Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
File:                     Rd8OHH-lNNrKIJKaup5jKPur-1E.mft (raw, json)
Hash identifier:          LQ65+t1HI/pl8dPFYgahVt0etSgtKIPEe8+kJyLMjao=
Subject key identifier:   41:C7:D1:5F:BD:A5:5B:10:03:B5:59:A3:EB:C3:B7:14:98:A4:E0:96
Authority key identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
Certificate issuer:       /CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Certificate serial:       0407
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
Manifest number:          041A
Signing time:             Wed 04 Jun 2025 03:12:36 +0000
Manifest this update:     Wed 04 Jun 2025 03:12:35 +0000
Manifest next update:     Fri 06 Jun 2025 03:12:35 +0000
Files and hashes:         1: Rd8OHH-lNNrKIJKaup5jKPur-1E.crl (hash: Orzl4XH3sxSHdlt6ljTZQbHY/pByBcPVD3huUEPKdJg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031 (0x407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE1C1AF, serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
        Validity
            Not Before: Jun  4 03:12:35 2025 GMT
            Not After : Jun  6 03:12:35 2025 GMT
        Subject: CN=683fb9a4-2101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:b6:c3:9d:9d:8b:32:06:a5:ac:6a:93:12:
                    0e:28:2e:5e:10:9c:96:9a:6d:f5:80:ba:c2:4f:ba:
                    5f:5d:77:8f:4a:47:8a:06:99:2e:d2:e9:f8:a5:b3:
                    86:e6:f3:a4:ea:3e:30:61:d8:44:b0:c3:9b:15:e6:
                    55:6c:ec:a2:6a:52:6b:e4:dc:6b:9b:56:0d:60:9d:
                    a6:98:6f:e7:97:92:91:29:0e:d8:fb:e5:e6:bb:fd:
                    38:9e:25:d5:2d:32:a0:c1:1a:0e:0b:21:6c:83:94:
                    1a:30:94:17:27:02:99:03:f6:32:6b:69:6f:01:1a:
                    81:45:db:34:49:6e:5c:17:ec:6b:1f:81:84:1c:04:
                    d2:4c:0c:18:8a:57:2f:82:62:95:59:88:20:59:cb:
                    99:79:37:80:fa:51:49:9c:af:9d:9c:6d:7b:ec:3e:
                    93:98:f8:3b:4d:01:9e:7b:0b:85:42:50:f7:e5:82:
                    a9:d5:6b:a4:51:5a:59:68:ac:1e:23:9b:1c:b0:c5:
                    d7:0d:ad:97:9d:29:fb:b4:b1:0e:78:b6:64:b1:a3:
                    ef:77:89:fb:95:c2:11:7e:74:e0:f1:f7:8e:43:69:
                    e6:ed:36:96:e8:5d:cf:35:ce:d5:e6:23:30:f5:bf:
                    16:2a:a4:b7:8f:df:2d:49:ba:aa:72:c5:76:5c:95:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C7:D1:5F:BD:A5:5B:10:03:B5:59:A3:EB:C3:B7:14:98:A4:E0:96
            X509v3 Authority Key Identifier:
                keyid:45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:af:d4:1d:c2:1c:d7:56:5c:49:82:3a:a7:39:e8:c0:d7:12:
         96:07:0a:1d:c3:19:a2:48:79:fe:37:53:92:75:9f:6f:75:a5:
         e4:04:c5:ee:aa:c0:b5:c3:5b:8a:4e:ad:c8:ba:d9:cc:75:7d:
         ff:50:8d:ab:96:8f:fe:e8:a3:ae:ea:a9:69:6e:81:e2:ce:1b:
         e2:13:6e:c3:87:2a:1c:12:7a:01:65:df:24:95:2e:52:43:fa:
         ea:b6:d2:5c:cb:e9:fc:3d:b4:01:d3:82:d8:05:b7:a2:7d:15:
         8f:52:a0:4e:9f:d1:f4:18:46:b9:52:d7:03:3d:22:e9:7f:98:
         68:e4:70:08:a0:5d:b5:82:29:9e:a6:c6:20:0e:a6:a6:60:48:
         cf:71:47:e7:f1:8b:62:ef:2b:ae:e6:e7:a5:b9:25:ff:59:ca:
         f7:6c:db:5c:25:38:88:b8:08:40:17:88:32:bd:8d:5d:76:ea:
         4e:e1:a6:59:5e:e5:b4:a4:ed:90:7c:ed:04:25:2a:8e:3d:15:
         28:d3:db:cc:e2:83:d6:53:ac:1a:f3:4d:89:53:fd:50:10:11:
         08:a3:7d:82:e8:f7:60:ed:f4:04:89:33:80:5f:b6:4b:ed:17:
         04:45:05:ee:03:b5:59:35:aa:73:a6:d4:4b:5e:2a:b2:4d:cc:
         bb:fe:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:29:57 2025 by rpki-client