Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
File:                     n10GlKN56yP6tAip1LvVCOGqOSI.mft (raw, json)
Hash identifier:          Qyrg3fcAl5EnP2NV9BGy90iS2oIFzcYtft33zeO7vAE=
Subject key identifier:   EF:28:48:FB:D2:A9:CE:80:5A:3A:21:04:9B:2F:56:78:95:87:BF:39
Authority key identifier: 9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22
Certificate issuer:       /CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
Certificate serial:       023E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
Manifest number:          023A
Signing time:             Sat 05 Apr 2025 02:39:38 +0000
Manifest this update:     Sat 05 Apr 2025 02:39:38 +0000
Manifest next update:     Mon 07 Apr 2025 02:39:38 +0000
Files and hashes:         1: n10GlKN56yP6tAip1LvVCOGqOSI.crl (hash: 0+/RKT91BWYkpB/2sZu/PzzgRE6lqXeaeTniZpDLf1o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                          rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DRI
        Validity
            Not Before: Apr  5 02:39:38 2025 GMT
            Not After : Apr  7 02:39:38 2025 GMT
        Subject: CN=67f097ea-2803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:06:53:9b:48:07:0c:c6:86:9c:5b:89:95:
                    50:a7:58:92:e0:14:12:c2:7a:59:d5:2b:fe:78:74:
                    b7:0a:e7:b8:05:3e:be:25:a1:f2:b4:ee:64:53:fa:
                    d9:43:f1:18:9f:94:69:f0:5f:c4:a5:38:e8:05:ee:
                    6f:bb:a1:73:df:87:4d:45:13:cf:cb:3b:22:3c:02:
                    f5:b3:f4:1c:6a:03:c6:76:6c:e6:f1:5c:69:53:f1:
                    11:ab:b0:95:7a:11:25:2d:6a:cf:38:3e:aa:53:e0:
                    a1:90:7c:91:7c:bd:33:17:d2:af:96:ff:82:65:b9:
                    33:4e:15:c6:7a:59:95:d6:42:2a:09:b4:e2:1e:48:
                    10:2b:a0:ce:14:5d:e9:f0:3c:94:3a:f9:79:f3:73:
                    c8:10:0a:cd:36:cc:a9:7e:98:bb:9c:70:e1:f8:54:
                    d6:be:5f:7e:9c:93:35:3e:4e:31:a3:ba:cc:03:f0:
                    0c:4c:3b:c4:c5:08:56:12:cd:51:de:93:98:95:08:
                    89:79:5e:10:82:68:5f:35:af:73:d9:b6:de:24:f6:
                    54:72:4a:cb:f8:35:43:92:93:49:27:23:83:ec:b5:
                    cb:dd:42:1d:ff:ec:7a:42:43:95:a3:3f:aa:f7:f7:
                    6d:7e:09:b8:56:13:a1:a8:82:45:f0:23:f5:6a:ac:
                    c0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:28:48:FB:D2:A9:CE:80:5A:3A:21:04:9B:2F:56:78:95:87:BF:39
            X509v3 Authority Key Identifier:
                keyid:9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:03:75:5b:de:14:d7:49:00:12:05:98:b4:02:69:b5:e5:82:
         f4:74:4f:18:5b:1c:da:76:fe:a8:50:a0:70:66:6c:73:ad:8c:
         36:43:93:8b:1b:1a:90:88:d9:d8:89:e5:11:b9:92:ce:86:76:
         04:a0:13:2b:47:a4:8f:9e:d2:a7:f8:c8:85:7f:36:ac:2d:4b:
         ed:77:93:dc:2f:e7:9b:8f:df:ea:54:d2:dc:c6:77:a1:8e:93:
         09:37:8c:af:c8:75:aa:5a:6f:6b:a8:92:e5:5d:77:8c:93:38:
         28:b7:23:70:c7:1d:74:a6:3d:41:20:c2:49:f9:ab:81:fd:20:
         d6:52:69:fc:1c:2f:16:ec:7f:80:ea:3a:6d:d2:f8:0b:be:2b:
         03:a2:ec:60:bf:df:15:f0:5d:25:98:c9:07:5f:17:c6:8c:ea:
         df:4b:23:8e:c3:41:14:11:a7:81:57:a9:11:3a:fe:76:48:1f:
         f2:35:fd:86:1e:b6:4b:a8:5e:d9:9c:36:b0:8e:7a:c4:09:0f:
         93:13:3b:49:84:5c:e6:c9:7a:98:69:ed:ef:73:63:04:17:b3:
         9d:af:17:51:41:3c:56:c5:0b:3e:02:a2:a1:ed:fe:ea:ea:34:
         49:a8:99:ed:f1:46:77:cb:d1:b4:bd:d6:b2:88:94:77:c9:99:
         24:76:26:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:08 2025 by rpki-client