Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
File:                     pZcz3KUuEYvmm3dYljNX3ajFFCg.mft (raw, json)
Hash identifier:          LdiPsMw9S0LXS8rrcaWD/KwJ29zWQCUQMAPQdyvxl28=
Subject key identifier:   CD:03:03:2C:DE:02:E4:D7:7D:3C:D9:0E:44:A2:BA:85:64:79:89:74
Authority key identifier: A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28
Certificate issuer:       /CN=F36AC63AAF/serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
Certificate serial:       02A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
Manifest number:          02A6
Signing time:             Wed 04 Jun 2025 03:58:23 +0000
Manifest this update:     Wed 04 Jun 2025 03:58:22 +0000
Manifest next update:     Fri 06 Jun 2025 03:58:22 +0000
Files and hashes:         1: pZcz3KUuEYvmm3dYljNX3ajFFCg.crl (hash: TkZzpBs2PFUuhefDZCvHHgJOwbgp2sgmZh/kmGk3iWM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 678 (0x2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC63AAF, serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
        Validity
            Not Before: Jun  4 03:58:22 2025 GMT
            Not After : Jun  6 03:58:22 2025 GMT
        Subject: CN=683fc45f-6549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:a7:13:19:10:1e:1b:62:34:97:b2:5b:db:
                    f9:9c:65:7e:b6:5c:48:a8:58:e4:8a:d4:0c:3c:53:
                    f9:ad:6c:5a:61:93:a4:eb:c2:71:a3:0c:ff:fc:27:
                    03:19:1c:5a:88:32:fe:22:c8:96:a4:16:6c:67:cc:
                    b1:75:8e:3b:0c:08:4c:af:da:08:d4:38:d2:88:b9:
                    c4:be:8f:72:c0:cf:74:84:20:2f:5e:6a:93:15:8a:
                    d7:9a:a2:96:e1:45:df:97:99:ee:c3:42:b9:c3:dc:
                    c3:d1:fe:aa:4f:d6:e3:bd:5d:5a:76:66:a7:2a:31:
                    8d:22:18:85:a7:09:f7:22:d1:30:32:df:1b:72:df:
                    68:b5:60:8c:f6:a1:6f:07:09:ec:15:3f:cf:46:d1:
                    b9:ba:8f:4b:75:cb:11:ca:e4:0f:75:e0:b4:a0:1a:
                    41:e1:ec:1a:0d:1c:4e:77:1e:09:5c:d1:5e:a9:32:
                    c3:76:48:45:9c:38:29:0a:f8:ea:f6:98:d3:81:37:
                    71:8c:43:88:67:27:6b:e2:dc:85:e1:a7:4e:13:2d:
                    a2:c3:63:74:ac:32:02:8a:b1:89:7d:dd:e8:81:01:
                    ab:56:6b:b5:25:ae:a7:c7:98:9c:f7:8c:db:71:b5:
                    4f:dc:21:30:16:4e:fd:88:55:79:36:f2:38:41:06:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:03:03:2C:DE:02:E4:D7:7D:3C:D9:0E:44:A2:BA:85:64:79:89:74
            X509v3 Authority Key Identifier:
                keyid:A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c6:fc:1d:25:60:97:fe:23:7c:bd:cb:3c:d3:2d:45:48:ef:
         5a:74:a9:ee:c5:5e:fd:90:28:29:88:2e:44:9b:ab:af:a5:94:
         dc:b6:33:bb:82:00:7e:e7:10:1a:35:61:35:aa:b3:7b:df:ec:
         19:07:64:ca:d0:6e:f3:c8:51:e0:6e:c5:34:34:fd:87:95:c1:
         da:24:c2:4a:e4:09:7d:47:2d:ab:76:d3:20:bd:35:ea:a3:8b:
         6c:d1:09:53:a9:7b:53:7b:6a:da:a7:cd:8b:27:cd:cb:88:39:
         2a:2d:d6:17:3f:ce:18:cb:be:63:cb:eb:1c:f9:81:f6:a5:9b:
         b7:39:d8:71:7d:81:de:96:61:be:0c:e7:4d:86:28:40:5a:f5:
         91:a4:7b:08:55:d8:7e:b4:d9:36:9e:d8:4c:12:79:36:97:64:
         8c:5f:c2:57:03:58:ab:df:1c:19:94:00:ae:e7:e4:5f:a0:87:
         c3:ab:4d:45:7b:be:52:e0:c4:1f:bb:d0:af:c0:24:4a:75:c9:
         c0:6c:22:41:4c:b9:e4:95:99:fa:ee:f7:14:ea:ce:2f:1e:e2:
         41:a3:e1:25:b7:db:f2:1e:a4:39:47:f6:37:5f:6f:60:69:ac:
         6d:b6:60:e4:02:61:a5:1c:69:ac:9d:b5:46:7e:13:b2:8a:a3:
         4c:54:f4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:38:17 2025 by rpki-client