:79:d9:d7:13:ee:45:31:c8:18:05:7e:
         7f:e7:92:58:43:b0:66:f9:41:7e:b5:36:01:8c:ab:9d:44:2d:
         17:10:d5:7e:8e:01:dd:a9:5d:6b:34:14:f0:89:ac:75:05:b1:
         79:d3:cc:7e:4e:f0:19:98:8e:8f:8c:0a:ed:94:6d:f6:01:74:
         2c:45:33:34:96:8b:69:a7:08:58:0c:27:5b:d5:07:94:00:7d:
         6b:73:55:81:e6:0d:92:39:2c:af:8f:34:c4:53:10:0c:f6:7f:
         9f:c5:7c:3f:56:a0:e7:6c:23:50:1a:64:c6:19:77:e7:a4:e0:
         c8:a5:cd:f2:5d:37:db:11:43:44:1f:2f:cd:fb:ec:e6:49:be:
         32:a5:76:08:c5:94:e7:1e:77:fe:3f:d0:e6:c5:fe:7b:72:2d:
         26:5b:de:dc
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVDQzVSSTExMC8GA1UEBRMoRTNDMkM5NEJGNTY5M0I0MUYwNUExRDU2NTdEMUE3
ODRCNUQ1NzI2MTAeFw0yNTA0MDUwMTUxNDBaFw0yNTA0MDcwMTUxNDBaMBgxFjAU
BgNVBAMTDTY3ZjA4Y2FjLTk4N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZ1u9bAvj07sUf+4zLFxd1nPR29WLC+6u8NqSqXt1Yo+Ih/qrmHTAODQok
p1gIZfWmgJFnmBoP4oITXo5qRznz/xajh1+BjVRzFYmppynSypabudl8tG+ieYU2
s+qT5YiwJmjYG/bHMrdCiiItkE7aWXZ0YeS7/wkXnHP+SusOHWPdiwBQoLnF7gqv
/fBvRhzVo1VybVLekvSvYVhvGajH1Wxt4pFnnUw6mZnzdZ029YFJfG6VFFCLInEn
nf9lUKPo/H91VL06Iq6HABJA55eBZGSOPHQTe6rLQZNHY9teM+0HX+41J2ZXIlG5
sOu0jV498p2oKHmqJb05OuA9lCsnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUBWjd
C0cFQfgsvVs0/2ZZvDMVfZYwHwYDVR0jBBgwFoAU48LJS/VpO0HwWh1WV9GnhLXV
cmEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1Q0M1L0Y1QTgxRDQyMjExQjExRUNCQzUwRTIyQkQ4QTAxNENFLzQ4TEpT
X1ZwTzBId1doMVdWOUduaExYVmNtRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzQ4TEpTX1ZwTzBId1doMVdWOUduaExYVmNtRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTVDQzUvRjVBODFENDIyMTFCMTFFQ0JDNTBFMjJCRDhBMDE0
Q0UvNDhMSlNfVnBPMEh3V2gxV1Y5R25oTFhWY21FLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcWuFLMehYIcSi6LtIkv40J9EGScYCuFkp
ukL5t5tziewdybzeYOxn6jmQhy8UFXl1G1xKFAS4n1thajusgrQvq7FzwuBC6R3S
YFnTeTB7aLSGmVAShtaBMhxv8XITfGz2ednXE+5FMcgYBX5/55JYQ7Bm+UF+tTYB
jKudRC0XENV+jgHdqV1rNBTwiax1BbF508x+TvAZmI6PjArtlG32AXQsRTM0lotp
pwhYDCdb1QeUAH1rc1WB5g2SOSyvjzTEUxAM9n+fxXw/VqDnbCNQGmTGGXfnpODI
pc3yXTfbEUNEHy/N++zmSb4ypXYIxZTnHnf+P9Dmxf57ci0mW97c
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:16 2025 by rpki-client