Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
File:                     bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft (raw, json)
Hash identifier:          MYQH9S5qQeTeHw6yxNl4daD4eangZF3Zcxb8WKsBMt0=
Subject key identifier:   40:2D:2C:70:93:10:7A:25:38:AB:8E:06:69:32:BB:E8:6E:58:0F:0C
Authority key identifier: 6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE
Certificate issuer:       /CN=F36C3584AF/serialNumber=6C0B46384E939A20D778364656645013B5F766FE
Certificate serial:       032A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
Manifest number:          032A
Signing time:             Fri 06 Jun 2025 03:39:00 +0000
Manifest this update:     Fri 06 Jun 2025 03:38:59 +0000
Manifest next update:     Sun 08 Jun 2025 03:38:59 +0000
Files and hashes:         1: bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl (hash: ljXBlU8BOSSFxExkeeShs81Q7ZOl6TkluxaZZeUKatA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 03:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3584AF, serialNumber=6C0B46384E939A20D778364656645013B5F766FE
        Validity
            Not Before: Jun  6 03:38:59 2025 GMT
            Not After : Jun  8 03:38:59 2025 GMT
        Subject: CN=684262d4-fde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:52:fa:0f:4f:dd:ed:e4:d5:68:06:2f:93:
                    61:8b:91:64:96:bf:84:5f:c1:17:a4:ca:e2:78:82:
                    d8:b3:76:26:bb:26:3b:a3:4a:ff:d5:e4:0c:fc:05:
                    e8:a2:8b:96:fa:21:d8:d9:57:a6:67:53:ca:bd:40:
                    ac:11:a6:cd:a6:22:a6:7c:f1:db:0b:02:02:d4:64:
                    22:b5:cd:aa:7f:e9:4b:c0:0d:13:7d:7e:6a:9c:1f:
                    92:d8:bb:cf:45:25:b8:df:8c:bd:08:81:1e:be:30:
                    97:95:7a:2a:e4:16:ae:0f:b6:09:e9:0d:27:b2:37:
                    d8:ff:02:c4:5b:d8:a8:bd:4b:82:61:46:94:f7:7e:
                    ca:fc:2e:e8:47:97:c2:b8:cc:41:89:66:ed:af:d8:
                    67:a0:92:e8:0f:74:6a:f9:0a:f2:45:51:12:b7:fe:
                    a7:16:32:dd:4b:46:6a:db:05:f6:94:d9:d0:2e:e7:
                    bf:2c:d4:63:68:dd:f4:6b:41:ca:67:c7:db:2e:31:
                    7c:df:57:80:da:5f:db:e6:36:d1:d5:2b:8d:9d:16:
                    d3:e1:1a:ac:ab:19:af:7f:f9:8a:c3:1d:ec:89:72:
                    ba:d8:cf:f1:4b:c5:26:ae:5e:c7:82:f2:33:88:e0:
                    cc:27:ca:29:e0:09:f0:e2:72:06:de:67:ab:ef:59:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2D:2C:70:93:10:7A:25:38:AB:8E:06:69:32:BB:E8:6E:58:0F:0C
            X509v3 Authority Key Identifier:
                keyid:6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:95:02:90:b5:07:dd:db:c6:68:b2:65:01:44:8d:9a:8b:f4:
         df:1b:c4:e3:94:71:41:9a:19:8d:a2:19:76:84:d8:d6:88:d8:
         03:8d:84:14:9f:5a:a2:40:72:a6:f6:ec:bf:99:6a:29:f1:3c:
         59:00:f4:e4:7c:46:0f:83:92:5e:07:25:58:ee:cc:2c:1d:7a:
         fe:40:43:00:31:0e:fe:65:b4:50:2c:8d:22:aa:b3:5a:86:f4:
         f9:9f:43:bf:88:57:a9:da:aa:27:8f:84:68:2b:90:a2:b8:50:
         0a:94:23:76:85:54:00:12:ca:18:fc:7e:55:c7:77:ed:c8:ed:
         58:c4:be:bf:78:70:b2:70:8c:a4:01:4a:53:c3:66:9f:60:74:
         de:45:56:08:6e:3c:29:f9:4e:48:7f:4f:2c:7f:93:3d:32:3d:
         44:2e:e3:85:05:2a:25:11:f9:64:0b:8a:82:d4:49:28:5c:2d:
         dc:d0:2e:59:ea:d7:f8:f2:02:d8:16:94:04:a5:81:9c:1b:a4:
         1a:8a:b1:04:ca:6e:de:a5:04:92:fc:28:3b:bc:e0:09:94:25:
         3e:22:66:82:4d:23:df:55:89:fd:0a:4a:72:f3:9f:56:a5:4c:
         63:73:39:1b:4c:ea:71:c8:52:3a:93:02:ac:20:c4:13:2a:f4:
         d9:e6:58:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:50:54 2025 by rpki-client