Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.mft
File:                     5WM0RkX330scDN9ef2icLgvfkMU.mft (raw, json)
Hash identifier:          CNyixsl7wHklqU9iDj9P5vJG7byF8lYi7tiYxR/Jf/Q=
Subject key identifier:   12:5D:F2:D8:B4:E8:E7:0A:4B:96:40:F4:68:CC:1E:3B:53:16:18:B6
Authority key identifier: E5:63:34:46:45:F7:DF:4B:1C:0C:DF:5E:7F:68:9C:2E:0B:DF:90:C5
Certificate issuer:       /CN=F36999E0AF/serialNumber=E563344645F7DF4B1C0CDF5E7F689C2E0BDF90C5
Certificate serial:       057C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5WM0RkX330scDN9ef2icLgvfkMU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.mft
Manifest number:          057C
Signing time:             Mon 09 Jun 2025 02:33:19 +0000
Manifest this update:     Mon 09 Jun 2025 02:33:18 +0000
Manifest next update:     Wed 11 Jun 2025 02:33:18 +0000
Files and hashes:         1: 5WM0RkX330scDN9ef2icLgvfkMU.crl (hash: U6of2MwuhryunJX+caRzecyTNwciJ7SGHu1eeSlH4Gg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5WM0RkX330scDN9ef2icLgvfkMU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Jun 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AF, serialNumber=E563344645F7DF4B1C0CDF5E7F689C2E0BDF90C5
        Validity
            Not Before: Jun  9 02:33:18 2025 GMT
            Not After : Jun 11 02:33:18 2025 GMT
        Subject: CN=684647ef-8eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:59:62:cc:d0:30:7a:2a:2c:ca:11:25:f8:
                    fc:44:97:60:4b:2d:3f:83:68:a0:31:ca:61:e8:7d:
                    ff:a1:11:44:65:b6:c1:d7:3b:13:0b:b4:92:40:8e:
                    ad:57:ad:a3:e4:9c:8b:83:c3:d6:24:6c:0c:65:30:
                    ed:44:d5:50:21:16:5a:62:c3:7a:70:02:50:e8:32:
                    9d:6c:32:a4:cb:ca:08:7b:8a:bc:67:6c:e2:3e:02:
                    16:33:1b:46:e0:6d:7a:0c:9b:ed:ec:cd:59:45:8d:
                    16:18:6e:c4:3f:ba:74:f5:d9:50:5e:5d:d6:c7:ec:
                    34:03:45:8a:13:81:44:1c:9d:d8:d9:57:4e:3c:8c:
                    2c:bc:39:33:fb:5d:9f:cc:ae:9e:ed:c0:92:a3:d0:
                    91:c8:7b:8d:71:24:98:eb:36:e6:bd:d6:e4:6e:2e:
                    43:fd:7c:4b:c9:59:46:35:6a:22:9c:1a:df:30:6d:
                    97:37:98:a9:1f:f2:22:c3:a9:6e:98:ef:a3:b3:2b:
                    67:10:4e:de:1d:9b:b7:cd:6a:04:9f:59:8d:9f:33:
                    5d:22:7f:ac:91:7a:50:b0:43:e5:92:e6:44:38:1d:
                    f6:b5:47:4f:35:d7:77:61:5f:b3:0b:fe:cd:34:ed:
                    ce:89:48:3f:a8:a3:cc:41:86:bf:d5:c9:72:1d:a0:
                    fa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5D:F2:D8:B4:E8:E7:0A:4B:96:40:F4:68:CC:1E:3B:53:16:18:B6
            X509v3 Authority Key Identifier:
                keyid:E5:63:34:46:45:F7:DF:4B:1C:0C:DF:5E:7F:68:9C:2E:0B:DF:90:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5WM0RkX330scDN9ef2icLgvfkMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:b7:ed:6a:43:3f:ef:1c:7a:99:ea:cd:26:28:c3:c9:2c:
         f1:6a:4d:6a:f6:e9:81:83:b4:46:35:c0:40:da:2a:51:c2:31:
         17:59:7e:48:21:4f:21:87:57:ad:21:5c:a5:cf:9c:34:99:4e:
         73:c8:37:05:10:9e:f7:d3:59:97:5b:89:02:8a:92:e0:db:3f:
         43:df:b9:90:fe:1c:d5:2a:be:67:90:4f:9f:57:ab:eb:78:16:
         6b:ee:da:77:61:77:49:e5:f9:b3:aa:5e:60:f4:a6:c1:a6:a8:
         2e:1f:24:7f:9a:04:47:ef:92:8a:13:f4:50:b0:ee:df:25:61:
         5a:31:f2:4e:91:03:c5:08:49:67:30:81:59:bf:5d:24:56:5d:
         7b:47:41:4f:e3:87:c0:49:04:ad:be:3f:56:e8:02:0d:66:ed:
         39:fc:7e:6b:0d:b2:a6:aa:d4:3f:60:ce:9b:4e:e1:9a:a3:f7:
         02:b9:0c:e6:4d:51:c5:20:9f:4e:ed:e3:ee:8e:b9:5c:b0:17:
         76:f3:68:b0:06:d2:49:5f:d2:e2:df:98:b5:fa:eb:ae:1d:48:
         d9:bc:32:c7:ab:4f:04:48:cb:1b:04:d3:15:5f:4e:16:86:f6:
         6c:b9:91:f7:c2:3c:9b:5f:f9:95:96:77:45:8b:59:aa:7a:1f:
         4e:06:e4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:52:03 2025 by rpki-client