Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File:                     xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier:          2TO9qiMUBKR2+MPtqdh6ZVuvosOl+f5fI8JoXyXXS6I=
Subject key identifier:   23:C9:5C:F6:02:78:42:1F:29:7C:2C:43:2F:E9:F9:74:2E:2C:CA:77
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer:       /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial:       0484
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number:          0484
Signing time:             Fri 06 Jun 2025 02:54:47 +0000
Manifest this update:     Fri 06 Jun 2025 02:54:46 +0000
Manifest next update:     Sun 08 Jun 2025 02:54:46 +0000
Files and hashes:         1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: 1uIQGJq6ICMoOZsnbFbFkkVga1Id9okjumuSOCuPV+g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB1A3AF, serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
        Validity
            Not Before: Jun  6 02:54:46 2025 GMT
            Not After : Jun  8 02:54:46 2025 GMT
        Subject: CN=68425877-9bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:04:47:61:f5:44:20:2a:d2:e8:97:e7:4b:
                    58:47:6f:87:e8:7f:a9:58:fb:d4:5b:1b:d8:2d:b3:
                    d7:6d:27:1f:a9:84:b4:7d:7e:b4:be:81:2c:49:6d:
                    5f:b1:51:68:de:c6:11:2b:ec:b9:20:79:86:04:de:
                    5e:77:00:87:29:20:36:4e:b2:28:c0:a2:b8:de:3a:
                    43:1b:e8:70:95:f6:c7:4c:fe:db:60:c3:84:d4:1f:
                    ba:65:1d:5b:e1:fb:cb:e8:bf:3c:37:fe:a1:bf:16:
                    02:f6:8f:b1:cb:b2:d0:87:09:2f:14:ff:13:3b:a3:
                    7b:8c:5d:11:18:3f:6c:70:a1:26:22:af:a2:8d:42:
                    de:54:17:25:3a:35:83:06:10:b4:e9:71:da:1e:22:
                    dc:e5:58:76:2d:f0:de:32:5a:fb:ab:fb:ed:d4:d4:
                    1d:fb:9d:7e:16:20:b3:5c:d0:53:4d:5a:17:ec:8e:
                    e6:11:56:81:c1:18:33:db:52:5d:4e:02:77:a5:00:
                    a5:b1:2a:cf:9c:84:22:24:e4:1c:90:6e:be:5b:13:
                    a2:20:fe:4f:8a:1d:19:3b:59:01:aa:6b:62:0c:fa:
                    51:25:d8:01:97:28:a0:38:0b:ae:0a:e6:9a:b8:62:
                    4c:e7:c3:8f:06:f6:c3:7e:a0:26:70:be:65:cd:be:
                    0e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C9:5C:F6:02:78:42:1F:29:7C:2C:43:2F:E9:F9:74:2E:2C:CA:77
            X509v3 Authority Key Identifier:
                keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:46:7e:6b:fe:14:0c:ee:67:96:a3:b6:1f:0d:74:ae:49:70:
         3b:74:9a:04:7e:1f:5a:18:26:5a:2f:f1:03:9a:fd:40:d1:f0:
         3f:4a:da:9c:b9:77:57:53:5e:c1:11:6f:f2:80:47:da:a4:f4:
         53:f9:17:7c:4b:14:54:0e:a2:b3:99:8b:b5:ff:be:8a:8c:af:
         5b:b0:7d:2f:27:41:d4:60:7c:f9:1c:8c:82:af:44:b8:bf:37:
         42:30:97:49:18:bd:21:86:61:e9:bb:79:dd:8a:6b:8e:78:8d:
         e7:ad:30:95:df:8e:12:39:e2:fb:25:0a:86:00:31:a4:98:5e:
         c5:90:ef:b0:ff:25:4e:01:ad:be:a8:dd:ed:40:3b:e4:71:66:
         2d:94:d0:54:73:b2:49:7d:0e:f1:9d:5b:1d:16:a4:9a:4d:e8:
         72:21:0f:a6:da:9c:c1:74:9e:6a:ab:b7:92:06:49:d7:37:fd:
         5d:e2:5d:c7:a7:9c:9c:08:7c:47:96:4a:f8:90:dd:c4:56:72:
         35:50:41:9c:4c:eb:c5:65:a4:57:70:67:6c:18:54:02:6c:82:
         ee:63:d0:b9:9d:75:96:ed:8a:c4:0d:7e:71:50:44:a9:66:8b:
         e8:8c:d9:20:da:65:1a:d8:ea:eb:ab:dd:49:75:44:87:8f:46:
         2c:3e:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:48:10 2025 by rpki-client