Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
File:                     YmHXJNC9IPWdDi44xn6JVKbUy98.mft (raw, json)
Hash identifier:          TYKKvWzJrDA1hgTK2P3pgm5R0WHQjy/uxYyiDoD/QvI=
Subject key identifier:   85:35:29:A5:0B:E8:C3:16:1F:E5:51:3F:99:98:45:31:D2:DE:73:CD
Authority key identifier: 62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF
Certificate issuer:       /CN=F3610DE1AF/serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
Certificate serial:       04EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
Manifest number:          04E9
Signing time:             Tue 29 Apr 2025 02:45:44 +0000
Manifest this update:     Tue 29 Apr 2025 02:45:43 +0000
Manifest next update:     Thu 01 May 2025 02:45:43 +0000
Files and hashes:         1: YmHXJNC9IPWdDi44xn6JVKbUy98.crl (hash: 6tTOOJA5/lobLa66oFLfHhUL+/g5xnA2I9MVxdpMXiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 May 2025 02:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610DE1AF, serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
        Validity
            Not Before: Apr 29 02:45:43 2025 GMT
            Not After : May  1 02:45:43 2025 GMT
        Subject: CN=68103d58-c4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:06:22:82:84:4e:6d:ef:a6:b5:e6:f1:19:
                    83:8a:be:7b:d8:90:88:d6:c1:80:21:73:3d:f7:79:
                    79:3a:69:b0:02:03:cf:82:5a:b0:46:b0:b6:27:97:
                    e5:40:4c:47:b3:60:d2:5d:89:70:0d:b5:d0:7d:92:
                    80:52:1f:d9:3d:0a:26:09:e5:72:8d:99:94:5a:9b:
                    84:ee:fa:99:24:8a:39:4f:0a:d5:62:c9:e4:7d:24:
                    86:af:f3:b3:aa:2b:4b:b8:a2:ee:eb:72:1a:1e:72:
                    ab:91:02:f4:95:b9:2d:bb:58:7c:3c:18:40:c0:7b:
                    db:60:6b:63:0b:e4:6b:f0:5a:ab:13:34:8d:de:84:
                    f4:d4:b1:0b:f3:e6:bf:31:a3:c2:de:9c:c3:f5:60:
                    51:1e:6b:be:01:11:fb:bf:54:05:ae:bc:79:48:ec:
                    01:9a:20:c7:ff:e2:91:8e:24:ee:62:31:48:ae:2a:
                    bf:f8:03:b7:7f:bd:2b:9a:d5:6e:e2:5c:7d:d1:67:
                    1f:44:8b:9e:6f:03:d3:fa:85:4d:63:5b:de:da:38:
                    85:1d:52:e6:3a:d4:f9:59:db:10:a5:c6:af:b4:5b:
                    df:52:30:15:6b:99:97:ad:68:a4:13:4e:c8:84:70:
                    96:4a:df:13:96:95:f3:22:4e:d1:a2:7a:c0:aa:60:
                    56:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:35:29:A5:0B:E8:C3:16:1F:E5:51:3F:99:98:45:31:D2:DE:73:CD
            X509v3 Authority Key Identifier:
                keyid:62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bf:ea:81:26:6e:82:c9:1e:e6:13:50:ba:95:45:86:57:ba:
         11:39:9b:52:18:03:66:82:f0:37:a9:d4:ab:ba:6a:d3:40:8e:
         87:4b:bb:7f:3a:9f:a1:8d:4f:9e:b5:b4:59:68:96:f5:7d:14:
         84:68:69:b3:76:f4:1d:99:0e:7b:b1:42:16:78:a5:96:b9:64:
         ac:46:53:d3:8e:cb:2b:28:9c:21:94:50:2b:cb:f2:83:d3:b9:
         ec:bb:e5:cc:c0:0a:50:ac:df:3f:7e:0a:62:d6:91:e4:ad:04:
         b3:ea:79:e5:9a:a6:49:fe:90:c7:7a:e5:80:1a:71:4a:5b:8c:
         fc:82:8e:d4:26:ae:31:1f:3f:57:d1:75:2d:8c:7c:d8:e2:ba:
         9d:6e:93:17:4b:50:aa:37:6b:c9:27:5a:0f:08:c6:42:90:85:
         f3:2f:e3:93:1c:fc:b7:56:48:60:9f:aa:83:22:21:9a:fb:a7:
         aa:41:91:30:aa:6b:f7:6d:37:ce:1b:ae:7d:39:15:18:d0:8f:
         eb:c9:7d:a1:85:99:9b:0b:d0:a1:53:92:1f:4f:65:f0:35:63:
         06:d7:d7:d4:a9:e8:21:df:36:0a:55:61:93:2e:6b:38:58:04:
         be:62:ab:6f:67:2f:bd:64:75:55:3c:d4:78:3d:56:da:bc:d4:
         4b:44:fd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:30:56 2025 by rpki-client