Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
File:                     _VmsIHc1mw1yPSCqmZqOFqhLQZM.mft (raw, json)
Hash identifier:          lMU9JY2ycRN+5m+/ITzqj3Gx+EHLQQ6/GLeK4XSPDHA=
Subject key identifier:   CB:D5:DF:AA:7D:B8:71:71:D5:68:71:EA:8E:BF:37:17:A8:B3:82:74
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Certificate issuer:       /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial:       0D34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
Manifest number:          0D33
Signing time:             Fri 06 Jun 2025 01:02:27 +0000
Manifest this update:     Fri 06 Jun 2025 01:02:27 +0000
Manifest next update:     Sun 08 Jun 2025 01:02:27 +0000
Files and hashes:         1: _VmsIHc1mw1yPSCqmZqOFqhLQZM.crl (hash: Omng8uWE6rndDjFpuOCg88QgISFtS8BPAx0wr+1MM4Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3380 (0xd34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Validity
            Not Before: Jun  6 01:02:27 2025 GMT
            Not After : Jun  8 01:02:27 2025 GMT
        Subject: CN=68423e23-1b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:15:1e:41:4d:2b:37:f4:d1:0b:0c:0f:d4:
                    a0:39:3c:dc:0c:0a:ce:46:e6:50:82:8a:b4:f1:43:
                    90:d4:ac:56:01:05:90:83:aa:96:fd:39:59:12:21:
                    a2:70:85:3f:41:66:94:1a:60:2d:16:53:4c:66:51:
                    3f:ea:0e:be:de:fd:8b:13:72:eb:ed:7c:3e:ae:5d:
                    a6:c4:77:7c:e9:6b:96:c2:c1:23:a8:e9:c0:e0:cc:
                    6e:5c:b7:14:bc:2f:96:8f:5c:a6:b5:2d:06:73:50:
                    80:ad:91:a0:13:15:35:95:9f:cd:d9:ea:04:1b:df:
                    d0:67:d4:e6:2a:2d:d1:ae:0e:a2:7c:ae:0e:61:9a:
                    ee:ee:2f:73:7d:d6:b8:e9:2b:b5:72:b7:c1:e2:37:
                    26:ef:8b:55:c2:e3:34:e3:9d:75:78:70:ad:f1:59:
                    ae:b9:78:30:09:94:43:45:1b:65:ee:5d:a1:07:fe:
                    2d:2c:21:1f:c4:47:7a:5f:25:c8:26:5f:83:e5:58:
                    7c:42:7f:87:d8:69:2b:92:f8:c4:1a:16:51:c9:0d:
                    f2:e2:19:bd:67:db:da:91:ff:d7:34:90:9b:31:c4:
                    49:20:d1:56:bf:01:e4:3b:7e:2e:63:22:d9:5d:35:
                    16:8f:f3:0b:82:89:af:41:b9:08:23:18:61:30:78:
                    a5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D5:DF:AA:7D:B8:71:71:D5:68:71:EA:8E:BF:37:17:A8:B3:82:74
            X509v3 Authority Key Identifier:
                keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:dc:0c:6e:fb:22:d6:cd:a1:ca:4e:ae:e0:8c:36:4a:50:aa:
         13:50:46:74:6a:4b:fe:5d:8e:97:0f:b3:2a:18:21:92:ed:d2:
         a8:0a:b0:89:79:f1:13:dc:df:ff:f2:e0:07:45:e6:fd:25:51:
         56:37:31:4c:74:42:58:9b:69:9a:1a:be:d6:d5:ba:b1:17:93:
         d6:2c:c1:47:af:87:05:ce:5a:dc:7e:9d:38:f2:b7:30:6d:cc:
         65:da:5f:22:9a:dc:5d:9e:1c:20:2a:f7:1a:0a:77:d1:31:c4:
         40:6e:9d:82:7a:b3:00:88:f0:71:a1:ed:9b:52:2b:9d:c5:af:
         f2:db:0e:8b:09:46:5c:71:e9:e1:f3:f3:44:a3:85:2d:6b:17:
         95:0d:7b:f9:11:a2:db:b7:dc:d5:ff:13:83:74:7b:b2:78:a8:
         67:c6:2c:b3:c8:fa:eb:9d:5a:71:8d:92:6b:d0:af:6c:5c:f5:
         a9:7a:a3:16:00:7b:92:5b:7d:fc:92:c6:02:cb:9b:6f:90:04:
         d3:0c:f2:1a:11:be:fa:3e:7f:2a:8b:3f:c9:d0:86:0e:c7:f8:
         af:f9:e8:8c:12:22:21:6f:0d:08:27:2b:87:ce:8a:b3:63:65:
         ca:5b:29:6d:8a:ea:b4:f9:2a:4c:d7:30:90:55:54:87:83:5c:
         1b:24:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:45:18 2025 by rpki-client