Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
File:                     JBS5msCAHawVts3PjThpoMT_Gh0.mft (raw, json)
Hash identifier:          6Dn8xXWTzsykoqWMyEQXV1rwGC/6NdmDHekhRJeKowM=
Subject key identifier:   43:D8:58:68:BE:EB:9D:26:60:30:84:17:93:1F:A9:F1:9F:55:C2:2A
Authority key identifier: 24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
Certificate issuer:       /CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Certificate serial:       0517
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
Manifest number:          0515
Signing time:             Thu 18 Sep 2025 02:41:59 +0000
Manifest this update:     Thu 18 Sep 2025 02:41:58 +0000
Manifest next update:     Sat 20 Sep 2025 02:41:58 +0000
Files and hashes:         1: JBS5msCAHawVts3PjThpoMT_Gh0.crl (hash: aKDis9TuZNIEEn/lAzrEgZtzEuM0sAgUPDkJbcDyGAY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFD9AF, serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
        Validity
            Not Before: Sep 18 02:41:58 2025 GMT
            Not After : Sep 20 02:41:58 2025 GMT
        Subject: CN=68cb7177-a8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:73:d0:5b:93:c4:15:dc:74:57:a9:bf:91:
                    b4:f7:97:61:71:0d:a9:fe:4f:99:23:9b:d5:18:13:
                    ab:7e:d8:ae:56:b4:74:cb:74:a5:92:37:a5:61:84:
                    30:cb:2e:d3:e2:e4:a8:0a:9f:11:e3:35:6e:eb:85:
                    44:18:b3:48:c3:94:84:46:96:71:77:51:44:76:cd:
                    8d:98:9a:af:0e:51:bc:8f:04:eb:c0:cc:fd:cc:8c:
                    0b:c6:82:23:96:1b:b2:34:2d:79:7e:2a:c6:47:1b:
                    97:15:5e:20:b0:d7:80:71:50:51:a4:90:08:3f:36:
                    1a:e9:f2:b1:5c:2f:69:0b:12:19:e4:0d:b2:eb:d4:
                    54:40:a1:2d:9b:c6:5a:a5:22:df:4b:11:09:f3:8e:
                    0f:07:c5:0e:6a:c7:15:c8:73:4b:2f:68:64:5b:78:
                    07:07:95:e6:90:cf:67:14:a4:b7:90:d2:25:3c:14:
                    be:19:16:dd:a1:09:7c:b2:04:96:fa:b5:c1:ba:6e:
                    db:a6:c4:cc:f7:a5:44:a7:f3:64:ff:13:a0:8c:4a:
                    0c:3e:6b:f7:5b:90:74:da:a4:cf:e6:12:48:11:58:
                    d2:d7:e3:6f:9f:43:f7:bc:e9:e2:12:8e:c7:6e:2a:
                    fd:b1:bd:f7:0f:35:33:2f:ca:7f:51:fb:d1:0e:f5:
                    ad:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D8:58:68:BE:EB:9D:26:60:30:84:17:93:1F:A9:F1:9F:55:C2:2A
            X509v3 Authority Key Identifier:
                keyid:24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:3b:01:77:38:c2:83:70:d5:af:4f:33:3d:c6:44:6f:65:
         d8:a7:6d:b8:cf:f6:8f:2f:df:bb:7c:b2:9e:30:4f:7f:ba:27:
         3a:43:05:76:7a:53:dc:0d:31:a3:c1:f8:24:75:c7:44:41:f5:
         95:cd:06:f5:e0:f9:2d:8e:8e:7b:6e:68:8b:60:1b:a3:ad:92:
         48:0b:47:fe:bf:6e:a8:8b:59:29:ed:ac:1e:26:c7:f2:1d:ef:
         0f:53:51:bb:ce:16:6b:1d:51:50:43:b6:2c:f6:e1:d4:c3:cc:
         0a:4c:3c:9b:97:29:a2:07:c4:04:8f:25:bf:72:1e:71:96:1e:
         da:b8:dd:07:15:18:be:08:55:f0:6a:75:a5:96:f2:5f:e4:bd:
         e3:29:c6:58:20:0f:df:ab:d8:dd:0b:3d:75:58:5a:34:7f:d6:
         71:e9:0a:8a:fd:5a:88:32:da:6d:a3:ca:e9:47:25:9f:61:75:
         66:a0:ee:ff:bd:32:c8:b3:ce:8a:25:0b:7b:0f:7d:3f:e9:a0:
         5b:a8:4c:11:1a:4e:a6:05:45:a2:9c:a0:2d:a3:67:78:08:ca:
         6e:1e:74:af:22:58:f6:d0:d2:98:f3:5d:6d:25:d2:5d:ac:c4:
         48:9e:8c:8e:01:9c:23:95:45:0e:51:21:10:60:38:e7:68:63:
         d0:ae:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:03:04 2025 by rpki-client