Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
File:                     sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft (raw, json)
Hash identifier:          XJUNGt7MDcccy74+jO1a27DVgzRmeGBUfa+aIgy+FCY=
Subject key identifier:   43:EC:AD:01:FE:C5:A9:23:FB:58:B5:48:D9:93:9A:41:C6:0B:7E:BF
Authority key identifier: B1:B3:DD:CE:55:30:72:00:10:A9:9E:14:F2:52:B9:74:30:8A:B7:14
Certificate issuer:       /CN=F36BD97CAF/serialNumber=B1B3DDCE5530720010A99E14F252B974308AB714
Certificate serial:       0516
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
Manifest number:          0516
Signing time:             Thu 03 Apr 2025 01:53:30 +0000
Manifest this update:     Thu 03 Apr 2025 01:53:30 +0000
Manifest next update:     Sat 05 Apr 2025 01:53:30 +0000
Files and hashes:         1: sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl (hash: Z8T30J6XzaGHCziG5wrvJAFxlvkgJHSTlA60JMnTPa0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1302 (0x516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAF
        Validity
            Not Before: Apr  3 01:53:30 2025 GMT
            Not After : Apr  5 01:53:30 2025 GMT
        Subject: CN=67edea1a-4ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:29:de:1d:e0:15:46:60:68:13:d5:b4:59:
                    39:fe:da:4b:5a:83:eb:9b:90:b7:db:b9:a6:cf:c2:
                    41:e3:5d:a5:a9:a0:4f:41:54:55:f9:04:81:d3:fd:
                    a3:2f:91:f8:b6:1b:2e:73:d5:f2:ab:6c:3a:67:7e:
                    7c:bd:0c:be:2c:bf:5e:b8:aa:1f:41:0b:c8:5a:3c:
                    21:9c:4e:9e:ef:19:1d:e4:1f:fc:fc:ad:f7:62:af:
                    15:de:66:7d:5a:aa:66:58:0e:b0:dd:3f:98:b0:17:
                    a9:f0:b9:51:8a:a9:e9:09:89:2e:26:54:ce:bb:73:
                    27:e3:17:a5:62:17:95:29:5b:0a:a0:76:7b:cb:3a:
                    21:ed:39:89:22:38:fe:8c:84:3b:1f:ae:e1:c2:18:
                    2a:01:0b:2e:80:66:ca:67:24:63:f4:1c:40:df:27:
                    e7:e0:5d:90:d8:15:3d:d0:0d:42:a4:53:29:e8:e3:
                    5d:2e:39:ef:9f:e6:1b:83:96:23:11:75:4f:3b:31:
                    a3:ce:f8:f6:13:9a:70:4f:e8:5c:ba:e3:3f:d9:22:
                    91:05:de:b3:ac:22:f3:67:88:a6:fb:2b:6e:db:19:
                    06:b0:3d:76:7e:2a:67:ad:07:17:11:03:42:aa:6b:
                    c5:95:63:03:2a:7e:1b:5c:65:a6:b4:60:92:93:0f:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EC:AD:01:FE:C5:A9:23:FB:58:B5:48:D9:93:9A:41:C6:0B:7E:BF
            X509v3 Authority Key Identifier:
                keyid:B1:B3:DD:CE:55:30:72:00:10:A9:9E:14:F2:52:B9:74:30:8A:B7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ea:a1:fa:08:45:69:57:30:7d:fa:da:00:44:f7:41:bc:d5:
         d7:82:30:64:ce:a7:bd:46:f6:13:40:44:08:e0:53:f3:e5:d6:
         e5:4d:be:84:3c:19:8c:a6:d1:2f:e1:b0:d7:98:8c:23:90:04:
         55:20:60:5e:0d:bf:8a:f3:e7:4a:4f:60:9e:ef:51:4d:d7:99:
         f4:a5:09:83:c6:ec:cd:ec:6d:fa:ba:08:dd:62:2f:fb:0c:e2:
         51:bd:12:25:1f:0c:1d:27:33:b0:3e:eb:12:c3:e2:b6:35:6a:
         db:41:a0:20:41:61:6e:4d:fc:e2:fb:83:91:ee:20:62:42:7f:
         27:56:07:05:21:29:0f:e4:b7:03:67:a6:9b:25:d9:f7:5f:c5:
         fc:dc:23:a4:59:d7:56:b4:7f:60:6b:4f:3e:e2:3f:29:dc:e0:
         fa:03:aa:2b:4a:cb:bb:aa:d4:28:ad:37:22:cb:24:88:1a:cc:
         e1:b1:a1:27:3b:07:30:b7:9e:ed:5f:9c:ab:18:74:d4:60:ae:
         58:23:ff:f1:5a:6d:b4:3d:64:1c:b0:b6:3c:b1:b4:3d:9e:12:
         cc:c0:bb:bd:13:0b:73:bd:de:ac:8c:ed:6a:7a:d4:51:a2:0f:
         d0:ea:24:d3:cc:03:3f:63:ce:32:52:af:6c:4b:e6:7d:75:6e:
         16:b7:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:38:12 2025 by rpki-client