Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
File:                     cDnVox_x8yuxXUeMEJeGl7YiJlc.mft (raw, json)
Hash identifier:          UAopeZqiERnHO/bbKgKS5P4dSsOFkyLEZLL6k47WTKE=
Subject key identifier:   E0:7C:EC:5A:B0:1B:6B:03:FE:9B:61:04:2E:9A:9D:F7:AB:6B:EF:85
Authority key identifier: 70:39:D5:A3:1F:F1:F3:2B:B1:5D:47:8C:10:97:86:97:B6:22:26:57
Certificate issuer:       /CN=F369A625AF/serialNumber=7039D5A31FF1F32BB15D478C10978697B6222657
Certificate serial:       08DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
Manifest number:          08DA
Signing time:             Wed 04 Jun 2025 01:23:55 +0000
Manifest this update:     Wed 04 Jun 2025 01:23:54 +0000
Manifest next update:     Fri 06 Jun 2025 01:23:54 +0000
Files and hashes:         1: cDnVox_x8yuxXUeMEJeGl7YiJlc.crl (hash: Uf8vAnjBh7RkdU5jWU7W3vCh+WmVFTChFFQcx8kGlxs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267 (0x8db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A625AF, serialNumber=7039D5A31FF1F32BB15D478C10978697B6222657
        Validity
            Not Before: Jun  4 01:23:54 2025 GMT
            Not After : Jun  6 01:23:54 2025 GMT
        Subject: CN=683fa02b-c790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:c5:75:d7:8f:0a:b5:51:21:c5:7d:30:4d:
                    18:ce:78:74:8c:90:68:71:d3:79:21:dd:c5:8c:b5:
                    57:76:86:39:ed:be:cf:d4:47:28:30:c5:7b:1d:52:
                    a6:5d:d0:3a:54:69:01:5b:55:fb:0b:25:b5:4a:aa:
                    d5:e6:8f:06:26:a2:67:60:ee:af:26:84:3c:8b:f4:
                    58:14:f3:b6:3f:8e:89:4d:4e:b4:e3:40:8d:39:52:
                    c3:a9:ee:09:64:99:a5:70:e0:c7:ec:13:a1:a0:a2:
                    b2:b6:f2:f1:f9:b1:09:b5:7f:86:34:0d:fc:46:d7:
                    11:59:7e:26:6c:99:f7:4b:5b:0e:38:b5:f6:f6:ca:
                    38:56:3b:79:d5:48:57:90:cc:89:87:36:82:05:fc:
                    46:40:8c:fa:22:93:3c:fc:78:fb:82:55:71:3e:08:
                    f9:ef:ec:b3:06:a6:30:05:d4:4b:e0:b8:4f:06:10:
                    37:27:4b:6f:9c:f8:dd:27:a3:e4:95:4e:d5:3b:94:
                    3a:1a:92:82:51:ff:4b:b4:ce:9e:8c:43:a1:0c:f0:
                    fe:c4:32:01:27:3d:8a:1a:3c:73:2d:54:c7:15:ad:
                    61:84:d9:51:9d:2d:f8:93:35:c2:a3:90:a8:9a:c1:
                    70:c7:8a:4c:db:75:d5:f4:e1:11:78:d6:2b:63:0f:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7C:EC:5A:B0:1B:6B:03:FE:9B:61:04:2E:9A:9D:F7:AB:6B:EF:85
            X509v3 Authority Key Identifier:
                keyid:70:39:D5:A3:1F:F1:F3:2B:B1:5D:47:8C:10:97:86:97:B6:22:26:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7a:e1:3c:72:f7:d9:ec:6f:a2:06:29:40:36:32:91:c0:b2:
         a0:55:d6:68:57:64:55:35:d9:fa:dc:3e:4f:bd:f1:6e:1b:cc:
         ad:ba:09:ae:75:d9:de:40:dd:ab:f3:a9:32:e9:60:f9:65:b7:
         f2:53:00:21:8b:0a:8c:fa:92:ca:06:4c:e1:8d:13:88:f2:f1:
         69:1f:3b:3e:94:fd:74:95:7c:3c:d2:5d:84:68:11:99:5c:8b:
         17:d4:07:cd:06:7f:9f:3b:2f:07:58:4c:7b:ce:6d:27:68:f7:
         29:f4:ec:95:fb:44:2c:72:00:bd:19:f0:5e:63:e0:02:b0:38:
         dc:95:58:38:9c:7a:55:d3:12:fd:ef:4b:b4:0e:f8:63:c5:c3:
         47:6e:52:43:b3:d0:93:c9:2e:a5:c0:a7:74:0c:f3:c8:bf:cc:
         e3:19:2b:d1:4c:af:4e:d8:86:9c:6f:6f:6f:14:3e:ef:ed:3f:
         c0:49:f4:74:97:e8:53:42:c8:6b:c2:44:98:d4:b1:f6:39:8e:
         0a:60:7a:6d:96:93:2d:57:0f:f9:94:d7:19:8d:fe:9e:71:9e:
         2e:17:85:84:5b:95:58:5a:a5:03:0b:b7:10:9b:a6:29:95:02:
         3e:d9:37:b1:19:f0:6a:05:db:60:96:13:ae:46:7e:28:a9:b1:
         9e:5c:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:28:09 2025 by rpki-client