Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
File:                     yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft (raw, json)
Hash identifier:          hIJum1J+I6CcwVO91XKy3ozj/TfXyRaCTeB3/u9ApjE=
Subject key identifier:   67:B9:09:6E:75:6F:62:12:83:86:AC:75:93:35:7B:08:50:19:7A:31
Authority key identifier: CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F
Certificate issuer:       /CN=F36B905AAF/serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
Certificate serial:       17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
Manifest number:          17
Signing time:             Sat 07 Jun 2025 05:21:09 +0000
Manifest this update:     Sat 07 Jun 2025 05:21:08 +0000
Manifest next update:     Mon 09 Jun 2025 05:21:08 +0000
Files and hashes:         1: yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl (hash: RTx+yd7YeqyI8U2xJDUNJ6C/ckb6tty0aStbK2GFMFk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 05:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B905AAF, serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
        Validity
            Not Before: Jun  7 05:21:08 2025 GMT
            Not After : Jun  9 05:21:08 2025 GMT
        Subject: CN=6843cc45-bb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:2e:34:c3:e5:a9:18:be:3e:ac:11:72:97:
                    f3:01:c9:c7:30:a0:e0:ae:bc:4c:0d:87:c6:4e:fd:
                    f0:ea:eb:7b:8a:94:5d:be:cc:eb:c2:e1:82:0b:72:
                    5c:56:32:f5:fc:0a:6d:6c:33:4d:6d:f6:2f:83:68:
                    2c:6f:a7:8c:95:b9:83:6b:77:e1:93:4e:94:fb:7b:
                    2f:e8:a7:c8:78:86:a9:93:b5:4c:d0:44:f6:c9:46:
                    f5:63:1e:43:51:00:79:ac:9a:f5:63:8d:ec:2e:03:
                    29:f4:3d:24:47:f9:d6:93:45:30:8b:80:f6:eb:72:
                    e7:7b:cb:55:7c:a5:93:1c:67:f4:53:f3:3a:cc:b5:
                    39:9c:5b:fd:ff:51:7a:a5:02:ce:29:e3:28:5d:c6:
                    b4:4c:2d:a4:f9:ce:4a:7b:86:af:c9:07:12:1c:0a:
                    80:1b:41:ab:86:56:88:e4:a5:16:ab:5d:da:b8:17:
                    30:e6:09:6f:66:f0:70:33:13:df:c2:96:04:64:7c:
                    03:e2:79:1f:41:13:66:55:f5:0d:d5:fc:1c:b0:9e:
                    3e:69:cc:bf:58:46:60:10:6f:43:3a:c1:17:1b:b3:
                    3b:8b:27:f1:ed:3e:f4:14:a6:6f:99:24:40:65:d8:
                    5d:39:78:fe:4e:b0:8f:76:26:f4:2d:a3:45:7d:cf:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B9:09:6E:75:6F:62:12:83:86:AC:75:93:35:7B:08:50:19:7A:31
            X509v3 Authority Key Identifier:
                keyid:CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:bd:96:e7:23:18:9f:67:d7:3e:f2:8b:a1:9d:c9:62:5a:da:
         25:c5:90:a8:fb:44:a9:ef:b9:14:6a:af:b8:72:13:66:b3:27:
         5e:2f:76:28:e9:cf:65:35:d6:05:7b:b2:31:c6:0a:8c:d1:c9:
         5d:a3:23:70:4d:0a:90:64:cf:c4:f1:82:f6:2e:53:8f:cd:73:
         04:dc:3f:83:0c:ed:d5:72:8c:18:1a:01:94:fe:f8:0b:6a:24:
         bd:60:86:db:a2:5e:ff:46:07:61:6a:40:1f:6b:a0:15:97:08:
         2f:33:29:d1:49:e5:61:94:45:fe:81:8c:2b:ba:cf:25:1b:6b:
         02:a4:77:bd:21:59:b7:00:a4:39:49:fd:78:37:6e:4c:71:96:
         e1:69:84:a1:70:57:69:12:93:ba:0c:68:ca:80:f4:f4:a8:ca:
         fc:e2:d9:6c:d0:12:7b:96:33:99:34:0b:29:5b:6c:8c:5e:8a:
         54:0b:0d:1f:1d:ee:79:7a:16:ee:ee:23:69:00:83:d6:7a:38:
         1b:ab:3b:97:41:70:4c:aa:67:57:01:3b:a3:dd:bd:6e:e2:df:
         2f:7d:38:b7:86:64:b3:57:aa:4f:dc:83:40:4f:78:ce:9e:9b:
         0f:73:25:aa:52:59:ef:40:1e:33:0a:65:94:04:f2:99:70:01:
         db:81:a8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:02:25 2025 by rpki-client