Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File:                     hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier:          SFpOfGBefyP9pm9vAeKc4DMw82N0QBFq5FaPitGZ46o=
Subject key identifier:   D4:D3:B0:B1:51:65:9B:AB:B4:87:AE:7B:C8:C5:FA:4A:3B:A0:48:47
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer:       /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial:       0372
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number:          0371
Signing time:             Sun 08 Jun 2025 03:28:50 +0000
Manifest this update:     Sun 08 Jun 2025 03:28:49 +0000
Manifest next update:     Tue 10 Jun 2025 03:28:49 +0000
Files and hashes:         1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: SR5cZI0rNvSnEcpjZ0a/gbjlp/78h/pAu3IaMTCaWfQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
        Validity
            Not Before: Jun  8 03:28:49 2025 GMT
            Not After : Jun 10 03:28:49 2025 GMT
        Subject: CN=68450372-c1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:23:83:7b:76:a1:f4:47:e0:d1:9d:99:27:
                    ac:bf:4e:ac:24:f6:f8:66:74:7b:d0:79:00:91:f1:
                    ad:e5:ef:6e:9e:e8:96:fd:fa:f9:17:a4:6d:fa:26:
                    58:31:39:e6:bb:50:34:9c:23:b1:50:9e:70:f1:8b:
                    a0:33:54:40:58:a5:ad:39:80:1f:36:a1:c0:1f:36:
                    c0:01:de:72:cf:4c:0b:ae:65:a2:f0:1f:45:66:20:
                    64:27:99:b5:21:43:29:b9:6e:8d:c3:83:ff:60:fa:
                    76:fb:19:4e:7f:a2:d9:61:f3:ec:88:14:32:b3:60:
                    26:ce:f8:c2:9d:5f:09:e9:b5:4e:57:7c:6b:66:b1:
                    f8:05:2c:25:68:3d:54:e4:f1:80:72:4b:bd:cc:5a:
                    61:6a:ff:34:3e:cc:56:2c:12:9c:87:d7:df:fb:13:
                    27:a3:90:c0:ba:7d:09:dd:f2:74:5a:c2:4e:67:0f:
                    dc:98:a0:e7:b8:d2:0f:ab:84:f7:74:ac:fd:d7:eb:
                    ca:79:55:91:d7:0f:ad:74:ec:8c:5b:51:b9:a8:a5:
                    e9:25:c0:c9:76:cb:ea:b5:93:70:d4:3f:c9:ce:12:
                    56:37:ea:6a:dc:e9:dd:c0:2e:1d:b1:5a:c9:5b:d4:
                    d2:03:58:f2:32:96:1a:33:f8:9c:2d:47:07:05:89:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D3:B0:B1:51:65:9B:AB:B4:87:AE:7B:C8:C5:FA:4A:3B:A0:48:47
            X509v3 Authority Key Identifier:
                keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:60:68:29:ec:9f:08:af:df:24:10:44:79:85:61:ac:6a:b3:
         27:5d:9a:0e:d6:9a:98:8f:de:54:9f:e6:f3:ed:37:fc:e9:f6:
         de:2c:5d:a0:30:6b:4e:95:d9:3a:9a:c0:f4:94:eb:19:6e:05:
         54:2f:ed:da:8b:86:10:7c:e8:86:34:59:c3:ee:19:0e:12:58:
         a2:1b:52:6a:9e:48:6e:16:e8:19:aa:fa:2c:92:f4:26:93:2b:
         53:7b:a7:8d:6b:19:b2:5d:d2:0e:df:88:db:0d:ba:d9:59:9e:
         1a:6e:dd:24:88:4d:d1:b8:78:a7:18:d8:c3:68:8f:e7:54:3b:
         0c:59:56:c1:ea:3b:78:42:02:85:8b:04:27:7e:73:de:89:c0:
         10:34:0f:f9:a2:c7:e0:ab:3e:70:35:4d:cf:ae:12:98:1b:85:
         81:a5:36:3b:c6:c1:13:65:09:bc:e0:40:44:95:f5:dd:ad:46:
         44:46:8f:c9:87:50:71:90:5f:4a:c4:23:6c:7d:48:18:05:14:
         91:54:a3:00:47:c1:e3:9f:f8:2c:c6:c7:bc:e8:a4:c5:ac:9c:
         b9:b1:c4:50:6b:7c:80:b7:03:ea:6e:47:f0:1a:7f:14:4f:ad:
         f9:84:b7:b5:3e:89:3e:3a:d4:06:28:d6:c2:28:86:2f:88:56:
         1f:be:c5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:29:08 2025 by rpki-client