Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
File:                     -ardXUWuw8xVsfhJ4vzOB289bjQ.mft (raw, json)
Hash identifier:          0Flo4EK8HLueHTuwMRVngUp1Y27hoZjNdY1xe//WAUs=
Subject key identifier:   D1:D9:0F:AD:89:17:1B:2D:B8:55:F6:4F:57:39:99:A5:32:35:1F:D3
Authority key identifier: F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34
Certificate issuer:       /CN=F36AF9EEAF/serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
Certificate serial:       0EDA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
Manifest number:          0EC1
Signing time:             Wed 04 Jun 2025 00:51:11 +0000
Manifest this update:     Wed 04 Jun 2025 00:51:10 +0000
Manifest next update:     Fri 06 Jun 2025 00:51:10 +0000
Files and hashes:         1: -ardXUWuw8xVsfhJ4vzOB289bjQ.crl (hash: wNLszR9LXQh3WJ4Jg86mX4e0KndFgbifi7HoiVdc9Qc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3802 (0xeda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AF9EEAF, serialNumber=F9AADD5D45AEC3CC55B1F849E2FCCE076F3D6E34
        Validity
            Not Before: Jun  4 00:51:10 2025 GMT
            Not After : Jun  6 00:51:10 2025 GMT
        Subject: CN=683f987f-8b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:83:f4:fb:77:bb:a1:78:ee:ba:eb:4c:94:
                    a0:f3:92:d5:eb:11:a4:e0:9f:9e:ae:93:92:6a:fa:
                    f7:70:ec:b4:75:e9:13:b1:7b:cc:af:72:ba:7c:9b:
                    2e:b7:66:68:24:d9:52:01:00:da:e7:4b:1f:86:ab:
                    fc:7b:a5:d7:93:30:9e:d9:71:dc:84:40:21:52:ee:
                    ed:78:b9:6e:49:73:3f:53:b4:ca:ae:c6:d6:67:11:
                    11:8b:a1:3e:26:e6:0e:39:23:68:31:23:66:e1:6f:
                    33:1b:4f:ea:16:4a:e9:91:39:f3:21:d1:38:1d:20:
                    4a:67:13:28:16:79:01:88:88:4d:5a:4c:f8:c3:8b:
                    41:9b:76:90:98:bd:5b:ad:19:ec:92:3a:1b:52:04:
                    50:cc:06:79:85:fe:ed:bc:c6:21:fb:e4:a0:40:cf:
                    8a:e4:96:d9:d4:23:a6:89:f3:04:7e:f5:5d:a5:e1:
                    fc:ed:86:61:8b:6a:09:8d:ed:de:d0:ac:4c:b1:5f:
                    51:ed:e7:d8:25:1d:20:06:16:76:ce:5a:8c:a1:4f:
                    c8:47:d2:b8:35:8e:56:b2:0a:cb:c0:11:01:fc:49:
                    3f:b9:ad:25:75:42:24:31:7d:06:6a:2e:3f:b7:37:
                    42:90:78:0b:28:f1:3c:31:41:8d:eb:22:24:50:0e:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D9:0F:AD:89:17:1B:2D:B8:55:F6:4F:57:39:99:A5:32:35:1F:D3
            X509v3 Authority Key Identifier:
                keyid:F9:AA:DD:5D:45:AE:C3:CC:55:B1:F8:49:E2:FC:CE:07:6F:3D:6E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-ardXUWuw8xVsfhJ4vzOB289bjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AF9EE/90DED0CC0DCC11E59C25B724F8AEA228/-ardXUWuw8xVsfhJ4vzOB289bjQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:23:a6:92:0b:41:bc:92:62:78:1f:b8:6c:b7:2c:03:c8:c4:
         e3:84:eb:a5:4e:50:4b:4d:d8:ff:a7:91:ab:55:52:3e:08:e6:
         d8:ae:cf:85:e8:a4:1d:5a:81:da:98:9a:de:1d:dd:3e:6f:ee:
         45:2d:f0:8f:1d:c0:83:af:e3:02:55:4b:da:f7:47:32:d0:39:
         73:f9:dd:85:ca:4e:fd:28:5b:90:9d:e7:2e:ff:9a:2a:46:26:
         80:ca:21:e1:15:47:b9:26:6f:11:b9:02:10:1f:9b:2b:2a:ff:
         ab:46:d7:8d:3e:f7:a7:46:61:f5:a9:04:4a:d9:b1:8c:94:60:
         82:e7:d7:2c:11:30:8d:ee:b5:ce:f2:a5:00:c2:37:dc:5e:de:
         09:96:5b:ac:19:6d:69:5d:1b:9e:d4:94:de:e0:44:70:17:cd:
         68:ba:0f:c1:3c:fd:fe:46:d4:cd:c4:02:74:4b:9c:22:28:0b:
         da:ad:33:84:06:f7:b1:ff:1e:d4:a7:9a:54:99:a2:44:56:3a:
         51:a4:4f:6c:df:e9:37:b2:b7:64:86:2b:52:8a:be:10:b4:b2:
         cd:12:03:2c:53:3a:c7:82:16:59:e7:3a:8d:20:6e:dc:61:17:
         10:31:1f:c6:83:5c:53:d3:a5:f3:ca:fc:99:a2:d7:71:96:42:
         a9:d8:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:23:36 2025 by rpki-client