Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
File:                     0mlPWs5d97eiscdbRLGLWndoOGg.mft (raw, json)
Hash identifier:          yeK+kQGnzvfjBr0/R6I457UL/mtedEGk6nIWRv/olQo=
Subject key identifier:   48:3F:80:4E:79:44:C6:F4:75:49:DE:DB:2D:C6:07:4B:C1:76:8C:F0
Authority key identifier: D2:69:4F:5A:CE:5D:F7:B7:A2:B1:C7:5B:44:B1:8B:5A:77:68:38:68
Certificate issuer:       /CN=F36C5814AF/serialNumber=D2694F5ACE5DF7B7A2B1C75B44B18B5A77683868
Certificate serial:       0C4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
Manifest number:          0C49
Signing time:             Thu 03 Apr 2025 00:59:54 +0000
Manifest this update:     Thu 03 Apr 2025 00:59:54 +0000
Manifest next update:     Sat 05 Apr 2025 00:59:54 +0000
Files and hashes:         1: 0mlPWs5d97eiscdbRLGLWndoOGg.crl (hash: NRhjzYcborGsQKoDJ/LqdyToP9Bmoj8GvuiNEVQ88tI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3150 (0xc4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5814AF
        Validity
            Not Before: Apr  3 00:59:54 2025 GMT
            Not After : Apr  5 00:59:54 2025 GMT
        Subject: CN=67eddd8a-3589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:d1:4e:d5:a0:2b:fc:4b:64:29:ea:ea:1f:
                    a9:b8:ef:70:9b:59:96:18:38:bf:a7:70:5a:8b:be:
                    1a:2e:51:29:5a:bd:8c:a1:59:d9:33:75:b9:9c:7e:
                    f8:a1:09:e7:d9:e4:3c:ba:1e:4b:c1:b5:05:7d:2f:
                    31:cf:26:62:41:dd:77:ec:f7:e8:d2:ef:a8:84:e8:
                    a7:12:cf:60:74:93:2b:42:22:9a:c3:9f:77:be:c3:
                    01:46:5f:87:70:90:68:9a:e0:d1:d5:e2:e4:4b:56:
                    1c:2b:b9:c3:b1:55:87:23:47:84:aa:89:8c:02:06:
                    64:e6:f2:ec:ed:d4:e8:5a:18:d3:06:03:85:73:7a:
                    d9:0b:34:ae:ec:62:39:8a:66:b8:ca:7e:61:51:fc:
                    99:6a:03:c4:7c:b4:78:92:74:1a:5b:ca:af:07:95:
                    e0:09:65:26:9f:bd:01:59:9b:46:a0:3c:aa:fd:5a:
                    bb:5f:0b:e0:0c:c5:a5:e5:57:07:d0:64:36:f0:1c:
                    63:fe:bc:69:2b:30:6f:6d:13:99:20:d8:91:4d:ab:
                    58:02:4a:f1:52:0b:1c:d9:56:f4:8f:41:e0:e7:e7:
                    75:78:c2:2c:e7:60:32:05:7b:e2:b8:b9:be:29:c5:
                    7d:da:1a:99:fa:bc:8c:93:7c:c9:09:6d:85:66:42:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3F:80:4E:79:44:C6:F4:75:49:DE:DB:2D:C6:07:4B:C1:76:8C:F0
            X509v3 Authority Key Identifier:
                keyid:D2:69:4F:5A:CE:5D:F7:B7:A2:B1:C7:5B:44:B1:8B:5A:77:68:38:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:61:6d:1b:ee:06:b7:c7:ea:86:48:49:66:a6:33:e1:4d:
         63:76:a6:5f:9a:c3:b4:1a:13:39:db:c8:f5:01:8c:85:36:0a:
         17:f0:3c:0c:c2:08:24:02:fb:7c:8d:de:d4:3f:c8:1f:5f:e1:
         a2:19:10:36:d6:a1:39:43:99:57:e9:0e:d8:c7:40:16:d2:f1:
         5c:eb:6f:b7:d2:98:12:95:a1:d4:42:a3:59:02:a8:26:f3:66:
         e7:b9:1b:3c:9d:13:9e:c6:28:07:8b:cb:70:66:5c:5b:9c:53:
         0b:b9:5b:e0:1b:1f:2c:d7:54:73:f0:6a:57:70:85:8b:cc:df:
         bd:db:44:7e:be:2e:68:d1:0e:1b:90:36:17:d7:fa:96:4b:2d:
         de:b2:6d:c6:9b:1d:2a:2d:eb:75:3f:a0:da:a0:a3:1b:1c:6d:
         64:11:1c:24:91:f0:bd:27:c4:67:00:b9:c4:b5:27:cb:5a:75:
         b6:ed:f5:2d:c2:8c:7f:3c:8e:9f:81:e0:ba:b9:66:f9:ed:50:
         f4:6e:7f:fb:1d:42:c4:93:f4:ed:87:14:23:c9:32:0a:3e:3a:
         bb:26:0a:67:52:6d:f0:07:82:c6:71:82:59:e0:51:90:40:2d:
         54:7d:d8:9a:9d:05:4d:d9:f2:16:80:b1:68:92:a2:80:08:39:
         c8:9e:b4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:15:23 2025 by rpki-client