Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
File:                     AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft (raw, json)
Hash identifier:          K7t/BI9IuWlApPzuD9xw6H8+kDF8t8rqKf/GTtalQVA=
Subject key identifier:   65:41:1F:16:4C:5E:DE:7C:07:2A:72:5D:CD:C0:38:7E:C8:15:AC:32
Authority key identifier: 02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4
Certificate issuer:       /CN=F36F5D39AR/serialNumber=020A4AF0D0FE11B703D11F397A5363CD0FBA13A4
Certificate serial:       021F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
Manifest number:          021E
Signing time:             Sun 20 Apr 2025 04:06:57 +0000
Manifest this update:     Sun 20 Apr 2025 04:06:56 +0000
Manifest next update:     Tue 22 Apr 2025 04:06:56 +0000
Files and hashes:         1: AgpK8ND-EbcD0R85elNjzQ-6E6Q.crl (hash: 8B5Eh8S/8T8iMQiukIM/cy/OToQwb7+zl50SQqyBDVo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
                          rsync://rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Apr 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5D39AR, serialNumber=020A4AF0D0FE11B703D11F397A5363CD0FBA13A4
        Validity
            Not Before: Apr 20 04:06:56 2025 GMT
            Not After : Apr 22 04:06:56 2025 GMT
        Subject: CN=680472e1-b66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:f0:be:9d:3d:c3:48:f5:51:aa:76:84:4d:
                    12:95:df:d4:7d:a8:08:99:65:00:e4:5f:71:1d:14:
                    66:a9:69:df:ff:ba:c5:b7:71:2f:36:d9:95:08:c2:
                    30:1c:64:19:b2:f1:2d:dc:55:70:e8:a0:bd:bc:46:
                    db:6e:d3:52:96:0d:71:8c:25:10:b9:7a:7f:e7:0c:
                    53:61:5c:2f:d6:94:f3:b1:f0:8e:2c:37:b6:d0:f5:
                    7f:19:e7:a0:92:37:c0:07:f0:4f:24:83:2e:b2:3b:
                    28:1e:89:3b:ab:6a:2c:18:0c:89:56:5f:f3:8e:2c:
                    58:48:ee:65:79:9c:45:12:ca:e1:f8:39:d2:9b:3e:
                    e7:92:24:16:ef:16:7e:40:6d:49:00:1c:11:7e:79:
                    95:6c:1a:d1:a5:41:c8:3b:c7:8e:a9:85:f9:9c:de:
                    c0:f3:10:3c:38:6e:90:ac:31:17:08:21:52:0a:3f:
                    5f:18:02:af:76:20:fe:4e:58:f0:1d:d3:3c:d7:64:
                    67:a0:57:cc:ab:07:99:66:01:90:62:1f:ea:e3:05:
                    47:17:c3:63:da:d4:d4:ef:5e:62:96:11:7d:af:fb:
                    ef:64:ed:85:4a:9b:c9:53:17:c7:98:5a:3d:93:f0:
                    9b:81:14:53:03:dc:8f:a5:63:64:97:1d:1f:b2:a7:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:41:1F:16:4C:5E:DE:7C:07:2A:72:5D:CD:C0:38:7E:C8:15:AC:32
            X509v3 Authority Key Identifier:
                keyid:02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a3:80:a0:21:4e:81:08:f8:f9:00:d7:c7:66:fd:37:ce:ee:
         61:fe:f9:49:6a:9b:c1:6f:b2:a2:61:26:f6:8e:10:48:19:be:
         bc:80:63:64:e5:43:8d:51:d6:19:b9:5b:88:4a:52:46:32:9c:
         23:af:1a:ee:77:32:32:ef:80:55:78:5b:a9:3f:c8:44:24:ea:
         84:f0:03:64:70:af:84:db:62:d9:d4:fd:f9:bc:d6:cb:75:a0:
         71:f5:02:8d:e2:97:b9:b1:8a:0a:47:16:32:3c:e2:c7:1f:cc:
         f7:f9:92:d6:73:f8:98:e1:db:de:e6:41:40:73:23:51:c0:da:
         46:b5:12:f6:4f:00:f0:ec:92:22:e5:a6:10:68:7a:28:b0:fc:
         ad:1a:cd:3c:fd:10:60:52:7e:52:9b:54:40:da:b2:6a:ea:1d:
         73:ee:07:32:4f:3f:31:68:b7:38:62:80:71:40:a6:89:e3:71:
         75:c8:54:61:17:3f:6e:51:bb:3f:63:10:47:1d:b6:a1:ab:3a:
         26:25:5b:df:7d:c1:33:27:6f:eb:f4:a3:79:72:cf:04:4b:b8:
         b0:c0:8d:60:f5:85:4c:0e:1b:cc:3d:e6:9e:d8:b1:a1:e8:20:
         d8:1d:d1:0c:e2:85:80:ff:90:df:28:dc:55:44:75:85:f3:99:
         60:c4:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:21:25 2025 by rpki-client