Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
File:                     JbZLdh63yNTuwchu-qN5sDvSAGE.mft (raw, json)
Hash identifier:          QzdiHBx7oepWrPgha5BsKAseIxb0Y1ASvrf1ejRP6XQ=
Subject key identifier:   7E:6A:5D:59:05:C7:97:92:AA:7D:7C:4A:90:44:D3:71:11:80:F6:3B
Authority key identifier: 25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61
Certificate issuer:       /CN=F369FA36AF/serialNumber=25B64B761EB7C8D4EEC1C86EFAA379B03BD20061
Certificate serial:       0896
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
Manifest number:          0896
Signing time:             Fri 04 Apr 2025 01:14:00 +0000
Manifest this update:     Fri 04 Apr 2025 01:14:00 +0000
Manifest next update:     Sun 06 Apr 2025 01:14:00 +0000
Files and hashes:         1: JbZLdh63yNTuwchu-qN5sDvSAGE.crl (hash: 8R2PLBFrEurqZym1Tn5M/vKP31cY8AQzb9EfoWMauUs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Apr 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2198 (0x896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AF
        Validity
            Not Before: Apr  4 01:14:00 2025 GMT
            Not After : Apr  6 01:14:00 2025 GMT
        Subject: CN=67ef3258-b416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5b:b0:19:4a:8b:ae:5e:a9:5d:bd:07:f1:03:
                    f2:a7:df:6b:1f:9b:77:04:12:4c:3d:a9:e3:98:12:
                    81:75:bd:ce:69:59:21:24:9f:ba:65:12:2a:b2:c6:
                    38:b6:61:3b:2f:68:8a:fc:a5:60:79:82:dd:1d:11:
                    21:14:d6:eb:fa:f2:ee:16:5f:7e:b3:81:dd:0d:0c:
                    3c:da:ab:71:78:44:83:13:27:6e:1b:ba:dc:67:75:
                    04:31:e2:c3:69:67:c4:9f:98:96:90:ad:75:88:8d:
                    a2:14:c9:33:1b:95:f6:eb:54:af:39:f7:2b:b6:ad:
                    60:8f:7c:03:57:7c:ee:d7:62:fa:2b:13:7c:50:77:
                    09:63:60:7b:d4:15:c2:6b:ae:2a:79:d9:f0:15:27:
                    4b:28:58:ee:f1:ab:01:2e:5f:9c:7a:47:64:98:8d:
                    2e:5b:16:79:b9:b3:d8:af:7b:a6:94:b9:bc:5a:1f:
                    aa:cd:84:bf:b9:a5:9f:f8:f2:bb:9f:14:72:b7:ec:
                    8b:3f:a6:7d:14:cc:f1:c1:fe:bd:8f:a8:a0:df:ca:
                    0a:8b:29:4b:20:e0:05:8f:2a:12:ed:95:0b:a9:b6:
                    50:8a:91:90:94:ab:9e:c8:05:89:98:be:60:00:4b:
                    4a:d4:b4:ee:d0:ab:22:25:3a:d3:7e:8d:43:3f:96:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6A:5D:59:05:C7:97:92:AA:7D:7C:4A:90:44:D3:71:11:80:F6:3B
            X509v3 Authority Key Identifier:
                keyid:25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:dd:a7:d1:a2:cd:b9:45:04:d4:92:f1:0d:de:57:8f:09:e7:
         63:70:e4:ac:83:c2:a5:d1:d9:a6:60:25:8e:2e:cf:18:99:22:
         e1:5d:ba:6d:4f:eb:c0:34:11:c6:5c:4a:18:36:0f:79:93:1c:
         80:eb:83:e2:11:c3:9e:23:41:bb:6b:21:9f:57:99:5c:c3:55:
         05:4f:8d:aa:56:52:e3:d7:ca:8b:a4:02:4b:c0:af:3b:6e:80:
         dc:36:d1:0d:00:f6:76:4f:2f:06:d9:e1:ec:bf:b4:aa:16:c0:
         ee:1e:52:22:2e:b7:0b:88:0d:fc:c2:be:7c:79:03:5a:ac:da:
         6f:82:fc:c7:ed:4f:42:65:13:15:b4:7c:1d:ef:92:3b:4d:a0:
         2e:21:27:32:57:88:c4:e6:bf:0d:85:02:9e:b5:f9:49:f0:90:
         1f:ca:8e:c3:a2:2a:29:42:e5:d4:9d:c4:c4:fa:bf:4e:6f:57:
         27:16:96:bc:ab:f6:98:6a:e0:d1:ee:1d:ed:e8:e5:de:a4:d9:
         f1:2e:d8:58:20:65:e6:23:1b:8d:e6:80:68:da:d2:25:28:43:
         78:6e:ac:4e:68:c2:d9:63:04:9f:ec:33:dc:41:6a:73:ec:24:
         a9:c6:11:47:cc:3d:3d:65:22:5f:ad:72:30:42:9b:c0:18:c4:
         d5:62:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:19:03 2025 by rpki-client